NetWorker: Unable to log in to the NMC. NetWorker AUTHC server encounters 'java.io.IOException: toDERInputStream: tag 45'

The following error appears while logging in to the NetWorker Management Console (NMC):

nsrlogin fails with the following error:

Authentication library error: Failed to connect to localhost port 9090 after 1220 ms: Couldn't connect to server
Server Message: Make sure that server is running

Error when verifying contents of authc.keystore:

keytool -list -keystore "C:\Program Files\EMC NetWorker\nsr\authc-server\tomcat\conf\authc.keystore" -storepass <password>"
       
Error: `java.io.IOException: toDERInputStream: tag 45`

The following is seen in the NetWorker server's authc-server.log:

• Linux: /nsr/authc/logs/authc-server.log
• Windows: C:\Program Files\EMC NetWorker\nsr\authc-server\tomcat\logs\authc-server.log:

Failed to load server keys from key store: An error occurred while loading server keys: Failed to initialize key store <Path to-nsr>\nsr\authc-server\tomcat\conf\authc.keystore
Default server keys will be used
Server certificate is not available, please check your configuration

The authc.keystore was accidentally overwritten with a certificate private key instead of a valid JKS format, resulting in authentication errors.

The authc.keystore must be re-created. 

Linux Server:

1. Stop NetWorker services: nsrshutdown -f or systemctl stop networker
2. Rerun the AUTHC configuration script: /opt/nsr/authc-server/scripts/authc_configure.sh
   When prompted if you would like to use the existing keystore. Enter "n" and a new keystore is created.

root@lnx-srvr03:~# /opt/nsr/authc-server/scripts/authc_configure.sh

Specify the directory where the Java Standard Edition Runtime Environment (JRE) software is installed [/opt/nre/java/latest]:

The installation process will install an Apache Tomcat instance.
For optimum security, EMC NetWorker Authentication Service will
use a non-root user (nsrtomcat) to start the Apache Tomcat instance.
If your system has special user security requirements, ensure that proper
operational permissions are granted to this non-root user (nsrtomcat).
Please refer to NetWorker Installation Guide.

The Apache Tomcat will use "lnx-srvr03.networker.lan" as the host name.
The Apache Tomcat will use "9090" as the port number.

The NetWorker Authentication Service requires a keystore file to configure encryption and to provide SSL support.

EMC recommends that you specify a keystore password that has a minimum of six characters.

Do you want to use the existing keystore /nsr/authc/conf/authc.keystore [y]? n

The installation process will create a new keystore file.

Specify the keystore password:
Confirm the password:

Creating the installation log in /opt/nsr/authc-server/logs/install.log.

Performing initialization. Please wait...


The installation completed successfully.

3. Start NetWorker services: systemctl start networker
4. Validate that authentication works: nsrlogin -u administrator`
   You are prompted to enter the NetWorker administrator password. If authentication succeeds, run: nsrlogout

Windows Server:

1. Uninstall NetWorker.

2. Rename authc.keystore, authc.truststore. Default path:

• C:\Program Files\EMC NetWorker\nsr\authc-server\tomcat\conf\authc.keystore
• C:\Program Files\EMC NetWorker\nsr\authc-server\conf\authc.truststore

3. Reinstall NetWorker over the previous installation path.
4. Post-installation validation, run: nsrlogin -u administrator`
   You are prompted to enter the NetWorker administrator password. If authentication succeeds, run: nsrlogout

• NetWorker: How to Import or Replace Certificate Authority Signed Certificates for "Authc" and "NWUI" (Linux)
• NetWorker: How to Import or Replace Certificate Authority Signed Certificates for "AUTHC" and "NWUI" (Windows)
• NetWorker: How To Enable AUTHC DEBUG for Troubleshooting Purposes