Error 'Failed to generate RSA Key' when generating an RSA key pair
Originally Published: 2011-05-09
Article Number
Applies To
Issue
at com.rsa.keymanager.core.key.generate.DefaultRSAKeyGenerator.generateKeyWithSize(DefaultRSAKeyGenerator.java:101)
at com.rsa.keymanager.core.key.generate.DefaultRSAKeyGenerator.generateAndCheckFailure(DefaultRSAKeyGenerator.java:65)
[...]
au.net.netstorm.boost.primordial.PrimordialException: Failed to generate RSA Key
at com.rsa.keymanager.core.key.generate.DefaultRSAKeyGenerator.generateKeyWithSize(DefaultRSAKeyGenerator.java:101)
at com.rsa.keymanager.core.key.generate.DefaultRSAKeyGenerator.generateAndCheckFailure(DefaultRSAKeyGenerator.java:65)
[...]
Logs when the server starts shows twice the following initialization log (twice in the same 5 seconds interval):
02 May 2011 16:45:20,383 INFO Thread-1 - Client : Internal, -------------------------------------
02 May 2011 16:45:20,383 INFO Thread-1 - Client : Internal, Current Providers
02 May 2011 16:45:20,383 INFO Thread-1 - Client : Internal, -------------------------------------
[...]
02 May 2011 16:45:21,476 INFO Thread-1 - Client : Internal, -------------------------------------
02 May 2011 16:45:21,476 INFO Thread-1 - Client : Internal, Final Providers
02 May 2011 16:45:21,476 INFO Thread-1 - Client : Internal, -------------------------------------
[...]
Resolution
The problem was that previous version of RKM server war file was still in Tomcat's webapps folder. This is not allowed and lead to inconsistent and unpredictable behavior. To fix the issue, do the following:
1. Stop Tomcat
2. Go in TOMCAT/webapps folder and delete any un-needed .war file. Keep only KMS.war of the version needed
3. Delete all KMS-like folder both in TOMCAT/webapps/ and TOMCAT/work/Catalina/localhost
4. Restart Tomcat
Notes
Related Articles
Duplicate groups are shown for a user in RSA Identity Governance & Lifecycle Number of Views How is a target URL mapped to a trusted RP (Relying Party) in RSA Federated Identity Manager (FIM) 2.5? Number of Views 'Certificate already exists' error when auto-enrolling clients Number of Views MessageMedia SMS Gateway - On Demand Token Code Delivery Configuration - RSA Ready SecurID Access Implementation Guide Number of Views AWS Workspaces - SAML My Page SSO Configuration - RSA Ready Implementation Guide Number of Views
Trending Articles
RSA Authentication Manager 8.9 Setup and Configuration Guide How to 'Trust' the RSA Authentication Manager Security Console Self-Signed Root CA certificate and prevent Cert warnings. RSA Authentication Manager 8.9 Release Notes (January 2026) Configure RSA Authentication Manager as a Secure Proxy Server for Cloud Access Service LDAP password authentication failed - Logon failure: unknown username or invalid password when attempting RADIUS authentic…
Don't see what you're looking for?
