My Oracle Support Banner

OEM13c: Attempting to Secure OEM Console Fails with "No class found for OBJECT IDENTIFIER {1 2 840 113549 2 9}" (Doc ID 3008048.1)

Last updated on MARCH 01, 2024

Applies to:

Enterprise Manager Base Platform - Version 13.5.0.0.0 and later
Information in this document applies to any platform.

Symptoms

On : 13.5.0.0.0 version, Security Framework

Attempting to Secure OEM Console Fails with "No class found for OBJECT IDENTIFIER {1 2 840 113549 2 9}"



$ $OMS_HOME/bin/emctl secure console -wallet /home/oracle/wallets
Oracle Enterprise Manager Cloud Control 13c Release 5
Copyright (c) 1996, 2021 Oracle Corporation.  All rights reserved.
Securing Console... Started.
Enter Enterprise Manager Root (SYSMAN) Password :
Securing Console... Failed. Check the log /u02/oracle/gc_inst1/em/EMGC_OMS1/sysman/log/secure.log


secure.log from OEM shows entries like below.

2024-02-28 16:58:21,597 [main] INFO  oms.SecureConsoleCmds - Wallet location: /home/oracle/wallets/oem_wallet/
2024-02-28 16:58:21,608 [main] INFO  oms.SecureConsoleCmds - Configuring external wallet for console: /home/oracle/wallets/oem_wallet/
2024-02-28 16:58:21,609 [main] INFO  oms.SecureConsoleCmds - Value of -host option: <Hostname.Domain>
2024-02-28 16:58:21,619 [main] INFO  oms.SecureConsoleCmds - SLB Hostname property present in repos: null
2024-02-28 16:58:21,619 [main] INFO  oms.SecureOMSCmds - Validating if user cert for <Hostname.Domain> exists in external wallet /home/oracle/wallets/oem_wallet/
2024-02-28 16:58:21,665 [main] ERROR oms.SecureConsoleCmds - Failed to secure the Console: oracle.security.crypto.core.CipherException: oracle.security.crypto.core.InvalidKeyException: oracle.security.crypto.core.AlgorithmIdentifierException: No class found for OBJECT IDENTIFIER {1 2 840 113549 2 9}
java.io.IOException: oracle.security.crypto.core.CipherException: oracle.security.crypto.core.InvalidKeyException: oracle.security.crypto.core.AlgorithmIdentifierException: No class found for OBJECT IDENTIFIER {1 2 840 113549 2 9}
at oracle.security.pki.OracleWallet.open(Unknown Source) ~[oraclepki.jar:?]
at oracle.sysman.emctl.secure.oms.SecureOMSCmds.validateExtWallet(SecureOMSCmds.java:2773) ~[emCoreSDKImpl.jar:?]
at oracle.sysman.emctl.secure.oms.SecureConsoleCmds.processSecureConsole(SecureConsoleCmds.java:344) ~[emCoreConsole.jar:?]
at oracle.sysman.emctl.secure.oms.SecureConsoleCmds.main(SecureConsoleCmds.java:172) [emCoreConsole.jar:?]
Caused by: oracle.security.crypto.asn1.ASN1FormatException: oracle.security.crypto.core.CipherException: oracle.security.crypto.core.InvalidKeyException: oracle.security.crypto.core.AlgorithmIdentifierException: No class found for OBJECT IDENTIFIER {1 2 840 113549 2 9}
at oracle.security.crypto.cert.PKCS12Safe.input(PKCS12Safe.java:222) ~[osdt_cert.jar:3.1.0]
at oracle.security.crypto.cert.PKCS12Safe.<init>(PKCS12Safe.java:129) ~[osdt_cert.jar:3.1.0]
at oracle.security.crypto.cert.PKCS12.input(PKCS12.java:179) ~[osdt_cert.jar:3.1.0]
at oracle.security.crypto.cert.PKCS12.<init>(PKCS12.java:122) ~[osdt_cert.jar:3.1.0]
at oracle.security.pki.OracleKeyStoreSpi.load(Unknown Source) ~[oraclepki.jar:?]
at oracle.security.pki.OracleKeyStoreSpi.engineLoad(Unknown Source) ~[oraclepki.jar:?]
at oracle.security.pki.OracleSSOKeyStoreSpi.engineLoad(Unknown Source) ~[oraclepki.jar:?]
at oracle.security.pki.OracleSecretStore.load(Unknown Source) ~[oraclepki.jar:?]
at oracle.security.pki.OracleWallet.getSecretStore(Unknown Source) ~[oraclepki.jar:?]
... 4 more

 

 

Changes

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.