Error 'Failed to generate RSA Key' when generating an RSA key pair
Originally Published: 2011-05-09
Article Number
Applies To
Issue
at com.rsa.keymanager.core.key.generate.DefaultRSAKeyGenerator.generateKeyWithSize(DefaultRSAKeyGenerator.java:101)
at com.rsa.keymanager.core.key.generate.DefaultRSAKeyGenerator.generateAndCheckFailure(DefaultRSAKeyGenerator.java:65)
[...]
au.net.netstorm.boost.primordial.PrimordialException: Failed to generate RSA Key
at com.rsa.keymanager.core.key.generate.DefaultRSAKeyGenerator.generateKeyWithSize(DefaultRSAKeyGenerator.java:101)
at com.rsa.keymanager.core.key.generate.DefaultRSAKeyGenerator.generateAndCheckFailure(DefaultRSAKeyGenerator.java:65)
[...]
Logs when the server starts shows twice the following initialization log (twice in the same 5 seconds interval):
02 May 2011 16:45:20,383 INFO Thread-1 - Client : Internal, -------------------------------------
02 May 2011 16:45:20,383 INFO Thread-1 - Client : Internal, Current Providers
02 May 2011 16:45:20,383 INFO Thread-1 - Client : Internal, -------------------------------------
[...]
02 May 2011 16:45:21,476 INFO Thread-1 - Client : Internal, -------------------------------------
02 May 2011 16:45:21,476 INFO Thread-1 - Client : Internal, Final Providers
02 May 2011 16:45:21,476 INFO Thread-1 - Client : Internal, -------------------------------------
[...]
Resolution
The problem was that previous version of RKM server war file was still in Tomcat's webapps folder. This is not allowed and lead to inconsistent and unpredictable behavior. To fix the issue, do the following:
1. Stop Tomcat
2. Go in TOMCAT/webapps folder and delete any un-needed .war file. Keep only KMS.war of the version needed
3. Delete all KMS-like folder both in TOMCAT/webapps/ and TOMCAT/work/Catalina/localhost
4. Restart Tomcat
Notes
Related Articles
How is a target URL mapped to a trusted RP (Relying Party) in RSA Federated Identity Manager (FIM) 2.5? Number of Views 'Certificate already exists' error when auto-enrolling clients Number of Views ASR fails to generate and the log file has 'ORA-04063: package body "AVUSER.SRSECTION_SYSTEM" has errors' errors in RSA Id… Number of Views Duplicate groups are shown for a user in RSA Identity Governance & Lifecycle Number of Views Unable to delete a Security Domain in RSA Authentication Manager 8.x Number of Views
Trending Articles
Downloading RSA Authentication Manager license files or RSA Software token seed records RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory Mandatory Certificate Upgrade Required by 6th October 2025 for RSA MFA Agent for PAM, RSA MFA Agent for Apache, and Third … RSA Authentication Manager 8.9 Release Notes (January 2026)
Don't see what you're looking for?
