NetWorker: java.io.IOException: Ugyldig formatet for nøkkellageret

NetWorker Authentication-serveren (AUTHC) eller NWUI-serveren (NetWorker Web User Interface) inkluderer Java Runtime Environment (JRE). Dette tilrettelegges vanligvis ved hjelp av NetWorker Runtime Environment (NRE).

Linux: /opt/nre/java/latest
Windows: C:\Program Files\NRE\java\jre#.#.#_###

Når du bruker keytool Kommando for å se gjennom NetWorker authc/NWUI-nøkkellagerfiler, vises en Java-feil:

[root@nsr bin]# keytool -list -keystore /nsr/authc/conf/authc.keystore
 Enter keystore password:
 keytool error: java.io.IOException: Invalid keystore format

Denne feilen vises selv når du kjører keytool kommandoen direkte fra NRE java bin-katalogen.

NetWorker Server Keystore-filer:

• • /nsr/authc/conf/authc.keystore
  • /nsr/authc/conf/authc.truststore
  • /opt/nsr/authc-server/conf/authc.truststore
  • /opt/nre/java/latest/lib/security/cacerts

• • C:\Program Files\EMC NetWorker\nsr\authc-server\conf\authc.truststore
  • C:\Program Files\EMC NetWorker\nsr\authc-server\tomcat\conf\authc.keystore
  • C:\Program Files\NRE\java\jre##.#_###\lib\security\cacerts

• • /nsr/nwui/monitoring/app/conf/nwui.keystore
  • /opt/nre/java/latest/cacerts

• • C:\Program Files\EMC NetWorker\nwui\monitoring\app\conf\nwui.keystore
  • C:\Program Files\NRE\java\jre#.#.#_###\lib\security\cacerts

Det er en annen versjon av Oracle Java Runtime Environment (JRE) installert på verten. Oracle JRE-installasjonen forstyrrer NRE.

Det anbefales å bruke NetWorker Runtime Environment (NRE) med NetWorker-applikasjoner. AUTHC-installasjonsloggen for NetWorker-serveren identifiserer hvilken «Java-bane» som ble brukt:

[root@nsr ~]# cat /opt/nsr/authc-server/logs/install.log | grep "Java Path"
Java Path            Yes        /opt/nre/java/latest
Java Path            Yes        /opt/nre/java/latest
Java Path            Yes        /opt/nre/java/latest

JAVAHOME = C:\Program Files\NRE\java\jre1.8.0_471

echo %NSR_JAVA_HOME%

$env:NSR_JAVA_HOME

C:\Users\Administrator.NETWORKER>echo %NSR_JAVA_HOME%
C:\Program Files\NRE\java\jre1.8.0_471

PS C:\Users\Administrator.NETWORKER> $env:NSR_JAVA_HOME
C:\Program Files\NRE\java\jre1.8.0_471

Bruk en kommandolinjevariabel til å tvinge keytool bruk fra NRE:

Linux:

keytool=/opt/nre/java/latest/bin/keytool

Eksempel:

[root@nsr ~]# keytool=/opt/nre/java/latest/bin/keytool

Kjør alle keytool-kommandoer ved hjelp av variabelen:

[root@nsr ~]# $keytool
Key and Certificate Management Tool

Commands:

 -certreq            Generates a certificate request
 -changealias        Changes an entry's alias
 -delete             Deletes an entry
 -exportcert         Exports certificate
 -genkeypair         Generates a key pair
 -genseckey          Generates a secret key
 -gencert            Generates certificate from a certificate request
 -importcert         Imports a certificate or a certificate chain
 -importpass         Imports a password
 -importkeystore     Imports one or all entries from another keystore
 -keypasswd          Changes the key password of an entry
 -list               Lists entries in a keystore
 -printcert          Prints the content of a certificate
 -printcertreq       Prints the content of a certificate request
 -printcrl           Prints the content of a CRL file
 -storepasswd        Changes the store password of a keystore

Use "keytool -command_name -help" for usage of command_name

Windows:

Trykk på NSR_JAVA_HOME for å kjøre kommandoer fra NRE bin Katalogen.

Ledeteksteksempel:

"%NSR_JAVA_HOME%\bin\keytool.exe" OPTIONS

PowerShell-eksempel:

& "$env:NSR_JAVA_HOME\bin\keytool.exe" OPTIONS

C:\Users\Administrator.NETWORKER>"%NSR_JAVA_HOME%\bin\keytool.exe"
Key and Certificate Management Tool

Commands:

 -certreq            Generates a certificate request
 -changealias        Changes an entry's alias
 -delete             Deletes an entry
 -exportcert         Exports certificate
 -genkeypair         Generates a key pair
 -genseckey          Generates a secret key
 -gencert            Generates certificate from a certificate request
 -importcert         Imports a certificate or a certificate chain
 -importpass         Imports a password
 -importkeystore     Imports one or all entries from another keystore
 -keypasswd          Changes the key password of an entry
 -list               Lists entries in a keystore
 -printcert          Prints the content of a certificate
 -printcertreq       Prints the content of a certificate request
 -printcrl           Prints the content of a CRL file
 -storepasswd        Changes the store password of a keystore

Use "keytool -command_name -help" for usage of command_name
.............................................................................................................................................................................
PS C:\Users\Administrator.NETWORKER> & "$env:NSR_JAVA_HOME\bin\keytool.exe"
Key and Certificate Management Tool

Commands:

 -certreq            Generates a certificate request
 -changealias        Changes an entry's alias
 -delete             Deletes an entry
 -exportcert         Exports certificate
 -genkeypair         Generates a key pair
 -genseckey          Generates a secret key
 -gencert            Generates certificate from a certificate request
 -importcert         Imports a certificate or a certificate chain
 -importpass         Imports a password
 -importkeystore     Imports one or all entries from another keystore
 -keypasswd          Changes the key password of an entry
 -list               Lists entries in a keystore
 -printcert          Prints the content of a certificate
 -printcertreq       Prints the content of a certificate request
 -printcrl           Prints the content of a CRL file
 -storepasswd        Changes the store password of a keystore

Use "keytool -command_name -help" for usage of command_name

Hvis NetWorker bruker NetWorker Runtime Environment (NRE) og et annet Oracle Java Runtime Environment (JRE) er installert, fjerner du Oracle JRE-pakken.

Linux:

1. Se etter en annen JRE-installasjon, følgende kommandoer kan brukes; Rådfør deg imidlertid med Linux-systemadministratoren:

rpm -qa --last | grep jre
find / -name java -type f

/etc/alternatives
/usr/bin/java
/usr/lib/jreX

rpm -e package_name

Windows: 

1. Åpne Windows Kontrollpanel -> Programmer og funksjoner.
2. Se gjennom listen for en Oracle Java Runtime Environment-pakke (unntatt NetWorker Runtime Environment).
3. Hvis Oracle Java Runtime Environment er installert, kontakter du systemadministratoren for Windows hvis det kan fjernes.
4. Avinstaller Oracle Java Runtime Environment fra systemet.
5. Åpne en ny ledetekstøkt for å kjøre nøkkelverktøykommandoer når Oracle JRE er fjernet.

• NetWorker: Hvordan identifisere hvilken server som er autentiseringsserveren som brukes av NMC og NWUI
• NetWorker: Slik konfigurerer du LDAPS-godkjenning
• NetWorker: Slik importerer eller erstatter du signerte sertifikater fra sertifiseringsinstanser for "AUTHC" og "NWUI" (Linux)
• NetWorker: Slik importerer eller erstatter du signerte sertifikater fra sertifiseringsinstanser for "AUTHC" og "NWUI" (Windows)