JDR fails with "WFLYELY01209: Unable to initialize CredentialStore" when using encrypted system properties in JBoss EAP 8.x

Solution Unverified - Updated -

Issue

  • JBoss Diagnostic Reporter (JDR) fails with "WFLYELY01209: Unable to initialize CredentialStore" when using encrypted system properties in JBoss EAP 8.x
  • When running the JBoss Diagnostic Reporter (JDR) utility on JBoss EAP 8, the process fails to generate a report if it cannot connect to a running instance and attempts to start an internal embedded server.
  • This failure specifically occurs when system properties, such as javax.net.ssl.keyStorePassword, are configured to use Elytron encrypted expressions (${ENC::...}):

    <system-properties>
        ...(snip)...
        <property name="javax.net.ssl.keyStorePassword" value="${ENC::...}"/>
    </system-properties>
    
  • The following error is observed in the output:

    ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("add") failed - address: ([("system-property" => "javax.net.ssl.keyStorePassword")]) - failure description: "WFLYELY01209: Unable to initialize CredentialStore examplePropertiesCredentialStore -- WFLYELY00924: Unable to create immediately available credential store."
    FATAL [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0056: Server boot has failed in an unrecoverable manner; exiting. See previous messages for details. - Server configuration file in use: standalone.xml
    

Environment

  • Red Hat JBoss Enterprise Application Platform (EAP) 8.x
  • System properties configured with Elytron encrypted expressions (${ENC::...})
  • Management interface bound to a non-default IP address and port (other than localhost:9990)
  • JBoss Diagnostic Reporter (JDR)

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content