The key.jceks needs to be created like this: Value of CHALLENGE_RESPONSE_SECRET=AliasChallengeResponse Value of CHALLENGE_RESPONSE_SECRET at CryptoUtil.java is hard coded.