Updating RSA Endpoint URL in Symantec Identity Manager

Products

• CA Identity Suite
• CA Identity Manager

Issue/Introduction

When the URL for an RSA endpoint is modified, attempts to update the configuration within the Provisioning Manager may fail with connection errors. This occurs because the eTDYNPassword and eTDYN-str-multi-ca-04 attributes are encrypted based on the original URL. To successfully update the endpoint, these attributes must be cleared and re-initialized.

Environment

Identity Manager

Cause

The error occurs because the RSA endpoint's connection URL has changed, causing a decryption failure for the eTDYNPassword and eTDYN-str-multi-ca-04 attributes. These attributes are cryptographically linked to the previous URL, necessitating a reset when the URL is modified.

Resolution

To update the RSA endpoint URL, follow these steps:

1. Update the URL in JXplorer:

   • Launch JXplorer and navigate to the following path: etadb > im > RSASecurID 7 > MyRSAEndpoint
   • Update the URL attribute to point to the new location.

2. Clear Required Attributes:

   • Within the same JXplorer path, clear the values for the following attributes:
     • eTDYNPassword
     • eTDYN-str-multi-ca-04

3. Update Attributes via etautil:

   • Run the following etautil command on the Provisioning Server to re-encrypt and update the attributes:

   etautil -u <USER> -p <PWD> -dyn update 'eTNamespaceName=RSA SecurID 7' eTDYNDirectory eTDYNDirectoryName='<MyRSAEndpoint>' eTDYNPassword='<New_Password>' eTDYN-str-multi-ca-04='<New_Client_PW>'

4. Verification:

   • Navigate back to JXplorer and confirm that eTDYNPassword and eTDYN-str-multi-ca-04 are now populated.
   • Open Provisioning Manager > Endpoint > Properties to confirm connectivity.

 

Additional Information

Note: If you do not update both attributes simultaneously as shown above, you will encounter the following decryption error: DYN Endpoint [Name] read failed: Error decrypting attribute: Attribute eTDYNConnectionURL has been modified since this attribute was encrypted. Please reset the encrypted attribute.

For additional context, refer to: ETA_E_0019 Error decrypting attribute eTDYNPassword