Server Manager Agent Not Connecting To SMC
Read Time:33 Sec
After a Java update, the server manager agent may not connect to the SMC because of parameters in the java.security file.To resolve this, comment out the jdk.tls.disabledAlgorithms parameter lines in the
- IBM i / iSeries / AS400
/QOpenSys/QIBM/ProdData/JavaVM/jdkxx/xxbit/jre/lib/security
and/or/QIBM/ProdData/Java400/jdkxx/lib/security
- Windows/Linux
%JAVA_HOME%\jre\lib\security
and/or%JDE_HOME%\SCFHA\jdk\jre\lib\security
Example:
#jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, 3DES_EDE_CBC, DESede, \ # EC keySize < 224, anon, NULL
Actually, you only need to remove ‘anon’ from the list, so you can keep the others disabled (it’s something…). Our java.security entry looks like this:
jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, \
EC keySize < 224, NULL
Thanks, Mattias! I’ll definitely try that the next time.
Did you figure this out by trial and error or is there some Oracle doc out there that I missed?
Hey, might’ve been a combination of both, but i can’t find anything on MOS anymore…
This is TR 9.2.3.3 and Windows platform with Oracle JDK/JRE btw, might be different on others – i know for sure that IBM JDK needs 3DES_EDE_CBC disabled e.g. (see Doc ID 2256869.1)
Ha! Agreed!
Either way, I’m glad you were able to get things working and really appreciate you taking time to comment. Trying to do CNC work in a vacuum is not easy and we all need as many tips as we can get.
Thanks again!