SourceId:com.ibm.ws.ssl.config.WSKeyStore.getKeyStore ProbeId:769 During WAS initialization with CA Top Secret

Products

• CA Top Secret
• CA Top Secret - LDAP

Issue/Introduction

Received the following messages during WAS startup:

FFDC Exception:java.io.IOException 
SourceId:com.ibm.ws.ssl.config.WSKeyStore.getKeyStore ProbeId:769 
Reporter:[email protected] 
java.io.IOException: Failed validating certificate paths 
at com.ibm.crypto.provider.RACFInputStream.a(Unknown Source) 
at com.ibm.crypto.provider.RACFInputStream.<init>(Unknown Source) 
at com.ibm.crypto.provider.safkeyring.a.getInputStream(Unknown 
Source) 
Caused by: java.security.InvalidAlgorithmParameterException: Invalid 
at com.ibm.crypto.provider.d.a(Unknown Source) 

key:com.ibm.ssl.keyStore 
value:safkeyring:///WASKeyring.BBOCELL 
key:com.ibm.ssl.keyStoreType 
value:JCERACFKS 

Environment

z/OS 2.3.

Resolution

Root certificate missing from the WAS keyrings.

TSS ADD(WASSTC) KEYRING(WASRING) RINGDATA(CERTAUTH,WASCA) USAGE(CERTAUTH)