Error while opening workflows in Workpoint Editor in RSA Identity Governance & Lifecycle 7.1.0 P03 when using secure port 9443: Unexpected End of File from server
Originally Published: 2018-11-07
Article Number
Applies To
RSA Version: 7.0.2 P05+, 7.1.0+
Application Server: WebSphere
Issue
- After upgrading from RSA Identity Governance and Lifecycle 7.0.1 to 7.1.0 P03 or 7.0.2 P05, when trying to open any workflow in the workflow editor results the following error:
Could not access HTTP invoker service at
[https://<server>:9443/wpServices/ServerConfigService];nested exception is
java.net.SocketException: unexpected end of file from server
- JVM arguments are specified as follows:
Cause
Currently (as of RSA Identity Governance & Lifecycle 7.1.0 P03 and 7.0.2 P05 versions), there is no way to specify JVM arguments for https.
Resolution
Workaround
HTTPS needs to be defined as the connection protocol. Since this is not currently configurable in RSA Identity Governance & Lifecycle 7.1.0 P03 and 7.0.2 P05, it needs to be manually updated in the workpoint-client.properties file and the aveksaWFArtitectear by following the steps below. These steps will allow you to use the 'https' protocol for opening workflows in the Workflow Editor.
- From WebSphere console, uninstall the currently deployed Aveksa Workflow Editor:
- In the WebSphere Console go to Applications > Application Types > Websphere enterprise application page.
- Select Aveksa Workflow Editor and click Uninstall as shown below:
- Update the workpoint-client.properties file in acmConfig.jar within ACM-WebSphere-7.1.0_P03.tar as follows:
- Using 7-Zip, open ACM-WebSphere-7.1.0_P03.tar
- Double click on the folder named ACM-Websphere-7.1.0_P03.
- Open the aveksaWFArchitect.ear.
- Double click on /APP-INF/lib/.
- Open the acmConfig.jar.
- Open the workpoint-client.properties file in Notepad++ or any other text editor.
- Go to the Connection configuration section and update following lines, replacing http with https), as follows:
serverContextPath = https://${wp-client-hostname}:${wp-client-hostport}/wpServices
client.connect.URL = https://${wp-client-hostname}:${wp-client-hostport}/wpServices/xml
- Save the updated workpoint-client.properties file.
- Install the updated aveksaWFArchitect.ear file, using the steps below as documented in the "Install the Workflow Architect EAR File" section of the RSA Identity Governance and Lifecycle 7.1 Installation Guide.
Procedure
This task describes how to install the RSA Identity Governance & Lifecycle Workflow Architect. You use the Workflow Architect to view and edit workflows for change requests. During the deployment process, a cluster requires a single connection to the database for setup and migration. Make sure you use a single node during the process and that only one server instance is running.
- In the WebSphere console, initiate the installation:
- From Applications menu, select Application Types > Websphere Enterprise Applications, and click Install.
- Browse to the folder that contains the aveksaWFArchitect.ear file that you updated and saved. Select this aveksaWFArchitect.ear.
- Proceed through the wizard, choosing the Fast Path. Accept default values where not indicated otherwise.
- For clusters only:
- Select Map Modules to Servers.
- Select all modules, select the scope from the list of Clusters and Servers, and click Apply.
- The server associated with the module should be listed as the cluster. Click Next
- In the Map Virtual Hosts for Web Modules screen, click Next.
- For WebSphere 9.0.0.x only: In the Metadata for Modules screen, enable the metadata-complete attribute checkbox and click Next.
- Complete the installation of the ear. This process takes several minutes to complete.
- Save changes to the master configuration.
- Restart the application server, replacing server1 with your server name:
cd /opt/IBM/WebSphere/AppServer/bin
./stopServer.sh server1
ADMU116I: Tool information is being logged in file
/opt/IBM/WebSphere/AppServer/profiles/AppSrv01/logs/server1/stopServer.log
ADMU0128I: Starting tool with the AppSrv01 profile
ADMU3100I: Reading configuration for server: server1
ADMU3201I: Server stop request issued. Waiting for stop status.
ADMU4000I: Server server1 stop completed.
./startServer.sh server1
ADMU116I: Tool information is being logged in file
/opt/IBM/WebSphere/AppServer/profiles/AppSrv01/logs/server1/startServer.log
ADMU0128I: Starting tool with the AppSrv01 profile
ADMU3100I: Reading configuration for server: server1
ADMU3200I: Server launched. Waiting for initialization status.
ADMU3000I: Server server1 is open for e-business; process id is 20969
- Verify by logging into the Identity Governance & Lifecycle Admin Console (https://<host-name>:9443/aveksa/main).
- Open any workflow from Requests > Workflows.
- Select any workflow.
- The selected workflow will be opened in the workflow editor successfully as shown below:

Related Articles
DLP Endpoint Enforce host hangs when opening a file 27Number of Views Service is unavailable in replica when opening replica RSA Authentication Manager Self-Service Console 82Number of Views Custom Account Attribute mapped to the Active Directory accountExpires attribute no longer collects a value after upgradin… 94Number of Views Using the correct version of WebLogic 3Number of Views Applying the latest RSA Identity Governance and Lifecycle 7.0.0 P02 or P03 generates error "java.sql.SQLException: ORA-040… 118Number of Views
Trending Articles
RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide RSA MFA Agent 2.4 for Microsoft Windows Installation and Administration Guide Downloading RSA Authentication Manager license files or RSA Software token seed records How to configure RSA Authentication Manager 8.4 or later to send data to multiple remote syslog servers RSA Authentication Manager 8.9 Release Notes (January 2026)
Don't see what you're looking for?