JCP won't start - U00045014 ... toDerInputStream rejects tag type 45

Products

• CA Automic Workload Automation - Automation Engine
• CA Automic One Automation

Issue/Introduction

When attempting to start JCP on version 21, receive the following error:

U00045014 Exception 'com.automic.agents.impl.TlsKeystoreReader$InvalidKeystoreException: "java.io.IOException: toDerInputStream rejects tag type 45"' at 'com.automic.agents.impl.TlsKeystoreReader.tryToLoadKey():89'.
U00045015 The previous error was caused by 'java.io.IOException: "toDerInputStream rejects tag type 45"' at 'sun.security.util.DerValue.toDerInputStream():881'.

Environment

Release : 1

Component : AUTOMATION ENGINE

Cause

Using an incorrect file in the keystore= setting in ucsrv.ini

Resolution

This error is caused by an incorrect file being used in the ucsrv.ini file.  Be sure that a keystore is explicitly pointed to and that it is the correct file type (for example, self-signed requires pkcs12 format).  Doublecheck that they keystore can be opened using a tool like keytool or keystore explorer.  

More information on SSL/TLS in version 21.0 can be found here: https://docs.automic.com/documentation/webhelp/english/ALL/components/DOCU/21.0/Automic%20Automation%20Guides/Content/_Common/Security/Security_TLS_Preparing_Certificates.htm