Control-M Managed File Transfer gpg decryption fails with error: gpg: public key decryption failed: Timeout

Knowledge Article

Article Number

000361557

Old Article Number

000148597

Article Type

Solutions to a Product Problem

Title

Control-M Managed File Transfer gpg decryption fails with error: gpg: public key decryption failed: Timeout

Summary

Product

Control-M Managed File Transfer

Component

Control-M Managed File Transfer

Applies to

Control-M Managed File Transfer all versions
Control-M for Advanced File Transfer all versions

Problem

When running gpg command (version 2.1 or later), the decryption fails with timeout.
In the job output, the following error appears:

Using PGP encryption, with Template Name: …
Execute PGP command: "…
gpg: encrypted with 2048-bit RSA key, ID 4EAFA457FBC9F595, created 2018-01-24 "mykey <xyz@bmc.com>"
gpg: public key decryption failed: Timeout
gpg: decryption failed: No secret key
Command Exit code '2' doesn't match requested Exit Code '0'
Failed to execute PGP command!
Transfer of file '…' completed with errors.
Failed in job … in file transfer #1

Cause

After upgrading GnuPG to 2.1 or higher, even if the passphrase is provided in the command line (/config file) it still prompts for the passphrase. As this is an interactive usage, we get a timeout.

Solution

Add the following line to the gpg-agent.conf file: ( create the file if not already present )
allow-loopback-pinentry

example :

(on Windows, this would be in c:\ProgramData\GNU\etc\gnupg\gpg-agent.conf, which you may need to create, including the directory structure).

Make sure the PGP Template command includes the --pinentry-mode loopback in the command line.

For example:

-d --pinentry-mode loopback --passphrase $$PGP_PASSPHRASE$$ -o $$PGP_OUTPUT_FILE$$ $$PGP_INPUT_FILE$$

Attachment(s):