000012257 - How to reset or disable the lockbox on a RKM or DPM client

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000012257
Applies ToRKM C Client
RKM Java Client
RKM C# Client
DPM C Client
DPM Java Client
DPM C# Client
IssueThis article describes how to reset or disable the lockbox on a client when the system stable values (SSVs) have changed and caused it to be locked.
You will see an error similar to the following:
vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv
An error has occured:
The lockbox stable value threshold was not met because the system fingerprint has changed. To reset the system fingerprint, open the lockbox using the passphrase.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
ResolutionTo disable the lockbox on a client, do the following:
  1. Stop your application.
  2. Change your application config file to disable the lockbox and define the lockbox password.
    • On Java, the setting should be client.lockbox=false and client.lockbox_admin_password=yourlockboxpassword
    • On C and C#, the setting should be lockbox=false and lockboxAdminPassword=yourlockboxpassword under svcType=globalSvc
  3. Start your application with the lockbox disabled. It should now start normally without the lockbox disabled.
To re-enable or reset the lockbox, disable it first using the steps above and then do the following:
  1. Enable the lockbox and define the lockbox password.
    • On Java, the settings should be client.lockbox=true and client.lockbox_admin_password=yourlockboxpassword
    • On C and C#, the settings should be lockbox=true and lockboxAdminPassword=yourlockboxpassword under svcType=globalSvc
  2. Start your application. It should now start normally.
Legacy Article IDa63090

Attachments

    Outcomes