Article - CS288484
Unable to start ThingWorx after installing certificate signed by CA with error logged in tomcat stderr: "java.lang.IllegalArgumentException: Alias name [<alias given in keystore>] does not identify a key entry"
Modified: 09-Oct-2025
Applies To
- ThingWorx Platform 8.4 to 9.7
Description
- Unable to start Tomcat with SSL signed by a CA Certificate
- Not able to start Tomcat using keystore generated by CA
- The SSL port 8443 is not open after refreshing Tomcat's SSL certificate
- ThingWorx is not accessible on port 443 after updating the expired SSL certificate in keystore
- Following error logged in <tomcat_home>/logs/tomcat-stderr.log
SEVERE: Failed to initialize component [Connector[HTTP/1.1-443]] org.apache.catalina.LifecycleException: Protocol handler initialization failed ... Caused by: java.lang.IllegalArgumentException: Alias name [<keystore alias>] does not identify a key entry ... Caused by: java.io.IOException: Alias name [<keystore alias>] does not identify a key entry ...
This is a printer-friendly version of Article 288484 and may be out of date. For the latest version click CS288484