Error "toDerInputStream rejects tag type 70" when importing PFX file into .keystore

Products

• Data Loss Prevention Core Package

Issue/Introduction

Importing a new pfx file may generate the below error:

keytool error: java.io.IOException: toDerInputStream rejects tag type 70
java.io.IOException: toDerInputStream rejects tag type 70
        at sun.security.util.DerValue.toDerInputStream(DerValue.java:887)
        at sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:1947)
        at java.security.KeyStore.load(KeyStore.java:1445)
        at sun.security.tools.keytool.Main.loadSourceKeyStore(Main.java:2095)
        at sun.security.tools.keytool.Main.doCommands(Main.java:1095)
        at sun.security.tools.keytool.Main.run(Main.java:378)
        at sun.security.tools.keytool.Main.main(Main.java:371)

Environment

DLP 16.x

Cause

PFX file is corrupt and cannot be read as a keystore.

Resolution

On Windows, check if the PFX file can be installed into Windows.

If this step fails, contact your CA Admin and request a new PFX file.