PH06236: WHEN SELECTING A CERTIFICATE ALIAS WITH MIXED CASE AN SECJ7428E ERROR IS RECIEVED

9.0.5.0: WebSphere Application Server traditional Version 9.0.5 Refresh Pack
9.0.5.1: WebSphere Application Server traditional Version 9.0.5 Fix Pack 1
9.0.5.2: WebSphere Application Server traditional Version 9.0.5 Fix Pack 2
8.5.5.17: WebSphere Application Server V8.5.5 Fix Pack 17
9.0.5.3: WebSphere Application Server traditional Version 9.0.5 Fix Pack 3
8.5.5.20: WebSphere Application Server V8.5.5.20
8.5.5.18: WebSphere Application Server V8.5.5 Fix Pack 18
8.5.5.19: WebSphere Application Server V8.5.5 Fix Pack 19
8.5.5.16: WebSphere Application Server V8.5.5 Fix Pack 16
8.5.5.21: WebSphere Application Server V8.5.5.21

APAR status

• Closed as program error.

Error description

• When selecting a certificate alias with mixed case an SECJ7428E
  error is received
  
  1. Security > Security > Audit record signing configuration
  2. check "Enable signing"
  3. select Managed keystore containing the signing certificate
  4. select Certificate alias
  5. push OK
  
  
  SECJ7428E is generated
  

Local fix

• Use lower case characters for the certificate alias
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server                                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: SECJ7428E: Could not find certificate   *
  *                      alias in the referenced keystore.       *
  *                      This error can occur enabling Audit     *
  *                      record signing.                         *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Customer is enabling Audit record signing. They are attempting
  to use a CMS Keystore. The target certificate was
  imported/created with a mixed case alias.
  They select the target certificate in the Administrative
  Console then error message SECJ7428E is displayed indicating
  the certificate is not found in the keystore. The error does
  not occur if the alias name is all lowercase.
  

Problem conclusion

• CMS keystores store alias names in mixed case. The audit code
  converted the mixed case alias name displayed to lowercase.
  Then it searched the CMS keystore for the alias using this
  lowercase alias name.
  
  The has been corrected to do a mixed case alias name search of
  CMS keystores.
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 8.5.5.16 and 9.0.5.0.  Please refer to the
  Recommended
  Updates page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels

• R850 PSY

     UP

• R900 PSY

     UP