ETA_E_0019 Error: eTDYNPassword Decryption Failure - Identity Manager

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

When viewing or modifying dynamic (DYN) endpoints in the Symantec Identity Manager User Console or Provisioning Manager GUI, the following error occurs:

Endpoint [ENDPOINT_NAME] read failed: Error decrypting attribute eTDYNPassword: etDYNConnectionURL has been modified since this attribute was encrypted. Please reset the encrypted attribute.

Properties such as LDAdescription, passwordSyncAgentInstalled, baseDN, and connectionURI may fail to load. This error prevents viewing endpoint details or making configuration updates.

Environment

Identity Manager 14.5

Cause

The eTDYNConnectionURL attribute was modified after the eTDYNPassword was encrypted. The security mechanism requires an endpoint password reset whenever the connection URL changes to maintain attribute integrity.

Resolution

To resolve this issue, manually reset the endpoint password using the etautil command-line utility.

1. Open a command prompt on the Provisioning Server.

2. Execute the following command, replacing the placeholders with your environment-specific values:

   etautil -u [USER] -p [PWD] -dyn update 'eTNamespaceName=[MyEndpointType]' eTDYNDirectory eTDYNDirectoryName='[MyEndpoint]' eTDYNPassword='[MyEndpointPwd]'

   • [USER] / [PWD]: Provisioning administrator credentials.
   • [MyEndpointType]: The namespace of the endpoint (e.g., Active Directory, LDAP).
   • [MyEndpointName]: The specific name of the endpoint failing to load.
   • [MyEndpointPwd]: The new endpoint password.

Additional Information

If you receive :ETA_E_1217, Unknown error 102 opening Common Object Repository, verify that the username and password provided in the command are correct and have sufficient permissions

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.