Weblogic 12.1.1 SSL error --No identity key/certificate entry was found under alias server_name in keystore path\ name .jks on server AdminServer

Question

Hi guys,
I installed  webloigic 12.1.1 on windows 2003(32-bit);
I was requested add SSL Configuration to console;
I'm using keytool; It is not first time I setup SSL on weblogic console, only version is different;
before I did susssessfully on weblogic 11g(10.3.2-10.3.5) using the same scenario;
My steps:
1.generate key;
keytool -keyalg RSA -genkey -v -alias <server_name> -keysize 2048 -storepass <pwd> -validity 762 -keystore <name>.jks
2. create cert
keytool -certreq -alias <server_name> -file file_name.csr -keystore <name>.jks
after send and return certificate 3 layers;
imported back;
--root--
keytool -importcert -v -noprompt  -alias rootca.kbr.com -file root0.cer -keystore <name>.jks -trustcacerts
Enter keystore password:
Certificate was added to keystore
[Storing <name>.jks]
keytool -importcert -v -noprompt  -alias rootca1.kbr.com -file root1.cer -keystore <name>.jks -trustcacerts
Enter keystore password:
Certificate was added to keystore
[Storing <name>.jks]
keytool -importcert -v -noprompt  -alias <server_name> -file root2.cer -keystore <name>.jks -trustcacerts
Enter keystore password:
Certificate reply was installed in keystore
[Storing <name>.jks]
confufigured weblogic using conosole;
it looks like this in config.xml file
<ssl>
      <enabled>true</enabled>
      <listen-port>7002</listen-port>
      <server-private-key-alias><server_name></server-private-key-alias>
      <server-private-key-pass-phrase-encrypted>{AES}TIRM5RT26K8IZDevCNMexlWp3BuhZaFpi8HEgPaOCrU=</server-private-key-pass-phrase-encrypted>
    </ssl>
    <listen-address>34.64.3.9</listen-address>
    <key-stores>CustomIdentityAndCustomTrust</key-stores>
    <custom-identity-key-store-file-name>path<name>.jks</custom-identity-key-store-file-name>
    <custom-identity-key-store-type>JKS</custom-identity-key-store-type>
    <custom-identity-key-store-pass-phrase-encrypted>{AES}hiemEGOTrjIRvEOnn0+ODuNpWehBbrgb8fydImfyXV4=</custom-identity-key-store-pass-phrase-encrypted>
    <custom-trust-key-store-file-name>path<name>.jks</custom-trust-key-store-file-name>
    <custom-trust-key-store-type>JKS</custom-trust-key-store-type>
    <custom-trust-key-store-pass-phrase-encrypted>{AES}xzP2kU98nkVMNLdzMv7VRoRjoBQUTu5jjtlMLm87PHc=</custom-trust-key-store-pass-phrase-encrypted>
  </server>
When I restart SSL , I see error in log file
Er<AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <weblogic> <> <> <1381506732875>
<BEA-000297> <Inconsistent security configuration, weblogic.management.configuration.ConfigurationException: No identity key/certificate entry was found under alias <SERVER_NAME> in keystore path<name>.jks on server AdminServer>
Please help
I thought before if import certification get status Certificate reply was installed in keystore
it shouldn't be problem for weblogic use thsi certificate;

Answer 1

Compare your steps with the following
http://weblogic-wonders.com/weblogic/2011/05/25/ssl-configuration-for-weblogic-server/