A little while ago I had a need to reinstall a Blackberry Enterprise server in order to fix a particular problem. As I did not know the existing certificate password I entered a new one which resulted in the Administration page displaying that it "Cannot display the webpage" A closer look at the BBAS-AS error log at the end of the file there was a line that looked something like this;
“LifecycleException: service.getName(): "jboss.web"; Protocol handler start failed: java.io.IOException: Keystore was tampered with, or password was incorrect” after service is started.
Wiping the whole BlackBerry server looked like the only option, but unfortunately for me, it wasn't an option! I spent several hours piecing together bits of information to repair the Keystore and after realising how frustrating it was, writing this article to hopefully save others from the turmoil!
Follow the following instructions to rebuild the store:
• Stop “BlackBerry Administration Service - Application Server” service
• Stop “BlackBerry Administration Service - Native Code Container” service
• Open regedit, go to HKCU\Software\Research in motion\Blackberry Enterprise Server\Administration Service\Key Store
• Back up keystore folder
• Delete “CacertsKeyStorePass”
• Open “Blackberry server Configuration” utility, go to “Administration Service – High Availability” tab
• Enter a new password, and click apply then ok
• Go back to regedit as above and copy the value from “CacertsKeyStorePass” into “WebKeyStorePass”
• Rename key.webstore to key.webstore.old in “C:\Program Files (x86)\Research In Motion\BlackBerry Enterprise Server\BAS\bin”
• Run cmd as administrator
• Browse to <drive>:\Program Files (x86)\Java\<JRE_version>\b
• Type the following:
• When requested enter the same password as you did above
• Then enter the details as below
• Start the Blackberry administration services, wait a few minutes and check access to management pages.
Hopefully, you should then get the login prompt to allow you to login to the BES management page!
“LifecycleException: service.getName(): "jboss.web"; Protocol handler start failed: java.io.IOException: Keystore was tampered with, or password was incorrect” after service is started.
Wiping the whole BlackBerry server looked like the only option, but unfortunately for me, it wasn't an option! I spent several hours piecing together bits of information to repair the Keystore and after realising how frustrating it was, writing this article to hopefully save others from the turmoil!
Follow the following instructions to rebuild the store:
• Stop “BlackBerry Administration Service - Application Server” service
• Stop “BlackBerry Administration Service - Native Code Container” service
• Open regedit, go to HKCU\Software\Research in motion\Blackberry Enterprise Server\Administration Service\Key Store
• Back up keystore folder
• Delete “CacertsKeyStorePass”
• Open “Blackberry server Configuration” utility, go to “Administration Service – High Availability” tab
• Enter a new password, and click apply then ok
• Go back to regedit as above and copy the value from “CacertsKeyStorePass” into “WebKeyStorePass”
• Rename key.webstore to key.webstore.old in “C:\Program Files (x86)\Research In Motion\BlackBerry Enterprise Server\BAS\bin”
• Run cmd as administrator
• Browse to <drive>:\Program Files (x86)\Java\<JRE_version>\b
• Type the following:
keytool -genkey -alias httpssl -keypass <password entered earlier> -keystore "<drive>:\Program Files (x86)\Research In Motion\BlackBerry Enterprise Server\BAS\bin\web.keystor
• When requested enter the same password as you did above
• Then enter the details as below
- What is your first and last name?
- [Unknown]: <FQDN of server, eg, server.domain.local>
- What is the name of your organizational unit?
- [Unknown]: <FQDN of server, eg, server.domain.local>
- What is the name of your organization?
- [Unknown]: company name
- What is the name of your City or Locality?
- [Unknown]: YourCity
- What is the name of your State or Province?
- [Unknown]: YourState
- What is the two-letter country code for this unit?
- [Unknown]: UK
- Is CN=todd.example.com, OU=todd.example.com, O=todd.example.com, L=YourCity, ST=YourState, C=US correct?
- [no]: yes
- [Unknown]: <FQDN of server, eg, server.domain.local>
- What is the name of your organizational unit?
- [Unknown]: <FQDN of server, eg, server.domain.local>
- What is the name of your organization?
- [Unknown]: company name
- What is the name of your City or Locality?
- [Unknown]: YourCity
- What is the name of your State or Province?
- [Unknown]: YourState
- What is the two-letter country code for this unit?
- [Unknown]: UK
- Is CN=todd.example.com, OU=todd.example.com, O=todd.example.com, L=YourCity, ST=YourState, C=US correct?
- [no]: yes
• Start the Blackberry administration services, wait a few minutes and check access to management pages.
Hopefully, you should then get the login prompt to allow you to login to the BES management page!