Skip to main content
SmrithiGo
Level 4
Aug 7, 2026 9:36 AM UTC
Question

Need help to update keystore and trust store password on higher AEM env for SSL setup

Hi,

I am having an issue where, we lost the keystore/trust store password which we used while configuring SSL setup on AEM higher instane.

As we dont have crxde enabled, is there any way to update or create a new keystore/trust store password to update SSL certifications as it is getting expired soon.

Any help is appreciated. 

 

 

5 replies

SmrithiGoAuthor
Level 4
Aug 7, 2026 9:55 AM UTC

can I use package manager to safely delete 

  1. /etc/truststore/truststore.p12
  2. /home/users/system/security/ssl-service/keystore

Or, is there any way to enable crxde on higher env, to delete them and then disable it again.

Translate
SmrithiGoAuthor
Level 4
Aug 7, 2026 11:54 AM UTC

Hi, I could delete the path using curl commands.

I configured SSL setup with a new keystore and trust store passwords and then it successfully got created.

I have also added global trust store for SSO with the certificate , but now I see this errror:

 

Translate
SmrithiGoAuthor
Level 4
Aug 10, 2026 8:00 AM UTC

Hi,

As anyone fixed this issue before : AEM: SSO authentication fails after TrustStore recreation due to missing permissions | Adobe Experience Manager

I see the same error after updating keystore and trust store password , which is 

com.adobe.granite.auth.saml.SamlAuthenticationHandler Could not access TrustStore to get the IdP certificate.
Translate
Adobe Employee
goelsAdobe Employee
Adobe Employee
Aug 18, 2026 9:30 AM UTC

Hi ​@SmrithiGo 

Are you using AEM 6.5 or AEM clous service?
If it is AEM 6.5, You should be having the access to crx/de.

 

 

Translate
SmrithiGoAuthor
Level 4
Aug 18, 2026 11:15 AM UTC

I am using AEM 6.5, but normally in higher env, we cannot access crxde.

Translate
Terms & ConditionsAccessibility statement

Loading footer...