Remote AFX Server fails to start with an SSLHandshakeException error in RSA Identity Governance & Lifecycle
Originally Published: 2015-11-12
Article Number
Applies To
RSA Version/Condition: All
Issue
The $AFX_HOME/AFX/esb/logs/esb.AFX-INIT.log file contains the following error:
name='endpoint.https.xxxxx.test.myaccesslive.aveksa.com.444.aveksa.afx.heartbeat',
mep=REQUEST_RESPONSE, properties={followRedirects=false, http.method=POST},
transactionConfig=Transaction{factory=null, action=INDIFFERENT, timeout=0},
deleteUnacceptedMessages=false, initialState=started, responseTimeout=10000,
endpointEncoding=UTF-8, disableTransportTransformer=false}.
Message payload is of type: PostMethod
Code : MULE_ERROR--2
--------------------------------------------------------------------------------
Exception stack is:
1. Received fatal alert: handshake_failure (javax.net.ssl.SSLHandshakeException)
com.ibm.jsse2.o:9
(http://java.sun.com/j2ee/sdk_1.3/techdocs/api/javax/net/ssl/SSLHandshakeException.html)
2. Failed to route event via endpoint: DefaultOutboundEndpoint
{endpointUri=https://xxxxx-test.myaccesslive.aveksa.com:444/aveksa/afx/heartbeat,
connector=HttpsConnector
{
Cause
AFX requires the use of Oracle JDK or OpenJDK. The use of IBM JDK/JRE will cause the startup of the AFX server to fail.
Resolution
Related Articles
Server Error - Proxy unable to access remote Workpoint Server on RSA Identity Governance and Lifecycle 7.0.x when attempti… 13Number of Views RSA Identity Governance & Lifecycle 6.8.x and above remote Access Fulfilment Express (AFX) server fails to start with the … 160Number of Views 'Could not deserialize result from HTTP invoker remote service' error when opening/editing workflows in RSA Identity Gover… 243Number of Views A Firewall is blocking Remote AFX Agents and Remote Collection Agents from communicating with the Application Server in RS… 156Number of Views RSA Identity Governance and Lifecycle 7.5 Administrator's Guide 48Number of Views
Trending Articles
RSA Authentication Manager 8.9 Setup and Configuration Guide How to 'Trust' the RSA Authentication Manager Security Console Self-Signed Root CA certificate and prevent Cert warnings. RSA Authentication Manager 8.9 Release Notes (January 2026) Configure RSA Authentication Manager as a Secure Proxy Server for Cloud Access Service RSA Authentication Manager Upgrade Process
Don't see what you're looking for?