Identity Manager 14.4 Multi DB Installer error

Products

• CA Identity Manager

Issue/Introduction

I am trying to set up Identity Manager 14.4 on Wildfly 15.x using Multi DN Installer, i.e. I want to have separate databases for object store, task persistence, audit, archive, reporting and workflow.

The Multi DB Installer should configure everything for me, as described in https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-manager/14-4/installing/configure-im-multi-data-stores.html

However, when I tried to run "MultiDBInstaller/ca-im-multiDataBase-linux.bin" after installation of Identity Manager 14.4, the following errors were logged in the log file "/opt/CA/IdentityManager/IM Multi Database/IM Multi Database/Logs/IM_Multi_Database_Install_04_11_2022_21_09_42.log":

Custom Action:            com.netegrity.brlib.multidb.JSafeToolsEncryptTextIAWrapper
                          Status: ERROR
                          Additional Notes: ERROR -     class com.netegrity.brlib.multidb.JSafeToolsEncryptTextIAWrapper.install() Unexpected Fatal Error:

And in the "standalone-full.xml" file, the password value is set to "false" instead of a proper encrypted value:

<security-domain name="iam_im-imarchivedb">
 <authentication>
  <login-module code="com.netegrity.jboss.datasource.PicketBoxPasswordEncryptedLogin" flag="required" module="com.ca.iam.idmutils">
   <module-option name="userName" value="###"/>
   <module-option name="password" value="###"/>
   <module-option name="managedConnectionFactoryName" value="jboss.jca:name=iam/im/jdbc/jdbc/archive,service=###"/>
  </login-module>
 </authentication>
</security-domain>

 

Environment

Release : 14.4

Component : Identity Manager

Resolution

This is a regression in the Multi DB Installer 14.4 (defect no. DE499907)

It was fixed in 14.4.1: https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-manager/14-4/Release-Notes/Fixed-Defects/Fixed-Defects---14-4-1.html

Hot fix for IM 14.4 is available. Please contact Broadcom support to get it.

As a workaround it is possible to modify the xml file manually and put encrypted values in there.
Use IM password tool to encrypt the password.
By default on Windows it's located in C:\Program Files (x86)\CA\Identity Manager\IAM Suite\Identity Manager\tools\PasswordTool, and on Linux it's located in /opt/CA/IdentityManager/IAM_Suite/IdentityManager/tools/PasswordTool/

pwdtools.bat -JSAFE -p <Password in clear>

./pwdtools.sh -JSAFE -p <Password in clear>