java.lang.IllegalArgumentException: java.security.UnrecoverableKeyException: Cannot recover key (Doc ID 2411178.1)

Last updated on APRIL 24, 2023

Applies to:

Symptoms

After replacing the old self-signed certificates with new public certificates and importing them in the .jks store file, Tomcat is failing

STEPS
-----------------------
1. Stop Siebel components
2. Edit server.xml to point to the new Public .jks file ( no need to change the store password as it same)
3. Restart the Siebel Components
4. Siebel SMC is not loading and Tomcat is displaying the following errors:

java.lang.IllegalArgumentException: java.security.UnrecoverableKeyException: Cannot recover key
...
Caused by: java.security.UnrecoverableKeyException: Cannot recover key
at sun.security.provider.KeyProtector.recover(KeyProtector.java:328)
at sun.security.provider.JavaKeyStore.engineGetKey(JavaKeyStore.java:138)
at sun.security.provider.JavaKeyStore$JKS.engineGetKey(JavaKeyStore.java:55)
at java.security.KeyStore.getKey(KeyStore.java:1023)
at sun.security.ssl.SunX509KeyManagerImpl.(SunX509KeyManagerImpl.java:133)
at sun.security.ssl.KeyManagerFactoryImpl$SunX509.engineInit(KeyManagerFactoryImpl.java:70)
at javax.net.ssl.KeyManagerFactory.init(KeyManagerFactory.java:256)
at org.apache.tomcat.util.net.jsse.JSSEUtil.getKeyManagers(JSSEUtil.java:216)

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.