ERROR [com.netegrity.crypto.AESCBCPKCS5PaddingHandler] (MSC service thread 1-2) Keyfile '/com/netegrity/config/keys/FIPSkey.dat' not found. Unable to get secret key: /com/netegrity/config/keys/FIPSkey.dat (No such file or directory)

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Identity Suite

Issue/Introduction

Trying to start Identity Manager that is installed with FIPS after an upgrade fails with the following error in the server.log file.

12:53:42,656 ERROR [com.netegrity.crypto.AESCBCPKCS5PaddingHandler] (MSC service thread 1-2) Keyfile '/com/netegrity/config/keys/FIPSkey.dat' not found. Unable to get secret key: /com/netegrity/config/keys/FIPSkey.dat (No such file or directory)
12:53:42,656 ERROR [com.netegrity.crypto.AESCBCPKCS5PaddingHandler] (MSC service thread 1-6) Keyfile '/com/netegrity/config/keys/FIPSkey.dat' not found. Unable to get secret key: /com/netegrity/config/keys/FIPSkey.dat (No such file or directory)
12:53:42,657 ERROR [com.netegrity.crypto.AESCBCPKCS5PaddingHandler] (MSC service thread 1-7) Keyfile '/com/netegrity/config/keys/FIPSkey.dat' not found. Unable to get secret key: /com/netegrity/config/keys/FIPSkey.dat (No such file or directory)
12:53:42,657 ERROR [com.netegrity.crypto.AESCBCPKCS5PaddingHandler] (MSC service thread 1-6) Exception caught while decrypting.
12:53:42,657 ERROR [com.netegrity.crypto.AESCBCPKCS5PaddingHandler] (MSC service thread 1-7) Exception caught while decrypting.

 

Environment

All Identity Manager

Resolution

Under JBoss/Wildfly folder check the /modules/com/ca/iam/crypto/main/module.xml file to see if within the <resources> section of the file that there is a reference to config and if not then update the file to add the reference such as shown below and then restart JBoss/Wildfly:

  <resources>

        <resource-root path="bc-fips.jar"/>

        <resource-root path="config"/>

  </resources>