ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

CA Policy server 12.7/Partnership Fed/Create an Entity without Metadata/Importing cert and key fails


Article ID: 102759


Updated On:


CA Single Sign On Secure Proxy Server (SiteMinder) CA Single Sign On SOA Security Manager (SiteMinder) CA Single Sign-On


- We're running AdminUI, we inserted a new certificate into the 
  certificate store. But this certificate doesn't show up certificate is not visible in 
  combo box to select signing certificate for the entity (Signing 
  Private Key Alias). 

  When we reproduce this issue, we see the following error in the 
  server.log of the AdminUI : 

  2018-05-16 12:17:11,028 ERROR [stderr] (default task-18) 
  Error creating JSAFE_PrivateKey object. 

  2018-05-16 12:17:11,138 ERROR [stderr] (default task-18) Caused by: 
  com.rsa.jsafe.JSAFE_InvalidKeyException: Invalid key data length, 
  expected 8 

How can we fix this ?


Looking at the AdminUI debug logs, we see that the issue occurs on
certificate wamqasp2010, which is over due date.


14. 2018-05-30 15:23:14,193 DEBUG 
   [] (default task-51) 
   call PolicyData_search CA.CDS::Certificate 
   (CA.CDS::Certificate.Alias EQ myoldcertiifcate) true 

15. 2018-05-30 15:23:14,209 DEBUG 
   [] (default task-51) 
   call Security_decryptSensitiveAttribute 
   CA.CDS::[email protected] 

16. 2018-05-30 15:23:14,209 ERROR [stderr] (default task-51) 
   Error creating JSAFE_PrivateKey object. 

When looking at certificate which has alias "myoldcertiifcate", we noticed that the certificate was expired.


Policy Server 12.7; 
AdminUI 12.7; 


 You removed the certificate "myoldcertiifcate" from the CDS (Certificate Data Store) to
  solve the issue.