WSM-01701 : The Runtime PolicySet cannot be advertised due to validation errors.

Accessing Fusion Application shows below error:

A web component consumer error was received for the task Manage Fiscal Years. Report the error details to the following owning product Assets.

An error was received for the task Manage Fiscal Years. This task is identified with the code FA_MANAGE_FISCAL_YEAR that invokes program /WEB-INF/oracle/apps/financials/assets/sharedSetup/fiscalYears/ui/flow/FiscalYearMainFlow.xml#FiscalYearMainFlow of module code Payables. Review the consumer and producer logs for more details on this error.


Logfiles in CommonDomains shows following error:

Caused by: oracle.wsm.policy.advertisement.AdvertisementException: WSM-01701 : The Runtime PolicySet cannot be advertised due to validation errors.
PolicySet "PolicySet [timestamp=Wed Dec 31 18:00:00 CST 1969, subjectPattern=ResourcePattern [pattern=/FinancialDomain/FinancialSearchServer_1/AppsLoggerService/WEBs/Services-Logging/WEBSERVICEs/%7Bhttp%3A%2F%2Fxmlns.oracle.com%2Fapps%2Ffnd%2Fapplcore%2Flog%2Fservice%2F%7DAppsLoggerService/PORTs/AppsLoggerServiceSoapHttpPort, subjectType=WS_SERVICE, terms={PORT=AppsLoggerServiceSoapHttpPort, IMPLEMENTATION=WEB, SUBJECT_TYPE=WS_SERVICE, SERVICE={http://xmlns.oracle.com/apps/fnd/applcore/log/service/}AppsLoggerService, MODULE=Services-Logging, APPLICATION=AppsLoggerService, DOMAIN=FinancialDomain, SERVER=FinancialSearchServer_1}], domainExpression=http://xmlns.oracle.com/apps/fnd/applcore/log/service/#wsdl.endpoint(AppsLoggerService/AppsLoggerServiceSoapHttpPort), polmap={}, constraintedDataMap={ConstraintGroup [terms=[], size=0, weight=0]=ConstraintedData [status=FAILURE, localoptimization=null, validationErrors=[ValidationError [m_errorCode=WSM-02557, m_errorMessage=WSM-02557, m_errorContext=oracle.wsm.policymanager.accessor.BeanAccessor, m_errorLevel=error, m_resourceBundle=policymanager, m_errorMsgArgs=[&(@appliesTo~="WS-Service()")(policysets:global/%)]]], overrides=[], polRefs=[]]}, locked=true]"
validation errors: "WSM-02557 : The documents required to configure the Oracle Web Services Manager runtime have not been retrieved from the Policy Manager application (wsm-pm), possibly because the application is not running or has not been deployed in the environment. The query "&(@appliesTo~="WS-Service()")(policysets:global/%)" is queued for later retrieval. [oracle.wsm.policymanager.accessor.BeanAccessor]
" .
at oracle.wsm.advertisement.AdvertisementEngine.checkPolicySetErrors(AdvertisementEngine.java:1178)


oracle.bpel.services.workflow.client.WorkflowServiceClientException: oracle.bpel.services.workflow.client.WorkflowServiceClientException: javax.xml.ws.WebServiceException: oracle.fabric.common.PolicyEnforcementException: PolicySet Invalid: WSM-02557 oracle.wsm.policymanager.accessor.BeanAccessor The documents required to configure the Oracle Web Services Manager runtime have not been retrieved from the Policy Manager application (wsm-pm), possibly because the application is not running or has not been deployed in the environment. The query "&(policysets:global/%)(@appliesTo~="WS-Client()")" is queued for later retrieval.


Solution 1: This error could be related to password expiry of FUSION_APPS_WSM_APPID
You can retrieve the password for FUSION_APPS_WSM_APPID and update

Connect to OID/odsm -> http://fusionappln.net:7777/odsm/
using cn=orcladmin

Go to Databrowser
Go to cn=FAPolicies -> cn=JPSContext -> cn=FusionDomain -> cn=CredentialStore -> cn=oracle.wsm.security -> orclCSFKey=FUSION_APPS_WSM_APPID-KEY

1. Extract the password for FUSION_APPS_WSM_APPID
- Log into JXplorer using cn=orcladmin
- Navigate to orclCSFKey=FUSION_APPS_WSM_APPID-KEY,cn=oracle.wsm.security,cn=CredentialStore,cn=FusionDomain,cn=JPSContext,cn=FAPolicies
- Select 'Table Editor' tab
- The password is located in the orclcsfpassword field


