When upgrading using JDK 1.8 sees the following Error:
"ERROR [com.netegrity.crypto.AESCBCPKCS5PaddingHandler] (Thread-525) Exception caught while encrypting.
12:31:43,660 ERROR [com.netegrity.crypto.AESCBCPKCS5PaddingHandler] (Thread-525) ; com.rsa.jsafe.JSAFE_InputException: invalid character"
Identity Manager 12.6.x, 14.1
Windows 2012
Issue was caused by custom JSP and jars on the IDM system. All custom jars which needed to be recompiled in JDK 1.8. These custom connector jars were for CA directory endpoints. These custom jars were used through PX rules to modify the endpoint accounts.
Once they recompiled their custom jar files for JDK 1.8 the upgrade worked as expected.