Failed to decrypt persistent key preventing Agent connection with Policy Server.

Products

• CA Single Sign-On
• SITEMINDER
• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On Agents (SiteMinder)

Issue/Introduction

After a new installation, the Web Agent was unable to connect to the Policy Server, Logged error in the SMPS log file.

[30474/140414308816640][Thu May 17 2018 14:46:38][SmObjKeyManagement.cpp:459][ERROR][sm-Server-03080] Failed to decrypt persistent key

This happened in a new environment, where the old Policy Store data has been imported.

Environment

Siteminder release: 12.8x, 12.9
Component: Policy Server (SMPLC)
OS: All 

Cause

The problem is that the encryption key between the environment where the keys have been exported is different from the one where it has been imported too.

Resolution

To make both environments run the same encryption keys, follow the steps described in the documentation (1)(2).

Additional Information

1. Reset the r12.x Policy Store Encryption Key
    
2. SiteMinder r12.52 SP1 CR05 smkeyimport command error/failed