NetWorker: java.io.IOException: Invalid keystore format

Summary: Unable to list or modify NetWorker authc or NetWorker Web User Interface (NWUI) keystore files using java keytool.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

The NetWorker Authentication (authc) server or NetWorker Web User Interface (NWUI) server include Java Runtime Environment (JRE). Typically this is facilitated using the NetWorker Runtime Environment (NRE).

Linux: /opt/nre/java/latest
Windows: C:\Program Files\NRE\java\jre#.#.#_###

NOTE: There is no "latest" symlink on Windows hosts. Depending on which NRE version is installed, the JRE path includes the JRE version included with the NRE version.

When using the keytool command to review NetWorker authc/NWUI keystore files, a java error appears:

[root@nsr bin]# keytool -list -keystore /nsr/authc/conf/authc.keystore
 Enter keystore password:
 keytool error: java.io.IOException: Invalid keystore format

This error appears even when running the keytool command directly from the NRE java bin directory.

NetWorker Server Keystore Files:

Linux: 
  • /nsr/authc/conf/authc.keystore
  • /nsr/authc/conf/authc.truststore
  • /opt/nsr/authc-server/conf/authc.truststore
  • /opt/nre/java/latest/lib/security/cacerts
Windows:
  • C:\Program Files\EMC NetWorker\nsr\authc-server\conf\authc.truststore
  • C:\Program Files\EMC NetWorker\nsr\authc-server\tomcat\conf\authc.keystore
  • C:\Program Files\NRE\java\jre##.#_###\lib\security\cacerts
NetWorker Web User Interface (NWUI) Files:
Linux:
  • /nsr/nwui/monitoring/app/conf/nwui.keystore
  • /opt/nre/java/latest/cacerts
Windows:
  • C:\Program Files\EMC NetWorker\nwui\monitoring\app\conf\nwui.keystore
  • C:\Program Files\NRE\java\jre#.#.#_###\lib\security\cacerts
 

Cause

There is another version of Oracle Java Runtime Environment (JRE) installed on the host. The Oracle JRE installation is interfering with NRE.

Resolution

It is recommended to use the NetWorker Runtime Environment (NRE) with NetWorker applications. The NetWorker server's authc installation log identifies what "Java Path" was used:
Linux: /opt/nsr/authc-server/logs/install.log 
[root@nsr ~]# cat /opt/nsr/authc-server/logs/install.log | grep "Java Path"
Java Path            Yes        /opt/nre/java/latest
Java Path            Yes        /opt/nre/java/latest
Java Path            Yes        /opt/nre/java/latest
Windows: %LOCALAPPDATA%\Temp\NetWorker_YYYYMMDDHHmmSS_#_AuthC.log 
JAVAHOME = C:\Program Files\NRE\java\jre1.8.0_431
Alternatively, from an Administrative command prompt run: 
echo %NSR_JAVA_HOME%
Example: 
C:\Users\administrator.AMER>echo %NSR_JAVA_HOME%
C:\Program Files\NRE\java\jre1.8.0_431
 
 
If NetWorker uses the NetWorker Runtime Environment (NRE) and another Oracle Java Runtime Environment (JRE) is installed, remove the Oracle JRE package.
Linux:
  1. Check for another JRE install, the following commands can be used; however, consult with your Linux system administrator:
rpm -qa --last | grep jre
find / -name java -type f
/opt/nre/java/jreX is the NetWorker Runtime Environment; however, other packages may appear: 
/etc/alternatives
/usr/bin/java
/usr/lib/jreX
  1. If another JRE package is installed, consult with the Linux System Administrator if it can be removed.
rpm -e package_name
Windows: 
  1. Open Windows Control Panel->Programs and Features.
  2. Review the list for an Oracle Java Runtime Environment package (excluding NetWorker Runtime Environment).
  3. If Oracle Java Runtime Environment is installed, consult with the Windows System Administrator if it can be removed.
  4. Uninstall the Oracle Java Runtime Environment from the system.
  5. Open a new command prompt session to run keytool commands once Oracle JRE has been removed.

Additional Information

Affected Products

NetWorker

Products

NetWorker Family
Article Properties
Article Number: 000297934
Article Type: Solution
Last Modified: 21 Mar 2025
Version:  2
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.