My Oracle Support Banner

Configuring Credential Mapper in WebLogic Fails with the Error 'The key pair could not be retrieved from the keystore with the supplied alias xxx and its password' (Doc ID 2406692.1)

Last updated on JUNE 08, 2018

Applies to:

Oracle WebLogic Server - Version 12.1.3.0.0 and later
Information in this document applies to any platform.

Symptoms

 When creating PKI Credential Mappings for a Credential Mapping Provider, the configuration in the second page prompts to enter Password for the KeyPair.

After providing the storepass  password, the  error [Security:090809]The key pair could not be retrieved from the keystore with the supplied alias selfsignedcert and its password is noticed.

<Error> <Console> <BEA-240003> <Administration Console encountered the following error: weblogic.management.utils.CreateException: [Security:090809]The key pair could not be retrieved from the keystore with the supplied alias selfsignedcert and its password.
at weblogic.security.providers.credentials.PKICredentialMapperImpl$4.run(PKICredentialMapperImpl.java:712)
at java.security.AccessController.doPrivileged(Native Method)
at weblogic.security.providers.credentials.PKICredentialMapperImpl.checkIfKeyPairExists(PKICredentialMapperImpl.java:690)
at weblogic.security.providers.credentials.PKICredentialMapperImpl.setKeypairCredential(PKICredentialMapperImpl.java:233)
at weblogic.security.providers.credentials.PKICredentialMapperMBeanImpl.setKeypairCredential(PKICredentialMapperMBeanImpl.java:269)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:497)
at weblogic.management.jmx.modelmbean.WLSModelMBean.invoke(WLSModelMBean.java:531)
at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.invoke(DefaultMBeanServerInterceptor.java:819)
at com.sun.jmx.mbeanserver.JmxMBeanServer.invoke(JmxMBeanServer.java:801)
at weblogic.management.jmx.mbeanserver.WLSMBeanServerInterceptorBase$21.run(WLSMBeanServerInterceptorBase.java:589)
at java.security.AccessController.doPrivileged(Native Method)
at weblogic.management.jmx.mbeanserver.WLSMBeanServerInterceptorBase.invoke(WLSMBeanServerInterceptorBase.java:587)
at weblogic.management.mbeanservers.internal.JMXContextInterceptor.invoke(JMXContextInterceptor.java:249)
at weblogic.management.jmx.mbeanserver.WLSMBeanServerInterceptorBase$21.run(WLSMBeanServerInterceptorBase.java:589)
at java.security.AccessController.doPrivileged(Native Method)
at weblogic.management.jmx.mbeanserver.WLSMBeanServerInterceptorBase.invoke(WLSMBeanServerInterceptorBase.java:587)
at weblogic.management.mbeanservers.internal.SecurityInterceptor.invoke(SecurityInterceptor.java:439)
at weblogic.management.jmx.mbeanserver.WLSMBeanServerInterceptorBase$21.run(WLSMBeanServerInterceptorBase.java:589)
----
----
at weblogic.work.LivePartitionUtility.doRunWorkUnderContext(LivePartitionUtility.java:54)
at weblogic.work.PartitionUtility.runWorkUnderContext(PartitionUtility.java:41)
at weblogic.work.SelfTuningWorkManagerImpl.runWorkUnderContext(SelfTuningWorkManagerImpl.java:640)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:406)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:346)
Caused by: java.security.UnrecoverableKeyException: Cannot recover key
at sun.security.provider.KeyProtector.recover(KeyProtector.java:328)
at sun.security.provider.JavaKeyStore.engineGetKey(JavaKeyStore.java:146)
at sun.security.provider.JavaKeyStore$JKS.engineGetKey(JavaKeyStore.java:56)
at sun.security.provider.KeyStoreDelegator.engineGetKey(KeyStoreDelegator.java:96)
at sun.security.provider.JavaKeyStore$DualFormatJKS.engineGetKey(JavaKeyStore.java:70)
at java.security.KeyStore.getKey(KeyStore.java:1023)
at weblogic.security.providers.credentials.PKICredentialMapperImpl$4.run(PKICredentialMapperImpl.java:707)
... 173 more

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.