Or

You can get the password using wlst tool. Run the wlst tool from common location

cd /u01/FusionappBase/fusionapps/oracle_common/common/bin

[oracle@fusionappln bin]$ ./wlst.sh

CLASSPATH=
/u01/FusionappBase/fusionapps/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar:
/u01/FusionappBase/fusionapps/patch_ocp371/profiles/default/sys_manifest_classpath/weblogic_patch.jar:
/u01/FusionappBase/fusionapps/jdk6/lib/tools.jar:
/u01/FusionappBase/fusionapps/wlserver_10.3/server/lib/weblogic_sp.jar:
/u01/FusionappBase/fusionapps/wlserver_10.3/server/lib/weblogic.jar:
/u01/FusionappBase/fusionapps/modules/features/weblogic.server.modules_10.3.6.0.jar:
/u01/FusionappBase/fusionapps/wlserver_10.3/server/lib/webservices.jar:
/u01/FusionappBase/fusionapps/modules/org.apache.ant_1.7.1/lib/ant-all.jar:
/u01/FusionappBase/fusionapps/modules/net.sf.antcontrib_1.1.0.0_10b2/lib/antcontrib.jar::
/u01/FusionappBase/fusionapps/oracle_common/modules/oracle.jrf_11.1.1/jrfwlstman.jar:
/u01/FusionappBase/fusionapps/oracle_common/common/wlst/lib/adfscripting.jar:
/u01/FusionappBase/fusionapps/oracle_common/common/wlst/lib/adf-share-mbeanswlst.jar:
/u01/FusionappBase/fusionapps/oracle_common/common/wlst/lib/mdswlst.jar:
/u01/FusionappBase/fusionapps/oracle_common/common/wlst/resources/auditwlst.jar:
/u01/FusionappBase/fusionapps/oracle_common/common/wlst/resources/igfwlsthelp.jar:
/u01/FusionappBase/fusionapps/oracle_common/common/wlst/resources/jps-wlst.jar:
/u01/FusionappBase/fusionapps/oracle_common/common/wlst/resources/jps-wlstrustprovider.jar:
/u01/FusionappBase/fusionapps/oracle_common/common/wlst/resources/jrf-wlst.jar:
/u01/FusionappBase/fusionapps/oracle_common/common/wlst/resources/oamap_help.jar:
/u01/FusionappBase/fusionapps/oracle_common/common/wlst/resources/oamAuthnProvider.jar:
/u01/FusionappBase/fusionapps/oracle_common/common/wlst/resources/ossoiap_help.jar:
/u01/FusionappBase/fusionapps/oracle_common/common/wlst/resources/ossoiap.jar:
/u01/FusionappBase/fusionapps/oracle_common/common/wlst/resources/ovdwlsthelp.jar:
/u01/FusionappBase/fusionapps/oracle_common/common/wlst/resources/sslconfigwlst.jar:
/u01/FusionappBase/fusionapps/oracle_common/common/wlst/resources/wsm-wlst.jar:
/u01/FusionappBase/fusionapps/utils/config/10.3/config-
launch.jar::/u01/FusionappBase/fusionapps/wlserver_10.3/common/derby/lib/derbynet.jar:
/u01/FusionappBase/fusionapps/wlserver_10.3/common/derby/lib/derbyclient.jar:
/u01/FusionappBase/fusionapps/wlserver_10.3/common/derby/lib/derbytools.jar::

Initializing WebLogic Scripting Tool (WLST) ...

Jython scans all the jar files it can find at first startup. Depending on the system, this process may take a few minutes to complete, and WLST may not return a prompt right away.

Welcome to WebLogic Server Administration Scripting Shell

Type help() for help on available commands

wls:/offline> connect('faadmin','Oracle123','t3://fusionappln.net:8041')
Connecting to t3://fusionappln.net:8041 with userid faadmin ...
Successfully connected to Admin Server 'AdminServer' that belongs to domain 'CommonDomain'.

Warning: An insecure protocol was used to connect to the
server. To ensure on-the-wire security, the SSL port or
Admin port should be used instead.

wls:/CommonDomain/serverConfig>

wls:/CommonDomain/serverConfig> listCred(map="oracle.wsm.security",key=" FUSION_APPS_WSM_APPID-KEY ")
Location changed to domainRuntime tree. This is a read-only tree with DomainMBean as the root.
For more help, use help(domainRuntime)

[Name : FUSION_APPS_WSM_APPID, Description : Identifies roles with elevated access aimed at developers to help achieve code based access control that is beyond the access of the current operator to manage applications using web services manager., expiry Date : null]
PASSWORD:s5rqfFc.mozl6n
wls:/CommonDomain/serverConfig>

wls:/CommonDomain/serverConfig> exit()


Exiting WebLogic Scripting Tool.

2. Login to ODSM and update the password

>>>>>>>Login to http://fusionappln.net:7777/odsm/
>>>>>>>click on cn=FUSION_APPS_WSM_APPID,cn=AppIDUsers,cn=Users,dc=lab,dc=net

>>>>>>>Attributes -> UserPassword -> s5rqfFc.mozl6n


Restart the application
sh /u01/FusionappBase/fusionapps/applications/lcm/ad/bin/fastartstop.sh -Start -all -username faadmin -fa_oracle_home /u01/FusionappBase/fusionapps/applications -startAdminServer true