Starting Agent fails with: java.io.IOException Keystore was tampered with, or password was incorrect error

Article Id: 84607
Status: Published
Updated On: 15-04-2018 08:01
Legacy Id: 000013986
Products:
CA Automic Workload Automation - Automation Engine , AUTOMIC WORKLOAD AUTOMATION
Issue/Introduction:

Error Message :
20180206/153404.349 - U02013309 RA Agent is starting ...
20180206/153407.126 - U02013341 Automatic restart of Jobs is disabled.
20180206/153407.292 - agentInitialization:
20180206/153407.326 - Automic Version:12.1.0+build.852
20180206/153407.427 - installTrustManager execution
20180206/153407.444 - loading cacerts from /opt/automic/jdk1.8.0_144/jre/lib/security/cacerts
20180206/153407.480 - Error processing keystore file /etc/pki/pki-tomcat/websvc.jks. Agent will be terminated!
20180206/153407.489 - java.io.IOException Keystore was tampered with, or password was incorrect
20180206/153407.490 - U02013310 Failed to load RA Agent.

When importing a key from the WebServices server, when attempting to start the Agent it fails with the above error message.

If the Agent is started with an empty keystore, it starts successfully. 

Cause:

Cause type:
Configuration
Root Cause: The entire chain of certificates has not been imported.

Environment:

Release: AOMVMW99000-4.0-Automic-Operations Manager-VMware vCenter Agent
Component:

Resolution:

The entire chain of certificates needs to be imported:

  1. Root Key
  2. Intermediate Key
  3. Host Key
  4. Private Key
If the server where the WebService REST Agent is connecting to is only given one certificate, the Agent will fail.  Once the entire chain of certificates are provided, the Agent can be started. 

Fix Status: No Fix

Fix Version(s):
N/A

Additional Information:

Workaround :
N/A