AS400 Agent refuses to connect to AE with gss_acquire_cred 458752 after downgrade

Products

• CA Automic Workload Automation - Automation Engine

Issue/Introduction

An AS400 Agent was downgraded from 24.x to 21.x renaming the library name but keeping the same KEYSTORE member in the INI file

KEYSTORE=UC4/INI(KEYSTORE)  

After having done multiple attempts to clear out the member KEYSTORE and resetting the agent key and deleting the agent from client 0, the agent will refuse to connect to either the CP or the TLS_Gateway via a CP_PORT with the following error all the time:

U02000105 Error when calling the function 'gss_acquire_cred' (Ret='458752', minor='1004')

Environment

Agent AS400 any version

Cause

The KEYSTORE member from UC4/INI cannot be read.

Resolution

Move the KEYSTORE to use a member from the file TMP instead the one from INI:

1.  Remove the keystore member (if exists)
   RMVM FILE(UC4/TMP) MBR(KEYSTORE)
   
   
2. Add new empty member to the TMP file
   ADDPFM FILE(UC4/TMP) MBR(KEYSTORE)
   
   
3. Edit the INI file and change the KEYSTORE path to the new member:
   
   KEYSTORE=UC4/TMP(KEYSTORE)
   
   
4. Delete the Agent from Client 0
5. Start the Agent again, the agent should connect correctly now to the CP or TLS_Gateway