Problem Note 33204: "ERROR: Could not find extension: (tkecapi)" occurs when initializing the SAS® Metadata Server
 |  |  |  |
Beginning in SAS® 9.2, the SAS® Metadata Server now defaults to storing credentials using the Advanced Encryption Standard (AES) encryption algorithm instead of the SASPROPRIETARY encryption algorithm. In order to use AES, you must have the SAS/SECURE® product installed and currently licensed. If you do not have SAS/SECURE installed, or your license has expired, you will see messages similar to the following in your metadata server log each time you start the server:
2008-08-25T13:04:59,006 INFO [00000007] :SYSTEM@CTNSRV05 - Unable to load AES encryption algorithm. Using SASPROPRIETARY for password fetch.
2008-08-25T13:04:59,006 INFO [00000007] :SYSTEM@CTNSRV05 - SAS Metadata Authorization Facility Initialization.
Note: On some operating systems the extension displayed in the error message is (tkersa) instead of (tkecapi).
The server continues to start normally and uses the SASPROPRIETARY encryption algorithm with no additional impact on the server. The error message can safely be ignored.
If you wish to avoid the error, you may add the STOREPASSWORDS= parameter to the <OMA> element in the omaconfig.xml file, and set its value to "SAS002". This value causes the SAS Metadata Server to only attempt to use SASPROPRIETARY encryption when storing passwords.
Note, however, that AES encryption is a more secure method for protecting your SAS Metadata credentials. If you have concerns about the security of your system, contact your SAS Account Executive about licensing SAS/SECURE software.
Operating System and Release Information
| Product Family | Product | System | Product Release | SAS Release | ||
| Reported | Fixed* | Reported | Fixed* | |||
| SAS System | SAS Metadata Server | 64-bit Enabled AIX | 9.21 | 9.3 | 9.2 TS2M0 | 9.3 TS1M0 |
| Windows Vista for x64 | 9.21 | 9.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| Windows Vista | 9.21 | 9.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| Microsoft Windows XP Professional | 9.21 | 9.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| Microsoft Windows Server 2008 for x64 | 9.21 | 9.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| Microsoft Windows Server 2003 for x64 | 9.21 | 9.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| Microsoft Windows Server 2003 Standard Edition | 9.21 | 9.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| Microsoft Windows Server 2003 Enterprise Edition | 9.21 | 9.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| Microsoft Windows Server 2003 Datacenter Edition | 9.21 | 9.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| Microsoft® Windows® for x64 | 9.21 | 9.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| Microsoft Windows XP 64-bit Edition | 9.21 | 9.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| Microsoft Windows Server 2003 Enterprise 64-bit Edition | 9.21 | 9.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| Microsoft Windows Server 2003 Datacenter 64-bit Edition | 9.21 | 9.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| Microsoft® Windows® for 64-Bit Itanium-based Systems | 9.21 | 9.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| z/OS | 9.21 | 9.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| 64-bit Enabled HP-UX | 9.21 | 9.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| 64-bit Enabled Solaris | 9.21 | 9.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| HP-UX IPF | 9.21 | 9.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| Linux | 9.21 | 9.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| Linux for x64 | 9.21 | 9.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| Solaris for x64 | 9.21 | 9.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||