Environment
NetIQ Access Manager 3.1.4 and 3.2
Situation
When changing the embedded service provider reverse proxy from a SSL enabled proxy to a non SSL enabled proxy or from a non SSL enabled proxy to another non SSL enabled proxy in the Access Gateway 'Reverse Proxy / Authentication' configuration you will see a short error message popup indicating that there is an issue with:
Error adding one or more certificates to the keystore: Cannot add nonexisting key "" to keystore "<keystore name>".
This "error" message pops up because it is unable to find a keystore and then therefore throws an exception.
So this is a cosmetic message popping up and does not impact the functionality at all. Nor is it a security issue.
Error adding one or more certificates to the keystore: Cannot add nonexisting key "" to keystore "<keystore name>".
This "error" message pops up because it is unable to find a keystore and then therefore throws an exception.
So this is a cosmetic message popping up and does not impact the functionality at all. Nor is it a security issue.
Resolution
A BUG has been raised with engineering to have this being fixed in the upcoming future updates to 3.1.4 and 3.2.
There is nothing else to do here because it is just a cosmetic issue.
There is nothing else to do here because it is just a cosmetic issue.
Cause
This "error" message pops up because it is unable to find a keystore and then therefore throws an exception.
So this is a cosmetic message popping up and does not impact the functionality at all. Nor is it a security issue.
So this is a cosmetic message popping up and does not impact the functionality at all. Nor is it a security issue.