JR64340: IBM RPA UNABLE TO CAST RSAPRIVATECRTKEYPARAMETER TO ASYMMETRICCIPHERKEYPAIR ERROR ON SCRIPT EXECUTION OR GET VAULT ITEM

Download IBM Robotic Process Automation 21.0.2

APAR status

• Closed as program error.

Error description

• Scripts execution (scheduling and API) with the unlock machine
  option true or get Vault Item command fails with a casting error
  message:
  Unable to cast object of type
  'Org.BouncyCastle.Crypto.AsymmetricCipherKeyPair' to type
  'Org.BouncyCastle.Crypto.Parameters.RsaKeyParameters'
  
  If users set up pair of public and private keys (.pem) with
  recent versions of OpenSSL (e.g 3.0.0) the IBM RPA will prompt a
  casting error message on script executions with unlock machine
  option and in get vault item command.
  

Local fix

• 1. Download OpenSSL version 0.9.8
  
  2. Generate new public and private keys
  3. Upload new public key and set private key path for the tenant
  by:
  
  A. Open Control Center
  B. Administer -> Tenants -> Tenant Configuration
  C. File -> Upload File -> Select the new generated public key
  (here public key is uploaded)
  D. On File Path select the new private key path.
  4. Place the new generated private key under the path selected
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Users that tried to use SSL keys created with this tutorial  *
  * https://www.ibm.com/docs/en/rpa/21.0?topic=credentials-manag *
  * ing-keys#configuring-keys-and-credentials                    *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * The agent was handling the keys incorrectly since it was     *
  * expecting a certain key format, now it can handle the key    *
  * that is generated by the tutorial on                         *
  * https://www.ibm.com/docs/en/rpa/21.0?topic=credentials-manag *
  * ing-keys#configuring-keys-and-credentials                    *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Upgrade to IBM RPA 21.0.2                                    *
  ****************************************************************
  

Problem conclusion

• First fixed in 21.0.2
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  RPA

• Fixed component ID

  5737N5100

Applicable component levels

• RK00 PSY

     UP

• RL00 PSY

     UP