SignedDataVerificationFailure

After deleting some old, disabled Operator Accounts, I’m suddenly getting hundreds of SignedDataVerificationFailure messages in BESRelay.log on each of my DSA servers. Any ideas?

Thu, 25 May 2017 13:04:04 -0500 - /data/sequence (8012) - SignedDataVerificationFailure in data type 'ROLES' object '16850386' attribute 'explicitUsers'
Thu, 25 May 2017 13:04:04 -0500 - /data/certificates (14992) - SignedDataVerificationFailure in data type 'ROLES' object '16850386' attribute 'explicitUsers'
Thu, 25 May 2017 13:04:04 -0500 - /data/sequence (14828) - SignedDataVerificationFailure in data type 'ROLES' object '16850386' attribute 'explicitUsers'
Thu, 25 May 2017 13:04:04 -0500 - /data/sequence (10264) - SignedDataVerificationFailure in data type 'ROLES' object '16850386' attribute 'explicitUsers'
Thu, 25 May 2017 13:04:05 -0500 - /data/action-download-status (6996) - SignedDataVerificationFailure in data type 'ROLES' object '16850386' attribute 'explicitUsers'

Edit: welp, console logins are dead too, so PMR is on the way…

Ok, solution was
besadmin /resignsecuritydata

correct … the problem occurs in DSA, is tracked with the following APAR
http://www.ibm.com/support/docview.wss?uid=swg1IV77632
and the resignsecuritydata admin tool command You suggest is the correct workaround

Thanks, I hadn’t seen that APAR.

FWIW, I’m seeing this in 9.5.4. I repeated the issue a couple of times as I was removing older operator accounts.

It seems less likely to occur if I remove the operator from all Roles and ‘save changes’ before deleting the operator account itself.

You may need to resign the BES Server Data. This is the kind of think you should do only when Support tells you to do it. At least that’s what they’ve told me in the past.