Debug service V3 - NAV_306116 Failed to start

[nick-roux]

We have multi LPARs, V3 is working fine on all but one of them.

OS: V7R4M0 TR 11
Java: 11
Debug Service: V3
Navigator and Debug Service PTFs applied as per the documentation.

Any ideas what password it is looking for?

From Navigator
Error: NAV_306116: Failed to start the Debug Service Details:com.ibm.as400.access.AS400SecurityException: Password is not set. at com.ibm.as400.access.AS400.sendSignonRequest(AS400.java:4225) at com.ibm.as400.access.AS400.promptSignon(AS400.java:3811) at com.ibm.as400.access.AS400.signon(AS400.java:5391) at com.ibm.as400.access.ProgramCall.chooseImpl(ProgramCall.java:413) at com.ibm.as400.access.ProgramCall.run(ProgramCall.java:775) at com.ibm.navigator.debugger.RetrieveKeystoreFileAttributes.retrieveKeystoreFileAttributes(RetrieveKeystoreFileAttributes.java:115) at com.ibm.navigator.debugger.Decoder.getKeystoreFileAttributes(Decoder.java:472) at com.ibm.navigator.debugger.Decoder.getKeystore(Decoder.java:422) at com.ibm.navigator.debugger.Decoder.getKey(Decoder.java:398) at com.ibm.navigator.debugger.Decoder.checkPassword(Decoder.java:319) at com.ibm.navigator.debugger.Decoder.access$100(Decoder.java:51) at com.ibm.navigator.debugger.Decoder$1.run(Decoder.java:99) at java.base/java.lang.Thread.run(Thread.java:839) at com.ibm.navigator.debugger.Decoder$DebuggerHighAuthorityThread.run(Decoder.java:742)

From the log
cat DebugService_log.txt
Failed to get keystore password.
com.ibm.as400.access.AS400SecurityException: Password is not set.
at com.ibm.as400.access.AS400.sendSignonRequest(AS400.java:4225)
at com.ibm.as400.access.AS400.promptSignon(AS400.java:3811)
at com.ibm.as400.access.AS400.signon(AS400.java:5391)
at com.ibm.as400.access.ProgramCall.chooseImpl(ProgramCall.java:413)
at com.ibm.as400.access.ProgramCall.run(ProgramCall.java:775)
at com.ibm.navigator.debugger.RetrieveKeystoreFileAttributes.retrieveKeystoreFileAttributes(RetrieveKeystoreFileAttributes.java:115)
at com.ibm.navigator.debugger.Decoder.getKeystoreFileAttributes(Decoder.java:472)
at com.ibm.navigator.debugger.Decoder.getKeystore(Decoder.java:422)
at com.ibm.navigator.debugger.Decoder.getKey(Decoder.java:398)
at com.ibm.navigator.debugger.Decoder.checkPassword(Decoder.java:319)
at com.ibm.navigator.debugger.Decoder.access$100(Decoder.java:51)
at com.ibm.navigator.debugger.Decoder$1.run(Decoder.java:99)
at java.base/java.lang.Thread.run(Thread.java:839)
at com.ibm.navigator.debugger.Decoder$DebuggerHighAuthorityThread.run(Decoder.java:742)

[arco400]

@nick-roux the log seems to refer to the *SYSTEM keystore in DCM. That keystore has an independent password that should have been set by an administrator.

[nick-roux]

Thanks @arco400.
DCM password is set and we have valid certificates used by many applications. Master Key 1 is set.
Will dig a bit deeper into this.

[arco400]

On our system the solution from #21 helped solving the issue. I know it is not the same message, but maybe worth a try to clear that folder.

[mkwan01]

We include a jar file from the Navigator team in debug service for certificate management. This exception comes from the Navigator code. In one of the previous cases, the "Password is not set" error is caused by an expired password on the QSECOFR profile. Please check whether the QSECOFR password has expired. @nick-roux

[nick-roux]

Thanks for this.
We have already narrowed it down to a Navigator issue and IBM provided PTFs to apply, but it did not resolve the issue.
Will definitely check the QSECOFR profile tomorrow.

[nick-roux]

RESOLVED. Thanks for everyone's input.

Still looking at everything that contributed to resolving this and will post a summary here in case it may help someone else in the future.

[nick-roux]

This seems to be a deeper issue on the LPAR rather than a Debug Service issue.
The error came back after IPL and we are again unable to start the Debug Service.
IBM is investigating for us.