IAM fails to start after upgrade from 10.7.2 to 10.8.1
search cancel

IAM fails to start after upgrade from 10.7.2 to 10.8.1

book

Article ID: 430734

calendar_today

Updated On:

Products

Service Virtualization

Issue/Introduction

After performing the in-place upgrade from 10.7.2 to 10.8.1 IAM is stopping after few seconds of starting the service.

When started from command line, for below error:

Feb 25, 2026 12:10:19 ÍS com.ca.devtest.acl.launcher.DevTestACL startIaAM
INFO: Wait for 80000 ms
"Appending additional Java properties to JAVA_OPTS: -Diam.version=10.8.1 -Dkeycloak.migration.action=import -Dkeycloak.migration.provider=iam-updater -Dkeycloak.migration.dir=../realms-to-import -Dkeycloak.migration.strategy=IGNORE_EXISTING"
Changes detected in configuration. Updating the server image.
ERROR: Failed to run 'build' command.
ERROR: SRCFG00046: Could not find a secret key handler for VAULT
For more details run the same command passing the '--verbose' option. Also you can use '--help' to see the details about the usage of the particular command.
Feb 25, 2026 12:11:39 ÍS com.ca.devtest.acl.launcher.IaAMPropertiesLoader getIAAMHome
INFO: IAM_HOME: [C:\PROGRA~1\CA\DevTest\IDENTI~1\].

Environment

DevTest 10.8.1

Cause

This is happening due to the migration of our internal framework from Wildfly to Quarkus which handle the secrets in a different way.

Resolution

Update the iam.properties file with the plain text password for all the password properties including the DB password if set for an external database. 

Then restart IAM service, it should come up fine.

For the default keystores it would be like below:

iam.keystore=${IAM_HOME}certs/webreckeys.ks
iam.keystore.password=passphrase
iam.truststore=${IAM_HOME}certs/iam-truststore.ks
iam.truststore.password=passphrase
iam.vault.keystore=${DEVTEST_HOME}/certificates/devtest-keystore.p12
iam.vault.password=passphrase