Symantec Access Management

  • Private Community

  • 1.  [ERROR][sm-Server-04060] An agent change key command was received that contained a set of null keys

    Posted Dec 02, 2017 10:09 AM

    After upgraded to CA SSO POLICYSERVER R12.52 SP01 CR08  from CA SSO POLICYSERVER R12.52 SP01 CR02

    seeing below error messages in smps.log, Please help us to understand what below errors indicates & fix these errors.

     

    [632/4168][Date-Time][SmObjStore.cpp:451][INFO][sm-Server-04720] Key distribution has been initiated by Policy Server
    [632/2308][Date-Time][DoManagement.cpp:288][ERROR][sm-Server-04060] An agent change key command was received that contained a set of null keys
    [632/2308][Date-Time][DoManagement.cpp:288][ERROR][sm-Server-04060] An agent change key command was received that contained a set of null keys



  • 2.  Re: [ERROR][sm-Server-04060] An agent change key command was received that contained a set of null keys

    Posted Dec 02, 2017 03:10 PM

    Do you have 12.6 Policy server also in the set up?



  • 3.  Re: [ERROR][sm-Server-04060] An agent change key command was received that contained a set of null keys

    Posted Dec 02, 2017 10:47 PM

    Yes we have a 12.7 policy Server in setup previously , we removed from setup due to SmOverrideAuth  module 64-bit dependency.



  • 4.  Re: [ERROR][sm-Server-04060] An agent change key command was received that contained a set of null keys

    Posted Dec 02, 2017 10:55 PM
    Can you try rolling over agnet keys from 12.52?

    That should fix your issue.


    Restarting all Policy servers should also fix the issue.


     




  • 5.  Re: [ERROR][sm-Server-04060] An agent change key command was received that contained a set of null keys
    Best Answer

    Posted Dec 03, 2017 08:09 PM

    Hi Kishore,

     

    I have now explained this issue in detail here :

    Tech Tip : CA Single Sign-On :: Policy Server::An agent change key command was received that contained a set of null keys 

     

    Let me know if any questions.

     

    Regards,

    Ujwol 

    Ujwol's Single Sign-On Blog