000023802 - XCR_RKM error (20001): Invalid configuration specified in the initialization configuration

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 22, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000023802
Applies ToEMC PowerPath 5.2.0 build 94
EMC PowerPath 5.3
RSA Key Manager Client
IssueXCR_RKM error (20001): Invalid configuration specified in the initialization configuration
When attempting to encrypt with 'powervt' command, XCR_RKM error (20001) shows:

C:\Documents and Settings\user>powervt xcrypt -on -dev harddisk3
WARNING: This action will destroy data on harddisk3, continue? yes/[no]: yes
XCR_RKM error (20001): Invalid configuration specified in the initialization configuration.
Causerkm_init.conf was updated to point to a new PKCS#12 with a new file name.  When attempting to encrypt, PowerPath was still trying to pick the old PKCS#12 file which no longer existed.
ResolutionLocate the file /etc/emc/rsa/rkm_client/config/rkm_init.conf.

Edit it and make sure that the path pointing to the certificate and PKCS#12 (.p12 or .pfx) files are valid and have proper permissions.  If a new PKCS#12 filename was provided in rkm_init.conf, update the filename in rkm_init.conf to the old filename AND also rename the new PKCS#12 filename to the old one.
NotesIf rkm_keyclass.conf is updated with a new key class name, you must follow PowerPath documentation to run "ckmadm setkeyclass" for PowerPath to pick up the changes.
Legacy Article IDa38670

Attachments

    Outcomes