Error: Agent Bad security handshake attempt. Handshake error: 3154

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• SITEMINDER

Issue/Introduction

When running 2 Policy Servers, and when the Web Agent tries to connect for the first time, the Policy Server returns the error:

Bad security handshake attempt. Handshake error: 3154

Registering the Web Agent again successfully with the following command:

# smreghost -i ps.example.com:44441,44442,44443 -u "<username>" -p "<password>" -hn example -hc hco -cf COMPAT -f /{home_web_agent}/config/SmHost.conf -o
Host Registration written to '/{home_web_agent}/config/SmHost.conf'.

but the Policy Server keeps showing the same handshake error above. 

 

Environment

 

  Policy Server 12.8SP1CR03 on RedHat 6;
  Web Agent 12.52SP1CR09 in IIS 8.5 on Windows 2012R2;

 

Resolution

 
Restart all the Policy Servers and the affected Web Agents to solve the issue.