• Product: RSA Identity Governance & Lifecycle
• Version: 7.0.x, 7.1.x, 7.5.x, 8.x
• Components: AFX Server, AFX Connectors

Issue

RSA Support may ask you to download and reinstall the AFX Server Archive as a first troubleshooting step when an AFX issue is reported. You may also perform this procedure proactively when AFX is not functioning as expected and other resolution attempts have not succeeded.

Before you begin, confirm you have the following:

NOTE: This article covers reinstalling the AFX Server Archive component only, it does not cover a new AFX installation or a complete AFX reinstall. For those procedures, see How to Install Access Fulfillment Express (AFX) for Use with RSA Identity Governance & Lifecycle.

NOTE: Throughout these steps, replace {afxuser} with your actual afx OS user account name. By default, this is oracle on RSA Identity Governance & Lifecycle hardware and software appliances.

1. Open a browser and log in to the RSA Identity Governance & Lifecycle Admin Console:

   https://<your-appliance-hostname>/aveksa/main

2. Navigate to AFX > Servers > AFX Server and click Download Server Archive to download AFXServer.zip to your local PC.
3. Using WinSCP or another SFTP client, transfer AFXServer.zip from your local PC to the following directory on the RSA Identity Governance & Lifecycle appliance:

   /home/{afxuser}/

4. Open an SSH session to the RSA Identity Governance & Lifecycle appliance and log in as the afx user.
5. Stop the AFX Server:

   service afx_server stop

   NOTE: Always stop AFX as the afx user — never as root.

6. Verify that no AFX processes remain running:

   ps -ef | grep AFX

   If the output shows no AFX processes, proceed to Step 8. If AFX processes are still running, proceed to Step 7.

7. Kill any remaining AFX processes. Replace <PID> with each process ID returned by the ps command in Step 6:

   kill -9 <PID>

   Repeat for each remaining AFX process, then re-run the ps command from Step 6 to confirm all AFX processes have stopped before continuing.

8. Back up the existing AFX directory.

   CAUTION: Do not skip this step. The backup allows you to restore your previous AFX configuration if the reinstallation does not resolve the issue. Replace <date> with today's date (for example, 20260512):

   mv AFX AFX.backup_<date>

9. Extract the AFX Server Archive:

   cd /home/{afxuser}
   unzip AFXServer.zip

   This creates a new AFX directory at /home/{afxuser}/AFX.

10. Navigate to the AFX bin directory and run the permissions script:

    cd /home/{afxuser}/AFX/bin
    sh ./setPerms.sh

11. Start the AFX Server:

    service afx_server start

    NOTE: Always start AFX as the afx user — never as root.

Verification:

1. Open a browser and log in to the RSA Identity Governance & Lifecycle Admin Console.
2. Navigate to AFX > Servers and confirm the AFX Server status shows Running.
3. Navigate to AFX > Connectors and confirm all AFX Connectors show a status of Running.
4. If any connector does not show Running, allow 2–3 minutes for the connectors to initialize after AFX startup, then refresh the page.