Troubleshooting Hub Encryption Wallet

The section describes various issues you may encounter related to the , and the workaround for resolving them.

Location Connection Failure After Force Disabling the Encryption Wallet

After force disabling the encryption wallet using the command , error messages about redacted values may be encountered.

More Error Messages

The following error messages are displayed only whenFew more error messages that may be displayed when values are redacted after force disabling the encryption wallet.

TLS Error Messages

The following error messages are displayed only when locations are configured with High-Volume Agent (HVA) and the encryption wallet is force disabled.

Root cause: When force disabling a wallet that is in use, all encrypted passwords and keys will be redacted automatically.

Resolution: To resolve this problem, update the redacted location passwords. Also, for locations configured with HVA, all keys and certificates must be regenerated and then the corresponding must be updated with new values.

1. If the location has agent connection configured, update the keys and certificates, else skip to step 2,

   1. Create a new SSL certificate and key using the command (this must be executed on the machine where the Local Processing Hub System is installed):

      hvrsslgen basename "Subject"
      content_copy

      This command will generate a Public Certificate (basename.pub_cert) and a Private Key (basename.priv_key) files. The command output will also display the Private Key Password, which is required in the next step.

   2. Update the following - , , and using the command :

      hvrreposconfig Agent_Client_Public_Certificate=@basename.pub_cert Agent_Client_Private_Key=@basename.priv_key Agent_Client_Private_Key_Password=Private_Key_Password
      content_copy

   3. If access to the agent is limited to certain hub system(s), the client public certificate () of the hub system must be regenerated and updated in the agent property . This can be done either from CLI or UI:

   CLIUI

   1. Create a public certificate file of the hub system; execute the command on the hub machine that needs to be added to the allowed list:

      Linux:

      hvrreposconfig 'Agent_Client_Public_Certificate>@file_name.pub_cert'
      content_copy

      Windows:

      hvrreposconfig "Agent_Client_Public_Certificate>@file_name.pub_cert"
      content_copy

   2. Copy the public certificate file (file_name.pub_cert) to the agent machine.

   3. Add the public certificate file of the hub system to the allowed list; execute the command on the agent machine:

      Direct CLI:

      hvragentconfig Only_From_Client_Public_Certificates.identifier=@file_name.pub_cert
      content_copy

      Remote CLI:

      hvragentconfig -Rurl -hhub -ragent_host:port -Lagent_username/password Only_From_Client_Public_Certificates.identifier=@file_name.pub_cert
      content_copy

      identifier may be replaced with the actual name of the hub (e.g. myhub1) or any name/text to easily identify the allowed hub.

   4. To verify that the public certificate file of the hub system is added to the allowed list, execute the command on the hub machine:

      hvragentconfig -hhub -ragent_host:port -Lagent_username/password Only_From_Client_Public_Certificates
      content_copy

   If the public certificate file of the hub system is successfully added to the allowed list, the command output will display the name and the certificate.

2. In the page, click Replace Redacted Properties and update the redacted passwords (e.g, Database Password, Agent Password) in the All Location Properties dialog.

3. Click Save.

Lost/Corrupted Auto-open Password File or Error: Could Not Open Encryption Wallet

The following error may be displayed when the wallet's auto-open password file is lost/corrupted:

To resolve this problem, the wallet's auto-open password file ( shown in the error message) must be re-created.

To fix this issue you must know the wallet password.

If the wallet password is not known, then the only solution is to force disable the wallet using and then perform the recovery procedure mentioned in section .

1. Re-create the auto-open password file (e.g. 613b43f8.cred) using the command :

   hvrcrypt -W > /home/hvruser/hvr_config/wallet/613b43f8.cred
   content_copy

   Supply the wallet password when prompted.