000036931 - Error while opening workflows in Workpoint Editor in  RSA Identity Governance and Lifecycle 7.1.0 P03 when using secure port 9443: Unexpected End of File from server

Document created by RSA Customer Support Employee on Nov 24, 2018Last modified by RSA Customer Support Employee on Nov 24, 2018
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000036931
Applies ToRSA Product Set: Identity Governance and Lifecycle
RSA Version: 7.0.2 P05+, 7.1.0+
Application Server: WebSphere 


After upgrading from Identity Governance and Lifecycle 7.0.1 version to 7.1.0 P03 or 7.0.2 P05, trying to open any workflow in workflow editor results into below error:


You have specified JVM arguments as follows:

CauseThe error occurs because, although you have specified port 9443 in JVM arguments, by default, http port is used by workpoint client as specified in the workpoint-client.properties file in acmConfig.jar within the aveksaWFArtitect.ear file.

Currently (as of RSA Identity Governance & Lifecycle 7.1.0 P03 and 7.0.2 P05 versions), there is no way to specify JVM arguments for https. 

ResolutionEngineering may have plans to change this in a future version to allow the protocol selection similar to the feature we introduced for non-default port specification in RSA Identity Governance & Lifecycle 7.0.2 P05 and higher versions. 

Https needs to be defined as the connection protocol. Since this is not currently configurable as of RSA Identity Governance & Lifecycle 7.1.0 P03 and 7.0.2 P05, it needs to be manually updated in the workpoint-client.properties file and the aveksaWFArtitect.EAR  by following the below steps. These steps will allow you to use the 'https' protocol for opening workflows in the Workflow Editor.

  1. From WebSphere console, uninstall currently deployed 'Aveksa Workflow Editor'.


    • In Websphere Console: Go to Applications --> Application Types --> 'Websphere enterprise application' page:
    • Select 'Aveksa Workflow Editor' and click 'Uninstall' as shown below: 
  2. Update workpoint-client.properties file in acmConfig.jar within ACM-WebSphere-7.1.0_P03.tar
  3. Save workpoint-client.properties file
  4.  Install updated aveksaWFArchitect.ear file in step-2, using the steps below as per Installation Guide, section:Install the Workflow Architect EAR File

    This task describes how to install the RSA Identity Governance and Lifecycle Workflow Architect. You use the Workflow Architect to view and edit workflows for change requests. During the deployment process, a cluster requires a single connection to the database for setup and migration. Make sure you use a single node during the process and that only one server instance is running.

    1.  In the WebSphere console, initiate the installation:
      1. From Applications menu, select Application Types > Websphere Enterprise Applications, and click Install.
      2. Browse to the folder that contains aveksaWFArchitect.ear file that you updated and saved.  Select this aveksaWFArchitect.ear.
    2. Not indicated otherwise where the Fast Path. Accept default values 2. Proceed through the wizard, choosing
    3. (Clusters only) Select Map Modules to Servers. Select all modules, select the scope from the list of Clusters and Servers, and click Apply. The server associated with the module should be listed as the cluster. Click Next.
    4. In the ‘Map Virtual Hosts’ for Web Modules screen, click Next.
    5. (WebSphere 9.0.0.x only) In the Metadata for modules screen, enable the metadata-complete attribute checkbox and click Next.
    6. Complete the installation of the EAR. This process takes several minutes to complete.
    7. Save changes to the master configuration.
    8. Restart application server:

    ppServer/bincd /opt/IBM/WebSphere/A
    rver-name>  ./stopServer.sh <se
    ./stopServer.sh <server-name>




    Verify by logging into IG&L Admin Console (URL: https://<host-name>:9443/aveksa/main? and opening any workflow from Requests --> Workflows --> Select any workflow).  Selected workflow will be opened in workflow editor successfully.  For example:



    • Using 7-Zip, open ACM-WebSphere-7.1.0_P03.tar
    • Double click on folder: ‘ACM-Websphere-7.1.0_P03
    • Then open aveksaWFArchitect.ear
    • Double click /APP-INF/lib/
    • Open acmConfig.jar.
    • Open workpoint-client.properties file in Notepad++ (or any other editor)
    • Go to 'Connection configuration’ section and update following lines (Replace 'http' with 'https'):
    • serverContextPath = https://${wp-client-hostname}:${wp-client-hostport}/wpServices
    • client.connect.URL = https://${wp-client-hostname}:${wp-client-hostport}/wpServices/xml