XPS Import Fails due to duplicate object values (FATAL) : [sm-xpsxps-05810] Import failed.

Products

• SITEMINDER

Issue/Introduction

New Policy Server R12.8SP8 was setup and operational.

When trying to import Policy Store export from R12.8SP7 there is an error "Duplicate value for X: X,Y" and import fails.

 

Environment

R12.8SP7 Policy Server
R12.8SP8 Policy Server

Cause

XPSImport runs and shows following error.

$ XPSImport policystore.xml [XPSImport - XPS Version 12.8.0801.3003] Log output: /opt/CA/siteminder/log/XPSImport.2026-02-26_031320.log Initializing XPS, please wait... Log Time Phase/Section                #Objects       %age        Elapsed -------- ------------------------ --------------- -----------  ----------------- 03:13:26 Initializing 03:13:26 Reading                                               00:00:00 Please enter the passphrase to use for decrypting sensitive information: 03:13:49 Reading                                               00:00:23  00:00:23 03:13:49 Analyzing                      0/6092                 00:00:23 03:13:49 Analyzing/Reference          211/6092        3%       00:00:23  00:00:00 Are you sure you want to overwrite the existing objects in the policy store (Y/N)?:y 03:14:12 Analyzing/Policy Data        610/6092       10%       00:00:46  00:00:23 03:14:12 Analyzing/Policy Data       1219/6092       20%       00:00:46  00:00:23 03:14:12 Analyzing/Policy Data       1828/6092       30%       00:00:46  00:00:23 03:14:12 Analyzing/Policy Data       2437/6092       40%       00:00:46  00:00:23 03:14:12 Analyzing/Policy Data       3046/6092       50%       00:00:46  00:00:23 03:14:12 Analyzing/Policy Data       3656/6092       60%       00:00:46  00:00:23 03:14:12 Analyzing/Policy Data       4265/6092       70%       00:00:46  00:00:23 03:14:12 Analyzing/Policy Data       4874/6092       80%       00:00:46  00:00:23 03:14:12 Analyzing/Policy Data       5483/6092       90%       00:00:46  00:00:23 03:14:12 Analyzing/Policy Data       6050/6092       99%       00:00:46  00:00:23 03:14:12 Analyzing/Security Data     6092/6092      100%       00:00:46  00:00:23 03:14:13 Analyzing/Security Data        0/175                  00:00:47  00:00:24 03:14:13 Analyzing/Security Data       18/175        10%       00:00:47  00:00:24 03:14:13 Analyzing/Security Data       35/175        20%       00:00:47  00:00:24 03:14:13 Analyzing/Security Data       43/175        24%       00:00:47  00:00:24 03:14:13 Validating                                            00:00:47 03:14:13 Validating/Uniqueness                                 00:00:47  00:00:00 (WARN) : [sm-xpsxps-03220]  CA.SM::TrustedHost@24-xpsagent-fwrk-1234-1234-123456789ABC(sampleobject__0): Duplicate value for CA.SM::TrustedHost.Name="sampleobject__0": CA.SM::TrustedHost@24-xpsagent-fwrk-1234-1234-123456789ABC(sampleobject__0),CA.SM::TrustedHost@24-xpsagent-fwrk-1234-1234-000000000000(sampleobject__0). 03:14:13 Validating/Uniqueness                                 00:00:47  00:00:00 03:14:13 Validating/Policy Data         0/5966                 00:00:47  00:00:00 03:14:13 Validating/Policy Data       597/5966       10%       00:00:47  00:00:00 03:14:13 Validating/Policy Data      1194/5966       20%       00:00:47  00:00:00 03:14:13 Validating/Policy Data      1790/5966       30%       00:00:47  00:00:00 03:14:13 Validating/Policy Data      2387/5966       40%       00:00:47  00:00:00 03:14:13 Validating/Policy Data      2983/5966       50%       00:00:47  00:00:00 03:14:13 Validating/Policy Data      3580/5966       60%       00:00:47  00:00:00 03:14:14 Validating/Policy Data      4177/5966       70%       00:00:48  00:00:01 03:14:14 Validating/Policy Data      4773/5966       80%       00:00:48  00:00:01 03:14:14 Validating/Policy Data      5370/5966       90%       00:00:48  00:00:01 03:14:14 Validating/Policy Data      5966/5966      100%       00:00:48  00:00:01 03:14:14 Validating/Policy Data      5966/5966      100%       00:00:48  00:00:01 (FATAL) : [sm-xpsxps-05810] Import failed.

