After CAPKI installation, Service Manager is listed as unsecure, and the following errors be seen in the agent log file:
U00022071 CAPKI Library available.
U00022072 CAPKI Library initialization failed.
Release : 12.3.X, 21.X
Component: Automic Workload Automation - Automation Engine
Misconfiguration
1. Verify what you have defined in CAPKI section of the agent that is installed on the machine that is utilized. This can also be applicable to Automation Engine server.
2. In this case, the error was caused because of the following:
chain=cipher=DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256
chain and cipher were on the same line, they need to be on separate lines, like in the example below:
[CAPKI]
certificate=C:\Automic\ServiceManager\bin\UCYBSMgr_certificate.pem
key=C:\Automic\ServiceManager\bin\UCYBSMgr_key.pem
chain=
cipher=DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256