2471281 - SUM Error-Jurisdiction policy files are not signed by trusted signer in START-SYSTEM-DUAL-STACK or RESTART-SYSTEM-JAVAONLY | SAP Knowledge Base Article

SAP Knowledge Base Article - Preview

2471281 - SUM Error-Jurisdiction policy files are not signed by trusted signer in START-SYSTEM-DUAL-STACK or RESTART-SYSTEM-JAVAONLY

Symptom

Software Update Manager (SUM) throws the below error in the step: START-SYSTEM-DUAL-STACK or RESTART-SYSTEM-JAVAONLY
(Logfile: <Path to SUM>/SUM/sdt/log/SUM/START-SYSTEM-DUAL-STACK_XX.LOG or <Path to SUM>/SUM/sdt/log/SUM/RESTART-SYSTEM-JAVAONLY_XX.LOG)

May 10, 2017 1:59:07 PM [Info ]: Command line: /usr/sap/<SID>/instance<XX>/exe/sapcontrol -nr <XX> -host <hostname> -user <sidadm> <SecureField> -prot NI_HTTP -function WaitforStarted 144000 5
May 10, 2017 1:59:07 PM [Info ]: Standard out: <Path to SUM>/SUM/sdt/log/SUM/SAPCONTROL_WAITFORSTARTED_XX_YY.OUT
May 10, 2017 1:59:07 PM [Info ]: Process ID 34 has been started.
May 10, 2017 1:59:07 PM [Info ]: Waiting for process ID 34, name sapcontrol to finish.
May 10, 2017 1:59:53 PM [Info ]: Process ID 34, name sapcontrol has been finished, exit code 2.
May 10, 2017 1:59:53 PM [Error ]: Return code condition success evaluated to false for process sapcontrol for action wait for started.

May 10, 2017 1:59:53 PM [Error ]: The following problem has occurred during step execution: com.sap.sdt.util.diag.DiagException: Could not check status of SAP instance with number <XX>.
Could not check if the instance number <XX> on host <hostname> is started.
Sapcontrol client could not perform action wait for started on instance <XX>
Return code condition success evaluated to false for process sapcontrol for action wait for started.

The WaitForStarted Webmethod times out with exit code 2 (Logfile: <Path to SUM>/SUM/sdt/log/SUM/SAPCONTROL_WAITFORSTARTED_XX_YY.OUT)

10.05.2017 13:59:53
WaitforStarted
FAIL: Timeout

The reason for timeout can be seen in the dev_jstart (Logfile: /usr/sap/<SID>/instance<XX>/work/dev_jstart)

F ********************************************************************************
F *** ERROR => Node 'bootstrap' failed with exit code 500.
F ***
F *** Please see section 'Failures in the 'synchronizing binaries' phase'
F *** in SAP Note 1316652 for additional information and trouble shooting advice.
F ********************************************************************************
F
F [Thr 01] *** LOG => exiting (exitcode 22002, retcode 1).

The actual error for the failure in bootstrap can be seen in the jvm_bootstrap.out and the log_bootstrap.X.log files in the work directory (Logfile location: /usr/sap/<SID>/instance<XX>/work)

Starting to initialize database connection
Exception occurred for component [internal/unkown] of type [unkown]
java.lang.ExceptionInInitializerError
.
.

at java.lang.reflect.Method.invoke(Method.java:597)
at com.sap.engine.offline.OfflineToolStart.main(OfflineToolStart.java:162)
Caused by: java.lang.SecurityException: Cannot set up certs for trusted CAs
at javax.crypto.JceSecurity.<clinit>(JceSecurity.java:266)
... 20 more
Caused by: java.lang.SecurityException: Jurisdiction policy files are not signed by trusted signers!
at javax.crypto.JceSecurity.loadPolicies(JceSecurity.java:545)
.
.
[Bootstrap]> Error during synchronization. More details: the previous log entries


Read more...

Environment

  • Dual Stack or JAVA update with SUM 

Keywords

START-SYSTEM-DUAL-STACK, RESTART-SYSTEM-JAVAONLY, WaitForStarted, "Time out", JCE, unlimited, jvm_bootstrap,log_bootstrap, com.sap.sdt.util.diag.DiagException, java.lang.ExceptionInInitializerError, java.lang.SecurityException, "Cannot set up certs for trusted CAs", "Jurisdiction policy files are not signed by trusted signers!", bootstrap, ERROR => Node 'bootstrap' failed with exit code 500,Could not check status of SAP instance with number , KBA , kde , BC-JVM , SAP Java Virtual Machine , BC-JAS-COR , Enterprise Runtime, Core J2EE Framework , BC-UPG-TLS-TLJ , Upgrade tools for Java , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.