Monitor model deployment with remote CEI: RMI connection issue caused by LTPA key mismatch

When you are deploying a monitor model with remote Common Event Infrastructure (CEI) and security enabled, an error occurs after you select Refresh List to retrieve a list of event group profile names from the remote CEI. This error can be caused by lightweight third party authentication (LTPA) keys that are different in the IBM® Business Monitor and remote CEI cells.

When you press Refresh List in the WebSphere® Application Server administrative console, a message similar to the following appears at the top of the administrative console panel:

CWMAX4230E: Error occurred getting the list of Event group profile names. Exception: com.ibm.websphere.management.exception.ConnectorException:
ADMC0017E: Could not create an RMI connector to connect to host host_name at port port

This problem can occur because current LTPA keys have not been shared between the remote CEI cell and the IBM Business Monitor cell. If you did not experience this problem previously when deploying a monitor model, LTPA keys were probably regenerated in one of the cells.

Resolving the problem

To resolve this problem, complete the following steps:

To check the security settings related to LTPA key regeneration:
- In the WebSphere Application Server administrative console, go to Security > Global security > Authentication mechanisms and expiration.
- In the Key generation area, click Key set groups. Click the key set group name that is being used. The Automatically generate keys check box controls whether the LTPA keys are regenerated automatically. The Repeat interval fields indicate how often the LTPA keys are regenerated.
To resolve the problem, exchange LTPA keys between cells. Export the LTPA keys that you want to use in the future from one cell and import the keys into the other cell so that the keys match between the cells. See "Sharing LTPA keys" in the related links for more detailed instructions.

To prevent future problems, exchange LTPA keys whenever they change in the IBM Business Monitor cell or the emitting CEI cell. Disabling automatic key generation, generating new keys as needed, and exchanging keys during planned maintenance windows can help avoid problems caused by unexpected LTPA key regeneration.