Skip to main content
Level 4
August 7, 2026
Question

Need help to update keystore and trust store password on higher AEM env for SSL setup

  • August 7, 2026
  • 5 replies
  • 63 views

Hi,

I am having an issue where, we lost the keystore/trust store password which we used while configuring SSL setup on AEM higher instane.

As we dont have crxde enabled, is there any way to update or create a new keystore/trust store password to update SSL certifications as it is getting expired soon.

Any help is appreciated. 

 

 

5 replies

SmrithiGoAuthor
Level 4
August 7, 2026

can I use package manager to safely delete 

  1. /etc/truststore/truststore.p12
  2. /home/users/system/security/ssl-service/keystore

Or, is there any way to enable crxde on higher env, to delete them and then disable it again.

SmrithiGoAuthor
Level 4
August 7, 2026

Hi, I could delete the path using curl commands.

I configured SSL setup with a new keystore and trust store passwords and then it successfully got created.

I have also added global trust store for SSO with the certificate , but now I see this errror:

 

SmrithiGoAuthor
Level 4
August 10, 2026

Hi,

As anyone fixed this issue before : AEM: SSO authentication fails after TrustStore recreation due to missing permissions | Adobe Experience Manager

I see the same error after updating keystore and trust store password , which is 

com.adobe.granite.auth.saml.SamlAuthenticationHandler Could not access TrustStore to get the IdP certificate.
Adobe Employee
August 18, 2026

Hi ​@SmrithiGo 

Are you using AEM 6.5 or AEM clous service?
If it is AEM 6.5, You should be having the access to crx/de.

 

 

SmrithiGoAuthor
Level 4
August 18, 2026

I am using AEM 6.5, but normally in higher env, we cannot access crxde.