Password cannot be obscured in CSR Create property file

Hi Team,

We are using HSM to create certificates. While creating a CSR, if I provide the store password as OBSCURED, I am getting the following error. However, if I use a normal password, I do not encounter this error.

Please note that we are not supposed to use an OBSCURED password while creating CSR.

p986siuserd@lx75313:/sb/sys/si/install/bin$ ./GenCSR.sh -a CREATE -p /sb/sys/si/install/properties/certificate_request.properties

Bad override key 'KeyStoreProviderMap'

Bad override key 'KeyStoreProviderMap'

Bad override key 'KeyStoreProviderMap'

Controller loading lists...

Security Providers: IBMJCEPlus, IBMJCEPlusFIPS, IBMJCE, BC, Certicom, IBMJSSE2, IBMJGSSProvider, IBMCertPath, SCIKS, SCIKM, CerticomJSSE, IBMSASL, nCipherKM

Bad override key 'KeyStoreProviderMap'

Bad override key 'KeyStoreProviderMap'

Bad override key 'KeyStoreProviderMap'

Controller loading lists...

Enter passphrase: -->

action = CREATE

properties file name = /sb/sys/si/install/properties/certificate_request.properties

properties file props = {C=SE, add.trusted=true, certificate.request.Name=nfgsigncreate_20240715_withkey, CN=NFG-PRP-SIGN, ca.cert.file=pathtofileforcert.cer, ST=Sundbyberg, O=Swedbank, algorithm=RSA,

signature.algorithm=SHA256withRSA, L=Stockholm, key.password=passwrod!,

provider=nCipherKM, OU=5020177753,

store.password=OBSCURED:rO0ABXQABkRFU2VkZXVyAAJbQqzzF/gGCFTgAgAAeHAAAAAIOYT1IffENUNzcgARamF2YS5sYW5nLkludGVnZXIS4qCk94GHOAIAAUkABXZhbHVleHIAEGphdmEubGFuZy5OdW1iZXKGrJUdC5TgiwIAAHhwAAAAZXVxAH4AAQAAAAi9uLbjasOjkg==,

csr.file=/sb/sys/software/nfgsigncreate_20240715_withkey.csr, key.length=2048, keystoretype=nCipher.sworld}

attempting to generate a certifcate signing request for cert name nfgsigncreate_20240715_withkey with keystore type of nCipher.sworld

RandomNumberAlgorithm=SHA2DRBG

java.io.IOException: The password could not load any of the cards protecting this key.

at com.ncipher.provider.km.KMKeyStore.engineLoad(KMKeyStore.java:701)

at java.security.KeyStore.load(KeyStore.java:1460)

at com.sterlingcommerce.security.util.CertificateSigningRequest.create(CertificateSigningRequest.java:368)

at com.sterlingcommerce.security.util.CertificateSigningRequest.main(CertificateSigningRequest.java:1322)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:90)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)

at java.lang.reflect.Method.invoke(Method.java:508)

at com.sterlingcommerce.woodstock.noapp.NoAppLoader.main(NoAppLoader.java:99)

Caused by: com.ncipher.nfast.NFException: The password could not load any of the cards protecting this key.

at com.ncipher.provider.km.KMKeyStore.loadCardSet(KMKeyStore.java:1006)

at com.ncipher.provider.km.KMKeyStore.loadKey(KMKeyStore.java:1113)

at com.ncipher.provider.km.KMKeyStore.engineLoad(KMKeyStore.java:696)

... 8 more

Error '255' doing -a