SourceId:com.ibm.ws.ssl.config.WSKeyStore.getKeyStore ProbeId:769 During WAS initialization with CA Top Secret

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

Received the following messages during WAS startup:

FFDC Exception:java.io.IOException 
SourceId:com.ibm.ws.ssl.config.WSKeyStore.getKeyStore ProbeId:769 
Reporter:com.ibm.ws.ssl.config.WSKeyStore$1@xxxxx
java.io.IOException: Failed validating certificate paths 
at com.ibm.crypto.provider.RACFInputStream.a(Unknown Source) 
at com.ibm.crypto.provider.RACFInputStream.<init>(Unknown Source) 
at com.ibm.crypto.provider.safkeyring.a.getInputStream(Unknown 
Source) 
Caused by: java.security.InvalidAlgorithmParameterException: Invalid 
at com.ibm.crypto.provider.d.a(Unknown Source) 

key:com.ibm.ssl.keyStore 
value:safkeyring:///WASKeyring.xxxxx 
key:com.ibm.ssl.keyStoreType 
value:JCERACFKS 

Environment

z/OS 2.3.

Resolution

Root certificate missing from the WAS keyrings.

TSS ADD(acid) KEYRING(keyring) RINGDATA(CERTAUTH,certificate) USAGE(CERTAUTH)