CCP Error - keystore password was incorrect

Kiran Adhikari
Wed, 08 Apr 2026 03:21:14 +0000

I’d first look at the PFX file and its password, because this error usually points there more than to the AD account itself.

If SailPoint says keystore password was incorrect, it normally means it could not open the .pfx with the password you entered.

A few things worth checking:

re-upload the .pfx and type the password again carefully

make sure the certificate file name in the config matches the uploaded file exactly

confirm the Credential Provider and AD source are on the same VA cluster

if your CyberArk endpoint uses an internal CA, make sure that cert chain is trusted on the VA

restart the VA/CCG once after uploading, just to rule out a stale load issue

If all of that looks fine, then I’d suspect the .pfx itself — either wrong password, wrong file, or export issue.

That’s where I’d start.