I know that the keytool is a Java-tool, which comes at installing Java on your local computer. The syntax for using keytool is explained here: keytool-Key and Certificate Management Tool
The first step is to create a new self-signed certificate:
keytool -genkey -alias -keyalg RSA -keysize -keypass -keystore cluster-keystore.jks -storepass
So for me it looks like:
keytool -genkey -alias dmkeystore -keyalg RSA -keysize 2048 -keypass Password12! -keystore cluster-keystore.jks -storepass Password12!
The keysize has to be 2048, because the keyalg is RSA.
Now the cluster-keystore.jks is created, I login to the Pega environment and go to the keystore DMKeyStore and ‘Upload file’ and fill in the newly created ‘Keystore password’ Password12! and click on ‘Save’.
While tracing this, I can see an ERROR occuring in the Activity Data-Admin-Security-Keystore Validate, step 3:
(Data-Admin-Security-Keystore)Unable to load keystore : Invalid keystore format
I have looked the Pega documentation, previous discussions and still can’t figure out what I am doing wrong and how it should be done.
You’ll need to generate Cluster-Keystore.jks Trust-store.jks file too using keytool commands. Out of those 2, you did generate one already. Once you generate the trust-store.jks file and upload it, The Issue will be fixed.
An “Invalid keystore format” error occurs when a keystore is read by a JDK version lower than a keystore generated with JDK 8u301 and higher. - from google
I mean to say that, You need to follow the steps listed in the below URL’s like generating Key store and Trust store JKS files. Post the generation, YOu’ll need to upload in the application.
But from the latest error you have posted, I can see that Java JDK version mismatch is there. I assume, you’ll need to contact your middleware Team for that, even if the issue occured again upon upoloading the both Key store and Trust Store JKS files.
Note: At one point, generating the Key store and Trust store files will prompt you to trust them to your organization layer from Middleware Area. You’ll need to upload both .JKS files inside the application when you login too. Issue will be fixed then.
