KOTS Installation Error: "Public Key Retrieval is not allowed"

Author: Riya Ray

Date: November 02, 2023

Audience: Everyone

Environmental details: Self-hosted - KOTS

Problem/Summary:

Jama Connect KOTS is installed, but the Application is still not accessible. Checking into the logs, you can see the error "Public Key Retrieval is not allowed" is thrown (see below):

ERROR http-nio-8080-exec-6 contour [1f4195] [com.jamasoftware.contour.setup.service.impl.SchemaServiceImpl] - Failed to check if the schema exists for tenant id contour
com.mysql.jdbc.exceptions.jdbc4.MySQLNonTransientConnectionException: Public Key Retrieval is not allowed

Solution:

1. Navigate to your Admin console and update the below value under the Advanced Database Settings panel:

2. allowPublicKeyRetrieval=true

3. Save this new configuration.
4. Once done, run the below commands:

5. kubectl exec core-0 -- sh -c 'rm -rf /home/contour/tenant_properties /home/contour/tenant.properties /home/contour/setup.properties /home/contour/services.properties /home/contour/node.properties /home/contour/database.properties'

6. kubectl delete job/tenant-manager

7. kubectl delete sts/hazelcast sts/activemq

8. kubectl delete pod/core-0 

9. Delete the row in the tenantstate table by running the below query on your Database:

10. delete from tenantstate;

11. Deploy the last changes from the KOTS Admin console.

Cause:

This issue is happening because PublicKeyRetrieval is not enabled on the instance. 

Prevention: Ensure the PublicKeyRetrieval value is updated under the Advanced Database Settings on the Admin console.

Additional Information/Metadata:

• Jama Connect KOTS Installation troubleshooting
• Admin Console settings/ parameters