SiteMinder Agent for IBM WebSphereでのTrusted Host登録時エラーについて

Document created by Koichi_Ikarashi Employee on Dec 9, 2015Last modified by Koichi_Ikarashi Employee on Oct 31, 2016
Version 1Show Document
  • View in full screen mode

文書番号: JTEC001880

製品名: CA Single Sign-On Agent for IBM WebSphere

バージョン: r12.0 SP2

OS: All

 

◆概要

CA Single Sign-On(旧製品名 SiteMinder) Agent for WebSphereのインストール時にTrusted Host登録で以下のようなエラーが発生しました。

 

Could not register host

-----------------------

Could not register a trusted host with the SiteMinder Policy Server.  Please try again, or run smreghost located in /opt/CA/webagent/bin manually after installation.

 

Return value: 255

STDOUT:

STDERR: Failed to enable any clusters.

Registration has failed.

 

◆原因と対策

このTrusted Host登録時エラーはJCE (Java Cryptography Extension)が正しくなかったことが原因です。

 

以下よりダウンロード可能なunrestricted.zipを入手して、WebSphere側に適切なJCEパッチが適用してください。

https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=jcesdk

Unrestricted SDK JCE Policy files for older versions of the SDK Version  Multiple

 

jarファイルの差し替えは以下が対象となります。

WebSphere/AppServer/java/jre/lib/security

 

参照:

以下、製品マニュアル『CA SiteMinder Agent for IBM WebSphere, Agent Guide r12.0 SP2, Page 36’ Software Requirements’からの抜粋です。

  • A supported Java Runtime Environment (JRE) patched to support unlimited key strength in the Java Cryptography Extension (JCE) package.

Note: If the JRE used by the WebSphere Application Server and the SiteMinder Agent is not patched to support unlimited key strength, host registration fails during SiteMinder Agent installation and WebSphere fails to start once the SiteMinder Agent has been configured on WebSphere.

 

キーワード

WebSphere, host registration, trusted host, JCE

Attachments

    Outcomes