• State Not Answered
  • Replies replies
    12
  • Subscribers subscribers
    18
  • Views views
    1345
  • Users 0 members are here

IG 4.2 - workflow-api: Unable to decrypt data because no keys have been supplied

dbuschke

Hi,
after upgrading from IG 3.7.2 to 4.2 I get an error on starting tomcat:

[SCHWERWIEGEND] 2024-01-31 13:19:17.771 [com.netiq.iac.workflow.jee.IacWorkflowServerInitListener] Error initializing logging
java.lang.IllegalStateException: Unable to decrypt data because no keys have been supplied.
        at com.netiq.ism.obfuscate.CryptoUtils.decrypt(CryptoUtils.java:437)
        at com.netiq.ism.obfuscate.CryptoUtils.decipher(CryptoUtils.java:403)
        at com.netiq.ism.config.impl.ConfigurationImpl.decode(ConfigurationImpl.java:835)
        at com.netiq.ism.config.impl.ConfigurationImpl.getString(ConfigurationImpl.java:417)
        at com.netiq.iac.common.logging.ArcLoggingConfigurator.getConfigString(ArcLoggingConfigurator.java:283)

Currently I think this happens because my system is missing configurations in ism-configuration.properties:

# fgrep wfe ism-configuration.properties
com.microfocus.wfe.consumer.url = https://abc:8443/api/wfi
com.microfocus.wfe.consumer.password._attr_obscurity = ENCRYPT

My working reference system lists:

# fgrep wfe ism-configuration.properties
com.microfocus.wfe.consumer.url = https://def:8443/api/wfi
com.microfocus.wfe.consumer.userId = workflow
com.microfocus.wfe.consumer.password._attr_obscurity = ENCRYPT
com.microfocus.wfe.consumer.password = [AES/GCM/NoPadding]6xXXX:r/Harr18/t2XXXc9fXXX==

Any ideas where this configuration is coming from? Can neither find it in configupdate.sh nore in configutil.sh.

regards
Daniel

Parents Reply Children
  • 0   in reply to 

    Hello,

    1) The workflow-api war is no longer a part of Identity Governance.  The 3.7.3 release is the last to include that war.

    2) When you upgraded 3.7.3 to 4.2
    a) Did you have External Workflow Service installed when this was 3.7.3?
    b) When you ran the IG 4.2 installer, did you select to upgrade all components (IG, RPT, Workflow Service)?
    c) When you ran the IG 4.2 installer, did you select to use the existing encryption key that was created during the OSP install or did you create a new one?

    Sincerely,
    Steven Williams
    Principal Enterprise Architect
    OpenText Cybersecurity

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.