Configtool Key phrase change: AS Java doesn't start

After changing the key phrase the server0 process can't start and std_server0.out contains this error:

Detailed info is: Cannot retrieve the configuration structure corresponding to service name com.sap.security.core.ume.service

.....

ConfigurationException: Internal error during the decryption process.

.....

BadPaddingException: Invalid PKCS#5 padding length: 142

The same exception can occur to other services too.

Resolution

1.Make full backup of the current filesytem and the database.

2.Navigate to /usr/sap/<SID>/SYS/global/security/data . You should be able to see two files SecStore.key and SecStore.properties.

3.If you have started the re-encrypting process you should be able to see secstore.bak and Reencrypt.key - this files are your backup of the old keyphrase.

4.Restore the database from a backup before you have tried to change the keyphrase.

1.Try to start the system with the current secure store.

2.After that you can try to rename secstore.bak to SecStore.properties and Reencrypt.key to SecStore.key.

3.If that doesn't work and you can try to recreate the secure store.

Refer SAP Note: 1683616 - Configtool Key phrase change: AS Java doesn't start