search cancel

Symantec Identity Manager: Could not create framework: java.lang.Exception: Failed to load keystore JCS

book

Article ID: 242957

calendar_today

Updated On:

Products

CA Identity Suite CA Identity Manager

Issue/Introduction

While upgrading the connector server for 14.4 we experienced the below error message in the jcs_service_stderr.log which prevented the JCS from starting after the upgrade.

Could not create framework: java.lang.Exception: Failed to load keystore: C:\CA\Identity Manager\Connector Server\jcs/conf/ssl.keystore
java.lang.Exception: Failed to load keystore: C:\CA\Identity Manager\Connector Server\jcs/conf/ssl.keystore

Caused by: java.io.IOException: Keystore was tampered with, or password was incorrect

Caused by: java.security.UnrecoverableKeyException: Password verification failed

Environment

Release : 14.4

Component : Identity Manager

Resolution

Prior to the upgrade backup the below files.

< Connector_Server_Installed_Location>\jcs\conf\ssl.keystore
< Connector_Server_Installed_Location>\jcs\conf\override\server_jcs.properties
< Connector_Server_Installed_Location>\jcs\conf\override\server_shared.properties
< Connector_Server_Installed_Location>\etc\system.properties
< Connector_Server_Installed_Location>\jcs\conf\server_osgi_shared.xml

Once the upgrade has been completed, update each of the new files (except with the ssl.keystore) with the previous encrypted password used from the backup files.

Reference:

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-suite/14-4/virtual-appliance/Change-the-Password-of-Symantec-IGA-Components.html#concept.dita_6599601b-9f72-4020-924e-461f4ce8109c_ChangeConnectorServer