Identity and Access Manager service not starting: is not writable or not a file.

Products

• Service Virtualization

Issue/Introduction

IAM service unable to start and gives below error:

IAM_HOME :/opt/lisa/CA/DevTest/IdentityAccessManager/
Config server url not provided. Using properties from install location
java.lang.RuntimeException: Error while initializing vault
        at com.ca.devtest.acl.launcher.VaultUtil.<init>(VaultUtil.java:28)
        at com.ca.devtest.acl.launcher.IaAMPropertiesLoader.loadIaAMProperties(IaAMPropertiesLoader.java:29)
        at com.ca.devtest.acl.launcher.DevTestACL.main(DevTestACL.java:27)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:498)
        at com.exe4j.runtime.LauncherEngine.launch(Unknown Source)
        at com.install4j.runtime.launcher.UnixLauncher.main(Unknown Source)
Caused by: java.lang.Exception: WFLYSEC0038: Keystore [/opt/lisa/CA/DevTest/IdentityAccessManager/vault/vault.keystore] is not writable or not a file.
        at org.jboss.as.security.vault.VaultSession.validateKeystoreURL(VaultSession.java:122)
        at org.jboss.as.security.vault.VaultSession.validate(VaultSession.java:107)
        at org.jboss.as.security.vault.VaultSession.<init>(VaultSession.java:100)
        at com.ca.devtest.acl.launcher.VaultUtil.<init>(VaultUtil.java:25)
        ... 8 more

Cause

As per the error stack trace, the vault.keystore file is not accessible/writable to the user who is starting IAM component.

Environment

Release : 10.6

Component : CA Service Virtualization

Resolution

Check the user permissions to allow write access to all files of the installation and also try to use the user who installed IAM/DevTest components on the machine.