Unable to upgrade from 12.6 SP2 to 12.6 SP8 with JDK 1.8.

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Risk Analytics
• CA Secure Cloud SaaS - Arcot A-OK (WebFort)
• CLOUDMINDER ADVANCED AUTHENTICATION
• CA Secure Cloud SaaS - Advanced Authentication
• CA Secure Cloud SaaS - Identity Management
• CA Secure Cloud SaaS - Single Sign On

Issue/Introduction

When upgrading using JDK 1.8 sees the following Error:

"ERROR [com.netegrity.crypto.AESCBCPKCS5PaddingHandler] (Thread-525) Exception caught while encrypting. 
12:31:43,660 ERROR [com.netegrity.crypto.AESCBCPKCS5PaddingHandler] (Thread-525) ; com.rsa.jsafe.JSAFE_InputException: invalid character"

Cause

Issue was caused by custom JSP and jars on the IDM system. They had 3 custom jars which needed to be recompiled in JDK 1.8.  These custom connector jars were for CA directory endpoints.  It allowed them through PX rules to modify the endpoint accounts through the custom jars.

Environment

Windows 2012

Resolution

Once they recompiled their custom jar files for JDK 1.8 the upgrade worked as expected.