How to Reset Agent Public key from the command line in Automation Engine

Products

• CA Automic Workload Automation - Automation Engine

Issue/Introduction

Automic Workload Automation agents fail to establish a connection to the Automation Engine after security certificates are updated or when moving an agent to a new server. The agent initiates a shutdown sequence immediately after attempting to authenticat

The following errors appear in the Agent log or the Communication Process (CP) logs:

• U00029407 Public key mismatch in CSR request from Agent: '####'
• U02000302 Agent shutdown has been initiated with return code '29407'.
• U02000297 Agent doesn't have valid certificate, requesting new one from server.
• U02000376 Could not parse certificate '####.pem'. Please make sure that the certificate is in PEM format.

Environment

• Automic Workload Automation 21.x and higher
• Automation Engine
• All Agent types (Windows, Unix, Java-based)

Cause

The Automation Engine database retains the previous public key for the agent. When the agent presents a new certificate or a new CSR (Certificate Signing Request), the keys do not match. The system shuts down the connection to prevent unauthorized access.

Resolution

You can execute the "Reset Agent Public Key" action from the command line by utilizing the Automation Engine REST API.

To automate this process using a tool like curl, you can use the following POST request:

cmd: curl -f --request POST -u "[USER]/[DEPT]:[PASSWORD]" \
"https://[AE_HOST]:[PORT]/ae/api/v1/0/system/agents/[AGENT_NAME]/resetpublickey" -v

 

Note:  Execute the curl command above (pointing to Client 0) to clear the public key on the Automation Engine.