cancel
Showing results for 
Search instead for 
Did you mean: 

Protection

Symptoms

Few times I got "The trustAnchors parameter must be non-empty" alert after Java Admin Console login and whole "Security Management" section was unavailable

Diagnosis

In Java Admin console log it looked like:

 

[6/15/21 10:57:43 PM MSK {1623787063262}] [262144] SecureTransport-> Setting SNI to web server to load client compatible certificate:[NBCA]

Exception occured while Login to WebServices org.springframework.web.client.ResourceAccessException: I/O error on POST request for "https://nbumaster:1556/netbackup/loginwithbpjavasessiontoken": Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty; nested exception is javax.net.ssl.SSLException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty



[6/16/21 1:13:58 AM MSK {1623795238399}] [262144] LoginBannerAdapter->initializePortal ()
[6/16/21 1:13:58 AM MSK {1623795238403}] [262144] LoginBannerAdapter-> getLoginBannerConfiguration ()
[6/16/21 1:13:58 AM MSK {1623795238404}] [262144] LoginBannerPortal -> readLoginBannerConfiguration ()
[6/16/21 1:13:58 AM MSK {1623795238459}] [262144] SecureTransport-> atDataDir path isC:\Users\?????????????\AppData\Roaming\Veritas\VSS\systruststore
[6/16/21 1:13:58 AM MSK {1623795238460}] [262144] SecureTransport-> Certificate location is: C:\Users\?????????????\AppData\Roaming\Veritas\VSS\systruststore\..\certstore\trusted\
[6/16/21 1:13:58 AM MSK {1623795238461}] [262144] SecureTransport-> Path not accessible:C:\Users\?????????????\AppData\Roaming\Veritas\VSS\systruststore\..\certstore\trusted
(SR-1)readFile:  (Sent:Wed Jun 16 01:13:58 MSK 2021, Recv:Wed Jun 16 01:13:58 MSK 2021)
        Protocol Code: 4
        Status: 2
        Time Taken: 96ms
        Error Msg: No such file or directory

 

In this case it happened because of localized name of the user and the folder with certificates became unavailable or it can be just a permission issue

Solution

Create another user (it's also possible to re-configure and use another folder) or fix issues with the folder

 

Contributors