Unable to import / manage certificates

Products

• CA Single Sign On Federation (SiteMinder)
• SITEMINDER

Issue/Introduction

When attempting to import a certificate, we're presented with the following error through the AdminUI:

Error: System exception trying to load keystore entries. For input string: "<random long string of characters>"

Environment

Release: 12.8x

Component : SITEMINDER - POLICY SERVER

Cause

An unknown problem was caused by the way the certificate in question was imported.  The certificate was imported via a custom script using the API, therefore, no validation was performed on the imported data.

Resolution

Use XPSExplorer to identify and delete the the certificate associated with the error message, after which the UI displayed/managed certs as expected.

Additional Information

The Policy Server's smkeytool command can be used as an additional troubleshooting aid for problems with the CDS. 

Use the following syntax:

smkeytool -ListCerts