Error 'Failed to generate RSA Key' when generating an RSA key pair
Originally Published: 2011-05-09
Article Number
Applies To
Issue
at com.rsa.keymanager.core.key.generate.DefaultRSAKeyGenerator.generateKeyWithSize(DefaultRSAKeyGenerator.java:101)
at com.rsa.keymanager.core.key.generate.DefaultRSAKeyGenerator.generateAndCheckFailure(DefaultRSAKeyGenerator.java:65)
[...]
au.net.netstorm.boost.primordial.PrimordialException: Failed to generate RSA Key
at com.rsa.keymanager.core.key.generate.DefaultRSAKeyGenerator.generateKeyWithSize(DefaultRSAKeyGenerator.java:101)
at com.rsa.keymanager.core.key.generate.DefaultRSAKeyGenerator.generateAndCheckFailure(DefaultRSAKeyGenerator.java:65)
[...]
Logs when the server starts shows twice the following initialization log (twice in the same 5 seconds interval):
02 May 2011 16:45:20,383 INFO Thread-1 - Client : Internal, -------------------------------------
02 May 2011 16:45:20,383 INFO Thread-1 - Client : Internal, Current Providers
02 May 2011 16:45:20,383 INFO Thread-1 - Client : Internal, -------------------------------------
[...]
02 May 2011 16:45:21,476 INFO Thread-1 - Client : Internal, -------------------------------------
02 May 2011 16:45:21,476 INFO Thread-1 - Client : Internal, Final Providers
02 May 2011 16:45:21,476 INFO Thread-1 - Client : Internal, -------------------------------------
[...]
Resolution
The problem was that previous version of RKM server war file was still in Tomcat's webapps folder. This is not allowed and lead to inconsistent and unpredictable behavior. To fix the issue, do the following:
1. Stop Tomcat
2. Go in TOMCAT/webapps folder and delete any un-needed .war file. Keep only KMS.war of the version needed
3. Delete all KMS-like folder both in TOMCAT/webapps/ and TOMCAT/work/Catalina/localhost
4. Restart Tomcat
Notes
Related Articles
Duplicate groups are shown for a user in RSA Identity Governance & Lifecycle Number of Views How is a target URL mapped to a trusted RP (Relying Party) in RSA Federated Identity Manager (FIM) 2.5? Number of Views MessageMedia SMS Gateway - On Demand Token Code Delivery Configuration - RSA Ready SecurID Access Implementation Guide Number of Views 'Certificate already exists' error when auto-enrolling clients Number of Views AWS Workspaces - SAML My Page SSO Configuration - RSA Ready Implementation Guide Number of Views
Trending Articles
RSA Authentication Manager 8.9 Release Notes (January 2026) RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide RSA-2026-07: RSA Authentication Manager Security Update for Third-Party Component Vulnerabilities Downloading RSA Authentication Manager license files or RSA Software token seed records RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide
Don't see what you're looking for?
