IIQ version - 8.4 P1
Our identity refresh task often fails with the below error -
An unexpected error occurred: Error occurred while retrieving the credentials.
sailpoint.tools.GeneralException: Error occurred while retrieving the credentials.
Caused by: javapasswordsdk.exceptions.PSDKException: EN013E Failed to decrypt message (Reason: Given final block not properly padded. Such issues can arise if a bad key is used during decryption.)
We have CyberArk credential cycling enabled for all applications.
This issue is intermittent (the error happens for 2 or 3 identities per refresh but gets success next time)and I’m skeptical that the issue is with keystore.
We enabled trace for CP agents and captured logs, but don’t see any issue in password retrieval. We tried cli commands to see if it is SDK issue from CyberArk end, but could retrieve decrypted password without any issue.
It would be great if anyone can help me fix/narrow down the issue.