My Oracle Support Banner

EM 13c: Cipher-secured Enterprise Manager 13c Cloud Control Agent Start Fails with Error: SSL Configuration failed at Startup (Doc ID 2138098.1)

Last updated on OCTOBER 26, 2017

Applies to:

Enterprise Manager Base Platform - Version 13.1.0.0.0 and later
Information in this document applies to any platform.

Symptoms

The Enterprise Manager (EM) 13.1.0.0.0 Cloud Control Agent will not start when configured to use the SSL_RSA_WITH_AES_128_CBC_SHA cipher. The following error is given an agent start:

$ emctl setproperty agent -name SSLCipherSuites -value SSL_RSA_WITH_AES_128_CBC_SHA
Oracle Enterprise Manager Cloud Control 13c Release 1
Copyright (c) 1996, 2015 Oracle Corporation. All rights reserved.
EMD setproperty succeeded
[oracle@fmssdmaxappx ~]$ emctl stop agent
Oracle Enterprise Manager Cloud Control 13c Release 1
Copyright (c) 1996, 2015 Oracle Corporation. All rights reserved.
Stopping agent ... stopped.
[oracle@fmssdmaxappx ~]$ emctl start agent
Oracle Enterprise Manager Cloud Control 13c Release 1
Copyright (c) 1996, 2015 Oracle Corporation. All rights reserved.
Starting agent .............. failed.
SSL Configuration failed at Startup
Consult emctl.log and emagent.nohup in: /opt/oracle/agent/agent_inst/sysman/log

 

The following message is logged in .../agent_inst/sysman/log/gcagent.log:

2016-05-02 20:56:41,658 [1:F7D7EA9C] INFO - Invoking STARTUP_P1 on HTTP Client Configuration

2016-05-02 20:56:42,116 [1:F7D7EA9C] INFO - Done: STARTUP_P1 on HTTP Client Configuration
2016-05-02 20:56:42,116 [1:F7D7EA9C] INFO - Invoking STARTUP_P1 on SSL Configuration
2016-05-02 20:56:42,306 [1:F7D7EA9C] WARN - User requested cipher suite SSL_RSA_WITH_AES_128_CBC_SHA, which is not supported for SSLContext TLSv1.2
2016-05-02 20:56:42,308 [1:F7D7EA9C] WARN - Agent failed to Startup for SSL Configuration
oracle.sysman.gcagent.comm.agent.FatalException: Failed to find a supported cipher suite in [SSL_RSA_WITH_AES_128_CBC_SHA]
at oracle.sysman.gcagent.comm.agent.http.SSLInitComponent.tmNotifier(SSLInitComponent.java:84)
at oracle.sysman.gcagent.tmmain.lifecycle.TMComponentSvc.invokeNotifier(TMComponentSvc.java:1040)
at oracle.sysman.gcagent.tmmain.lifecycle.TMComponentSvc.invokeInitializationStep(TMComponentSvc.java:1125)
at oracle.sysman.gcagent.tmmain.lifecycle.TMComponentSvc.doInitializationStep(TMComponentSvc.java:958)
at oracle.sysman.gcagent.tmmain.lifecycle.TMComponentSvc.notifierDriver(TMComponentSvc.java:848)
at oracle.sysman.gcagent.tmmain.TMMain.startup(TMMain.java:271)
at oracle.sysman.gcagent.tmmain.TMMain.agentMain(TMMain.java:604)
at oracle.sysman.gcagent.tmmain.TMMain.main(TMMain.java:593)
Caused by: oracle.sysman.gcagent.comm.agent.http.SSLInitException: Failed to find a supported cipher suite in [SSL_RSA_WITH_AES_128_CBC_SHA]
at oracle.sysman.gcagent.comm.agent.http.SSLInit.intersect(SSLInit.java:272)
at oracle.sysman.gcagent.comm.agent.http.SSLInit.computeCipherSuites(SSLInit.java:230)
at oracle.sysman.gcagent.comm.agent.http.SSLInit.configure(SSLInit.java:123)
at oracle.sysman.gcagent.comm.agent.http.SSLInitComponent.tmNotifier(SSLInitComponent.java:80)

 

 

 

Changes

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.