Symantec Identity Manager - ETA_E_0019 Error decrypting attribute eTDYNPassword

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

When attempting to view or modify an endpoint in the Symantec Identity Manager (IM) User Console or the Provisioning Manager GUI, the following error occurs:

Endpoint [ENDPOINT_NAME] read failed: Error decrypting attribute eTDYNPassword: etDYNConnectionURL has been modified since this attribute was encrypted. Please reset the encrypted attribute.

• Properties such as LDAdescription, passwordSyncAgentInstalled, baseDN, and connectionURI fail to load in the console.
• The error prevents viewing endpoint details or making configuration updates.

Environment

• Product: Symantec Identity Manager / Identity Suite
• Release: 14.x
• Component: Identity Manager (Provisioning)
• Endpoint Type: Dynamic (DYN) Endpoints

Cause

This error occurs because the eTDYNConnectionURL attribute was modified after the eTDYNPassword was encrypted. The security mechanism requires a password reset whenever the connection URL changes to ensure attribute integrity.

Resolution

To resolve this issue, you must manually reset the endpoint password using the etautil command-line utility.

1. Open a command prompt on the Provisioning Server.

2. Execute the following command, replacing the bracketed placeholders with your environment-specific values:

   Review this command before running it.

   bash

    

   etautil -u [USER] -p [PWD] -dyn update 'eTNamespaceName=[MyEndpointType]' eTDYNDirectory eTDYNDirectoryName='[MyEndpoint]' eTDYNPassword='[MyEndpointPwd]'

   
   
   • [USER] / [PWD]: Provisioning administrator credentials.
   • [MyEndpointType]: The namespace of the endpoint (e.g., Active Directory, LDAP).
   • [MyEndpointName]: The specific name of the endpoint failing to load.

 

 

 

Additional Information

If you receive :ETA_E_1217, Unknown error 102 opening Common Object Repository, verify that the username and password provided in the command are correct and have sufficient permissions