R12 Agent will not start on AIX - Failed to initialize IBMJCEPlus provider

Products

• CA Workload Automation AE - System Agent (AutoSys)

Issue/Introduction

A new install of the R12 System Agent will not start on AIX. The following error is logged to <AGENT_HOME>/nohup.stderr...

Exception in thread "MainThread" java.lang.ExceptionInInitializerError

        at java.lang.J9VMInternals.ensureError(J9VMInternals.java:146)

        at java.lang.J9VMInternals.recordInitializationFailure(J9VMInternals.java:135)

        at cybermation.library.security.k.a(Unknown Source)

        at cybermation.library.security.k.a(Unknown Source)

        at cybermation.agent.CybAgentDriver.runApplication(Unknown Source)

        at cybermation.agent.CybAgentDriver.main(Unknown Source)

Caused by: java.security.ProviderException: Failed to initialize IBMJCEPlus provider

        at com.ibm.crypto.plus.provider.IBMJCEPlus.a(IBMJCEPlus.java:203)

        at com.ibm.crypto.plus.provider.IBMJCEPlus.e(IBMJCEPlus.java:192)

        at com.ibm.crypto.plus.provider.IBMJCEPlus.a(IBMJCEPlus.java:58)

        at com.ibm.crypto.plus.provider.h.run(h.java:4)

        at java.security.AccessController.doPrivileged(AccessController.java:682)

        at com.ibm.crypto.plus.provider.IBMJCEPlus.<init>(IBMJCEPlus.java:202)

        at java.lang.J9VMInternals.newInstanceImpl(Native Method)

        at java.lang.Class.newInstance(Class.java:2022)

        at sun.security.jca.ProviderConfig$2.run(ProviderConfig.java:233)

        at sun.security.jca.ProviderConfig$2.run(ProviderConfig.java:218)

        at java.security.AccessController.doPrivileged(AccessController.java:682)

        at sun.security.jca.ProviderConfig.doLoadProvider(ProviderConfig.java:218)

        at sun.security.jca.ProviderConfig.getProvider(ProviderConfig.java:199)

        at sun.security.jca.ProviderList.loadAll(ProviderList.java:294)

        at sun.security.jca.ProviderList.removeInvalid(ProviderList.java:311)

        at sun.security.jca.Providers.getFullProviderList(Providers.java:181)

        at java.security.Security.insertProviderAt(Security.java:371)

        at cybermation.library.security.k.a(Unknown Source)

        at cybermation.library.security.k.<init>(Unknown Source)

        at cybermation.library.security.k.<init>(Unknown Source)

        at cybermation.library.security.k$a.<clinit>(Unknown Source)

        ... 4 more

Caused by: java.security.ProviderException: jgskit (Not found in java.library.path)

        at com.ibm.crypto.plus.provider.IBMJCEPlus.e(IBMJCEPlus.java:132)

        ... 23 more

Environment

Release : 12

Component : CA Workload Automation System Agent

Cause

This error occurs on AIX platform after upgrading Java to 8.0.6.25 or later.   

The problem is seen in 8.0.6.25 but not in earlier SR levels, it happens because IBMJCEPlus is required for TLS 1.3 support, which was added in 8.0.6.25. Prior to this, the JVM would not try to load libjgskit.so (and libjgsk8iccs_64.so) unless IBMJCEPlus was explicitly enabled.

Resolution

Edit the <AGENT_HOME>/cybAgent file and find the lind that sets the LIBPATH variable. Add the following path to the LIBPATH variable...

<AGENT_HOME>/jre/lib/icc

You will need to replace <AGENT_HOME> with the actual install path of the agent.