I am unable to generate EEM certificate on CA WAAE server via the autosys_secure utility.

Document ID:  TEC1436635
Last Modified Date:  07/15/2017
{{active ? 'Hide' : 'Show'}} Technical Document Details

Products

  • CA Workload Automation AE

Releases

  • CA Workload Automation AE:Release:11.3.6
  • CA Workload Automation AE:Release:11.3.5

Components

  • CA Workload Automation AE (AutoSys):ATSYS
  • WORKLOAD CONTROL CENTER:UWCC
Symptoms:

 

I am unable to change from Native Security to CA Embedded Entitlements Manager (EEM) on our CA WAAE instance.

Error when generating CA EEM certificate via autosys_secure:

CA WAAE Security Utility

Please select from the following options:
[1] Activate CA EEM instance security.
[2] Manage EDIT/EXEC superusers.
[3] Change database password.
[4] Change remote authentication method.
[5] Manage users.
[6] Get encrypted password.
[0] Exit CA WAAE Security Utility.
> 1
Are you sure you wish to activate CA EEM security? [1(yes)/0(no)]: 1
Input the CA EEM server name(s) (or hit enter to cancel): <EEM_Server_Host>
CAUAJM_E_10436 Security server unreachable or invalid authentication certificate file.
CAUAJM_E_10434 Error initiating security session.
[EE_BADOBJECT Bad Object]
[CertificateReader::loadPEM - cannot read certificate]

Do you wish to regenerate the CA EEM certificate and attempt to reconnect? [1(yes)/0(no)]: 1

CAUAJM_I_60150 Attempting to regenerate the CA EEM certificate and reconnect to the CA EEM server.
Input the CA EEM server name(s) (or hit enter to cancel): <EEM_Server_Host>
Input the CA EEM administrator name (or hit enter to cancel): EiamAdmin
Input the CA EEM administrator password:

Confirm the CA EEM administrator password:

CAUAJM_E_10443 Security server unreachable or invalid credentials.
CAUAJM_E_10434 Error initiating security session.
CAUAJM_E_10437 Detailed Error Information:

[EE_NOTFOUND Object Not Found]
[ISE_NOSUCHOBJECT no such object exists]
[Attach Error: PozError]
[PE_NOTFOUND Object Not Found]
[pozFactory::attachPoz: error invoking iPoz::ClientAttach on host <EEM_Server_Host>]
[attach failed]
[ISE_NOSUCHOBJECT no such object exists]
[WorkloadAutomationAE]
[EiamAdmin]

CAUAJM_E_60199 Unable to generate the CA EEM certificate. See previous error messages for details.

CAUAJM_E_60196 An error occurred attempting to set CA EEM instance security. Instance remains under NATIVE security control.

Environment:
CA WAAE 11.3.5, 11.3.6 on all supported platforms.
Cause:

 

Cause:

The CA EEM error below suggests that the Application instance WorkloadAutomationAE does not exist in the CA EEM repository (itechpoz).

[EE_NOTFOUND Object Not Found]
[ISE_NOSUCHOBJECT no such object exists]
[Attach Error: PozError]
[PE_NOTFOUND Object Not Found]
[pozFactory::attachPoz: error invoking iPoz::ClientAttach on host <EEM_Server_Host>]
[attach failed]
[ISE_NOSUCHOBJECT no such object exists]
[WorkloadAutomationAE]
[EiamAdmin]


A quick-way to check if the WorkloadAutomationAE application exists in EEM, is to look-up the Application list (drop-down) on the EEM GUI logon page [https://<EEM_Server_Host>:5250/spin/eiam/eiam.csp]

Resolution:

 

The solution is to register the WorkloadAutomationAE product in the target CA EEM Server using the as_safetool. The steps needed to register are documented at the hyperlink below:

Register the Product in the Target CA EEM Instance Using as_safetool.


Steps from the above documentation is provided below, just in case the link does not work.

Follow these steps:

=> Open a CA Workload Automation AE command prompt (Windows) or Terminal (on UNIX/Linux) and source the CA WAAE environment profile ($AUTOSERV/autosys.<shell>.`hostname`).

=> Set the ASSAFETOOLPW environment variable to the password of the EiamAdmin user:
  
    Unix / Linux (Bourne shell): ASSAFETOOLP=<EiamAdmin_Password>; export ASSAFETOOLPW
    Windows: set ASSAFETOOLPW=<EiamAdmin_Password>

=> Enter the following command:
  
      as_safetool -b <EEM_server_host_name> -s

      A list of CA Workload Automation AE instances that are registered with the CA EEM server appear.

=> Enter the following command for the instance that should be added to that list:

      as_safetool -b <EEM_server_host_name> -i <instance>

      The CA Workload Automation AE instance is registered in the target CA EEM instance.


Now, proceed to generate the EEM security certificates and switch to the external security via autosys_secure tool.

Additional Information:

Please help us improve!

Will this information enable you to resolve your issue?

Please tell us what we can do better.

{{feedbackText.length ? feedbackText.length : '0'}}/255

{{status}}

Not what you were looking for?

Search Again >

Product Information

Support by Product >

Communities

Join a Community >

Chat with CA

Just give us some brief information and we'll connect you to the right CA ExpertCA sales representative.

Our hours of availability are 8AM - 5PM CST.

All Fields Required

connecting

We're matching your request.

Unfortunately, we can't connect you to an agent. If you are not automatically redirected please click here.

  • {{message.agentProfile.name}} will be helping you today.

    View Profile


  • Transfered to {{message.agentProfile.name}}

    {{message.agentProfile.name}} joined the conversation

    {{message.agentProfile.name}} left the conversation

  • Your chat with {{$storage.chatSession.messages[$index - 1].agentProfile.name}} has ended.
    Thank you for your interest in CA.


    Rate Your Chat Experience.

    {{chat.statusMsg}}

agent is typing