Error 'Failed to generate RSA Key' when generating an RSA key pair
Originally Published: 2011-05-09
Article Number
Applies To
Issue
at com.rsa.keymanager.core.key.generate.DefaultRSAKeyGenerator.generateKeyWithSize(DefaultRSAKeyGenerator.java:101)
at com.rsa.keymanager.core.key.generate.DefaultRSAKeyGenerator.generateAndCheckFailure(DefaultRSAKeyGenerator.java:65)
[...]
au.net.netstorm.boost.primordial.PrimordialException: Failed to generate RSA Key
at com.rsa.keymanager.core.key.generate.DefaultRSAKeyGenerator.generateKeyWithSize(DefaultRSAKeyGenerator.java:101)
at com.rsa.keymanager.core.key.generate.DefaultRSAKeyGenerator.generateAndCheckFailure(DefaultRSAKeyGenerator.java:65)
[...]
Logs when the server starts shows twice the following initialization log (twice in the same 5 seconds interval):
02 May 2011 16:45:20,383 INFO Thread-1 - Client : Internal, -------------------------------------
02 May 2011 16:45:20,383 INFO Thread-1 - Client : Internal, Current Providers
02 May 2011 16:45:20,383 INFO Thread-1 - Client : Internal, -------------------------------------
[...]
02 May 2011 16:45:21,476 INFO Thread-1 - Client : Internal, -------------------------------------
02 May 2011 16:45:21,476 INFO Thread-1 - Client : Internal, Final Providers
02 May 2011 16:45:21,476 INFO Thread-1 - Client : Internal, -------------------------------------
[...]
Resolution
The problem was that previous version of RKM server war file was still in Tomcat's webapps folder. This is not allowed and lead to inconsistent and unpredictable behavior. To fix the issue, do the following:
1. Stop Tomcat
2. Go in TOMCAT/webapps folder and delete any un-needed .war file. Keep only KMS.war of the version needed
3. Delete all KMS-like folder both in TOMCAT/webapps/ and TOMCAT/work/Catalina/localhost
4. Restart Tomcat
Notes
Related Articles
How is a target URL mapped to a trusted RP (Relying Party) in RSA Federated Identity Manager (FIM) 2.5? Number of Views Duplicate groups are shown for a user in RSA Identity Governance & Lifecycle Number of Views 'Certificate already exists' error when auto-enrolling clients Number of Views Unexpected LDAP authentication failure event monitor message while attempting RSA SecurID Access RADIUS authentication Number of Views ASR fails to generate and the log file has 'ORA-04063: package body "AVUSER.SRSECTION_SYSTEM" has errors' errors in RSA Id… Number of Views
Trending Articles
RSA Authentication Manager Upgrade Process How to Update the Root (Server) and Client Certificates in RSA Identity Governance & Lifecycle RSA Authenticator 6.2.2 for Windows Administrator Guide RSA SecurID software token .sdtid file fails to import into RSA SecurID Software Token 5.0 for Windows RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide
Don't see what you're looking for?
