3.11 Tomcat On RHEL 8.5 and 8.6 Does Not Start After Upgrading Identity Manager to 4.8.6

Issue: When upgrading Identity Manager to version 4.8.6 on a server running RHEL 8.5 or RHEL 8.6, OSP fails to start due to a database connection issue. It typically happens when the random key generation process takes longer than expected while the OSP is getting deployed. As a result, Tomcat services also fail to start. (Bug 569043)

Workaround: Modify the following lines in the java.security file at /opt/netiq/common/jre/lib/security/ location and restart Tomcat:

NOTE:Before applying the workaround, we recommend you read the RHEL documentation for more information on random number generators.

  • Replace securerandom.source=file:/dev/random

    with

    securerandom.source=file:/dev/./urandom
  • Replace securerandom.strongAlgorithms=NativePRNGBlocking:SUN

    with

    securerandom.strongAlgorithms=SHA1PRNG:SUN