CAUAJM_E_60199 Unable to generate the CA EEM certificate - Failed to set SAF location

Products

• CA Workload Automation AE

Issue/Introduction

When trying to onfigure autosys EEM setting in autosys_secure
the following errors are seen:

CAUAJM_E_10436 Security server unreachable or invalid authentication certificate file.
CAUAJM_E_10434 Error initiating security session.
[EE_BADOBJECT Bad Object]
[Attach Error: Failed to set SAF location]
[CertificateReader::loadPEM  - cannot read certificate]

Do you wish to regenerate the CA EEM certificate and attempt to reconnect? [1(yes)/0(no)]: 

And when we attempt to regenerate the certificate we see:

CAUAJM_E_10443 Security server unreachable or invalid credentials.
CAUAJM_E_10434 Error initiating security session.
CAUAJM_E_10437 Detailed Error Information:

[EE_SAFFAILED Failed to set SAF location]
[Attach Error: Failed to set SAF location]

CAUAJM_E_60199 Unable to generate the CA EEM certificate. See previous error messages for details.

CAUAJM_E_60196 An error occurred attempting to set CA EEM instance security. Instance remains under NATIVE security control.

Environment

Release : 11.3.6

Component : WORKLOAD CONTROL CENTER

Resolution

Reset the EEM information in the db and make sure the AUTOSERV value is correct
delete from aedbadmin.ujo_keymaster where hostid = 'SECURITY';
update aedbadmin.ujo_alamode set int_val=0 where type = 'JOB';
update aedbadmin.ujo_alamode set int_val=0 where type = 'EVT';
delete from aedbadmin.ujo_alamode where type = 'SEC';
delete from aedbadmin.ujo_blobs where blob_id = 'SAFECERT';
commit;

select str_val,type from aedbadmin.ujo_alamode where type like 'AUTO%';

Confirm the variables $AUTOSERV and $AUTOUSER are correct.
Confirm the $AUTOUSER/eiam* and logger* files on the as_server machines contain the correct AUTOSERV.
Restart the as_servers.