AFT Validation Error - Failed to create SSL client profile

Everything about Control-M Control Modules
Post Reply
User avatar
punchy
Nouveau
Nouveau
Posts: 27
Joined: 30 Oct 2008 12:00
Location: Melbourne

AFT Validation Error - Failed to create SSL client profile

Post by punchy » 28 Jul 2009 9:09

Hi,

I'm trying to setup up encrypted FTP (FTP over SSL/TLS) Between two Windows Machines. Host 1 is the local Windows host which Control-M /CM AFT resides. Host 2 is a standard Windows 2003 host with FileZilla Server installed.

Ive been able to setup normal FTP and SFTP(SSH) between the same two hosts. The reasons why I want to go down the path of FTP over SSL/TLS are security and Rerun from Point of Failure which SFTP(SSH) does not support.

Now I've generated a certificate in FileZilla on host 2 and copied that *.crt file over to Host 1. I then used sslcmd.exe -k aftkey.kdb and successfully imported the CA using option 2. Add CA.

Exit the utility and restarted the Control-M Agent service.

Went into Account Management Utility a defined my account like so. I go to do the validation and I get that error massage =

Host 2 validation failed: Failed to create SSL client profile.

What is this SSL client profile??


I've looked in the aftcln.log and the errors I see are:

1:Tue Jul 28 16:57:31 2009:pid=3908:ERR:ssl_tsw.c:409:Cannot initiate with TSW_crypt_init, invalid password, key file C:\Program Files\BMC Software\CONTROL-M Agent\Default\CM\AFT\data\\SSL\CERT\aftkey.kdb, CORE: Wrong version

2:Tue Jul 28 16:57:31 2009:pid=3908:ERR:..\bcm\bcm_api.c:595:BCM_Option: unable to execute option

3:Tue Jul 28 16:57:31 2009:pid=3908:ERR:bmccfg_ClientServer.c:558:error setting BCA password for C:\Program Files\BMC Software\CONTROL-M Agent\Default\CM\AFT\data\\SSL\CERT\aftkey.kdb: Cannot initiate with TSW_crypt_init, invalid password, key file C:\Program Files\BMC Software\CONTROL-M Agent\Default\CM\AFT\data\\SSL\CE`'?

4:Tue Jul 28 16:57:31 2009:pid=3908:ERR:bmccfg.c:660:PolicyOpen failed -1

5:Tue Jul 28 16:57:31 2009:pid=3908:ERR:ssl_tsw.c:409:Cannot initiate with TSW_crypt_init, invalid password, key file C:\Program Files\BMC Software\CONTROL-M Agent\Default\CM\AFT\data\\SSL\CERT\aftkey.kdb, CORE: Wrong version

6:Tue Jul 28 16:57:31 2009:pid=3908:ERR:ssl_tsw.c:247:Cannot finish context initialization

I've tried setting this up using the 6.3 AFT guide pages 93-102

I've tried BMC KB search on TSW_Crypt_init = Doesn't help me.

Anyone have any insight in my problem?

Any help would deeply be appreciated.



Thanks,

Punchy

User avatar
punchy
Nouveau
Nouveau
Posts: 27
Joined: 30 Oct 2008 12:00
Location: Melbourne

Post by punchy » 29 Jul 2009 7:33

Nevermind all. I've worked it out.

It was the format of the certificate files.

:D

User avatar
CPalacios
Nouveau
Nouveau
Posts: 5
Joined: 24 Mar 2011 12:00

Post by CPalacios » 15 May 2012 5:55

May I know how did you resolve this issue?

Post Reply