Return
-
Title
Error importing a tomcat certificate for Foglight in FIPS-compliant mode: BCFKS KeyStore corrupted: MAC calculation failed. -
Description
When importing the network security certificate the following error is thrown:
Importing keystore tomcat.keystore to tomcat_fips.keystore...
keytool error: java.io.IOException: BCFKS KeyStore corrupted: MAC calculation failed. -
Cause
The "-storepass" parameter was not included in the executed command. -
Resolution
WORKAROUNDWhen converting the tomcat.keystore from JKS format to FIPS-verified BCFKS format use the "-storepass" parameter in the command:
<foglight_home>\jre\bin\keytool -importkeystore -srckeystore tomcat.keystore -destkeystore tomcat_fips.keystore -deststoretype BCFKS -provider org.bouncycastle.jcajce.provider.BouncyCastleFipsProvider -providerpath <foglight_home>\server\core\bc-fips.jar -storepass nitrogen