CA WA System Agent service will not stay up. Error: Exception in thread "MainThread" cybermation.agent.CybAgentDriver$CybAgentInstantiationError: java.lang.IllegalStateException: cybermation.library.security.CybSecurityException: Unable to read raw key

Products

• CA Workload Automation AE - Business Agents (AutoSys)
• CA Workload Automation AE - Scheduler (AutoSys)
• Workload Automation Agent
• DSERIES- SERVER
• CA Workload Automation DE - System Agent (dSeries)

Issue/Introduction

CA Workload Automation System Agent service fails to start. The nohup.stderr in agent installation directory and defaultlog_agent.log file in agent's log directory reveal the following Java exception:

main.MainThread.CybTcpipControllerPlugin.initialize[:274] - Receiver/Transmitter initializing...

 

main.MainThread.CybTcpipControllerPlugin.initialize[:312] - cybermation.library.security.CybSecurityException: Unable to read raw key material

 

                                                                               at cybermation.library.security.CybKeyRetriever.retrieveKeyFromProperty(CybKeyRetriever.java:362)

 

                                                                               at cybermation.commplugins.tcpip.protocol.CybAgentKeyObtainer.initialize(CybAgentKeyObtainer.java:70)

 

                                                                               ...


                                                                               ...

                                                                               ...

 

                                                                             Caused by: java.io.FileNotFoundException: cryptkey.txt (No such file or directory)

 

                                                                               at java.io.FileInputStream.open(Unknown Source)

 

                                                                               at java.io.FileInputStream.<init>(Unknown Source)

 

                                                                               at java.io.FileInputStream.<init>(Unknown Source)

 

                                                                               ...


                                                                               ...

                                                                               ...

 

Environment

Release: All Supported Versions
Component: CA Workload Automation Agent on Windows, UNIX/Linux systems.

Cause

By default, the encryption key is stored in the cryptkey.txt file, which is located in the agent installation directory. The aforementioned java exception happens when, either the cryptkey.txt file is missing in the agent installation directory or the security.cyrptkey parameter in the agentparm.txt file is set to an invalid path for the cryptkey.txt file.

Resolution

1. If you are using the default agent encryption key (specified during the installation) and the cryptkey.txt file is missing in the agent installation directory, then you may copy it from another working CA WA Agent host.
   

 

2. If you are using a non-default agent encryption key, and the cryptkey.txt file is missing, then you may generate the cryptkey.txt file using the keygen utility that is provided with the agent. Please refer to the following URL on keygen utility usage:

Set the Encryption on the Agent Using the Keygen Utility

3. When a non-default agent encryption key is used, remember to update the agent's key in the Scheduling Manager. In case of CA Workload Automation DE, the Agent Definition "Encryption key used from server to agent" needs to be updated in Topology. If the Manager is CA Workload Automation AE, then key_to_agent: and encryption_type: JIL attributes needs to be updated in the machine definition.