Intellisig error "The integrity checker generated an error during initialization. The certificate may not be installed on agent."

Document ID : KB000019734
Last Modified Date : 28/03/2018
Show Technical Document Details
Issue:

The Software Inventory Collect task is in status ERROR with message like:

"Intellisig named Java SE Runtime Environment, version 1.3, UUID 6A3140EC-D329-4BB7-80CE-8A35744B96EC, script file JRE.dms. The integrity checker generated an error during initialization. The certificate may not be installed on agent."

In TRC_UAM_CAEVMSCLI*.log (Unix/Linux) or TRC_UAM_AMSWSIGSCAN_*.log (Windows) following errors appear :

ERROR | CCertStore::RetrieveCertificate: cert not found
ERROR | IntellisigCert::init: Failed to LoadPeerPublicIdentity

and

DETAIL | CiSig::verifyIntegrity : starts
ERROR | Intellisig Integrity Checker failed to initalise

Environment:
Client Automation (ITCM) -- any version
Cause:
The certificate "Manager Signer" used for intellisig signature is not present in certdb and should be imported.

Execute this command: cacertutil list
If certificate "Manager Signer" does not appear under "Listing identity certificates" and Listing tags
 
Listing identity certificates:
Subject : CN=manager signer,O=computer associates,C=us 
Listing tags:
ManagerSigner = CN=manager signer,O=computer associates,C=us
Resolution:
Unix/Linux:
# . /etc/profile.CA all
# cd /opt/CA/DSM/caf/bin
# cacertutil import -i:itrm_dsm_mngrsgn.cer -it:x509v3 -t:ManagerSigner

On Windows:
# cd C:\Program Files\CA\DSM\Bin
# cacertutil import -i:itrm_dsm_mngrsgn.cer -it:x509v3 -t:ManagerSigner