 

Output shows which object has the duplicate value.

CA.SM::TrustedHost@24-xpsagent-fwrk-1234-1234-123456789ABC(sampleobject__0): Duplicate value for CA.SM::TrustedHost.Name="sampleobject__0":

CA.SM::TrustedHost@24-xpsagent-fwrk-1234-1234-123456789ABC(sampleobject__0),
CA.SM::TrustedHost@24-xpsagent-fwrk-1234-1234-000000000000(sampleobject__0).

This means, when Policy Server was checking "CA.SM::TrustedHost@24-xpsagent-fwrk-1234-1234-123456789ABC(sampleobject__0)" object, it has identified another object has the same value(Name), which is the "sampleobject__0".

 

Resolution

It is not possible to create/generate same type of object with same value but this would be from an older version of Policy Server that had problem allowing this inadvertly.

Open the policystore.xml file (ensure you have a backup) and look for the XML section for each object.

 

This is a conceptual demonstration for a simple object.

Sample below:

<Object Class="CA.SM::TrustedHost" Xid="CA.SM::TrustedHost@24-xpsagent-fwrk-1234-1234-123456789ABC" CreatedDateTime="2025-07-20T13:52:55" UpdatedBy="RegisterService" UpdateMethod="Internal" ExportType="Replace">     <Property Name="CA.SM::TrustedHost.SecretUsedTime">         <NumberValue>0</NumberValue>     </Property>     <Property Name="CA.SM::TrustedHost.RolloverEnabled">         <BooleanValue>false</BooleanValue>     </Property>     <Property Name="CA.SM::TrustedHost.Secret" Sensitive="Yes">         <StringValue>{AESKW}AABBCCDD</StringValue>     </Property>     <Property Name="CA.SM::TrustedHost.SecretGenTime">         <NumberValue>0</NumberValue>     </Property>     <Property Name="CA.SM::TrustedHost.Desc">         <StringValue>Generated by XPSRegClient</StringValue>     </Property>     <Property Name="CA.SM::TrustedHost.IpAddr">         <LinkValue><XREF>Ref00136</XREF></LinkValue>     </Property>     <Property Name="CA.SM::TrustedHost.Name">         <StringValue>sampleobject__0</StringValue>     </Property> </Object><!-- Xid="CA.SM::TrustedHost@24-xpsagent-fwrk-1234-1234-123456789ABC" -->

<Object Class="CA.SM::TrustedHost" Xid="CA.SM::TrustedHost@24-xpsagent-fwrk-1234-1234-000000000000" CreatedDateTime="2025-07-20T17:10:24" UpdatedBy="RegisterService" UpdateMethod="Internal" ExportType="Replace">     <Property Name="CA.SM::TrustedHost.SecretUsedTime">         <NumberValue>0</NumberValue>     </Property>     <Property Name="CA.SM::TrustedHost.RolloverEnabled">         <BooleanValue>false</BooleanValue>     </Property>     <Property Name="CA.SM::TrustedHost.Secret" Sensitive="Yes">         <StringValue>{AESKW}WWXXYYZZ</StringValue>     </Property>     <Property Name="CA.SM::TrustedHost.SecretGenTime">         <NumberValue>0</NumberValue>     </Property>     <Property Name="CA.SM::TrustedHost.Desc">         <StringValue>Generated by XPSRegClient</StringValue>     </Property>     <Property Name="CA.SM::TrustedHost.IpAddr">         <LinkValue><XREF>Ref00136</XREF></LinkValue>     </Property>     <Property Name="CA.SM::TrustedHost.Name">         <StringValue>sampleobject__0</StringValue>     </Property> </Object><!-- Xid="CA.SM::TrustedHost@24-xpsagent-fwrk-1234-1234-000000000000" -->

 

As shown in the above conflicting samples as pointed out in the XPSImport output screen, these are conflicting as they have the same name.

They were both created on the same day but the bottom one is newer.

To resolve this conflict, the old object section can be deleted or change its name to something different like "sampleobject__1".

 

Then import the updated policystore.xml file.