Dynamic agents not connecting after certificate rotation when using JWT

About this task

If you are using JWT and modify the certificates on the master domain manager, communication with dynamic agents might be interrupted.

Workaround

After modifying the certificates on the master domain manager, if the communication has been lost, you can recover it by running the following command on each dynamic agent:
./AgentCertificateDownloader.sh --jwt false --work_dir <work_dir> --tdwbhostname <tdwbhostname> 
--tdwbport <tdwbport> --gwid <gateway_id> --gateway <local|remote|none> 
--apikey <API key for authentication with the master domain manager>
After running the command, restart the agent.

Problem prevention

If you are using JWT, you can disable this setting before modifying the certificates to prevent communication problems. To disable JWT and switch to using certificates, perform the following steps:
  1. Browse to the ita.ini file on the dynamic agent. The file is located in TWA_DATA_DIR/ITA/cpa/ita.
  2. Comment out the jwt_file = line, if existing. Consider the following example: 
    #jwt_file =
  3. Restart the agent.