R12 Agent will not start on AIX - Failed to initialize IBMJCEPlus provider

book

Article ID: 221645

calendar_today

Updated On:

Products

CA Workload Automation AE - System Agent (AutoSys)

Issue/Introduction

A new install of the R12 System Agent will not start on AIX. The following error is logged to <AGENT_HOME>/nohup.stderr...

Exception in thread "MainThread" java.lang.ExceptionInInitializerError
        at java.lang.J9VMInternals.ensureError(J9VMInternals.java:146)
        at java.lang.J9VMInternals.recordInitializationFailure(J9VMInternals.java:135)
        at cybermation.library.security.k.a(Unknown Source)
        at cybermation.library.security.k.a(Unknown Source)
        at cybermation.agent.CybAgentDriver.runApplication(Unknown Source)
        at cybermation.agent.CybAgentDriver.main(Unknown Source)
Caused by: java.security.ProviderException: Failed to initialize IBMJCEPlus provider
        at com.ibm.crypto.plus.provider.IBMJCEPlus.a(IBMJCEPlus.java:203)
        at com.ibm.crypto.plus.provider.IBMJCEPlus.e(IBMJCEPlus.java:192)
        at com.ibm.crypto.plus.provider.IBMJCEPlus.a(IBMJCEPlus.java:58)
        at com.ibm.crypto.plus.provider.h.run(h.java:4)
        at java.security.AccessController.doPrivileged(AccessController.java:682)
        at com.ibm.crypto.plus.provider.IBMJCEPlus.<init>(IBMJCEPlus.java:202)
        at java.lang.J9VMInternals.newInstanceImpl(Native Method)
        at java.lang.Class.newInstance(Class.java:2022)
        at sun.security.jca.ProviderConfig$2.run(ProviderConfig.java:233)
        at sun.security.jca.ProviderConfig$2.run(ProviderConfig.java:218)
        at java.security.AccessController.doPrivileged(AccessController.java:682)
        at sun.security.jca.ProviderConfig.doLoadProvider(ProviderConfig.java:218)
        at sun.security.jca.ProviderConfig.getProvider(ProviderConfig.java:199)
        at sun.security.jca.ProviderList.loadAll(ProviderList.java:294)
        at sun.security.jca.ProviderList.removeInvalid(ProviderList.java:311)
        at sun.security.jca.Providers.getFullProviderList(Providers.java:181)
        at java.security.Security.insertProviderAt(Security.java:371)
        at cybermation.library.security.k.a(Unknown Source)
        at cybermation.library.security.k.<init>(Unknown Source)
        at cybermation.library.security.k.<init>(Unknown Source)
        at cybermation.library.security.k$a.<clinit>(Unknown Source)
        ... 4 more
Caused by: java.security.ProviderException: jgskit (Not found in java.library.path)
        at com.ibm.crypto.plus.provider.IBMJCEPlus.e(IBMJCEPlus.java:132)
        ... 23 more

Cause

This error occurs on AIX platform after upgrading Java to 8.0.6.25 or later.   

The problem is seen in 8.0.6.25 but not in earlier SR levels, it happens because IBMJCEPlus is required for TLS 1.3 support, which was added in 8.0.6.25. Prior to this, the JVM would not try to load libjgskit.so (and libjgsk8iccs_64.so) unless IBMJCEPlus was explicitly enabled.

Environment

Release : 12

Component : CA Workload Automation System Agent

Resolution

Edit the <AGENT_HOME>/cybAgent file and find the lind that sets the LIBPATH variable. Add the following path to the LIBPATH variable...

<AGENT_HOME>/jre/lib/icc

You will need to replace <AGENT_HOME> with the actual install path of the agent.