Unable to upgrade from 12.6 SP2 to 12.6 SP8 with JDK 1.8.

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Risk Analytics
• CA Secure Cloud SaaS - Arcot A-OK (WebFort)
• CLOUDMINDER ADVANCED AUTHENTICATION
• CA Secure Cloud SaaS - Advanced Authentication
• CA Secure Cloud SaaS - Identity Management
• CA Secure Cloud SaaS - Single Sign On

Issue/Introduction

When upgrading using JDK 1.8 sees the following Error:

"ERROR [com.netegrity.crypto.AESCBCPKCS5PaddingHandler] (Thread-525) Exception caught while encrypting. 
12:31:43,660 ERROR [com.netegrity.crypto.AESCBCPKCS5PaddingHandler] (Thread-525) ; com.rsa.jsafe.JSAFE_InputException: invalid character"

Environment

Identity Manager 12.6.x, 14.1

Windows 2012

 

Cause

Issue was caused by custom JSP and jars on the IDM system.  All custom jars which needed to be recompiled in JDK 1.8.  These custom connector jars were for CA directory endpoints.  These custom jars were used through PX rules to modify the endpoint accounts.

Resolution

Once they recompiled their custom jar files for JDK 1.8 the upgrade worked as expected.