Can't upload application to on-prem instance

[RonAlmog]

Hello,

When trying to upload an application to my on-prem instance on the Application Manager I get this message:

"Unable to upload application: Decrypted content file not found".

I previously uploaded the relevant PKCS12 Key Store certificate to the instance and made sure it's valid.

I try to upload an application which is using this certificate and I'm still getting this error message.

Would appreciate any kind of help.

Ron

[Ton ThalesNL]

In short, I think your encryption/decryption certificate must now be of type 'BCFKS'.

We are in this proces, of getting two plugins from the ServiceNow store, and uploading this in our On Premise instance (which is locked down from the internet).
In the ServiceNow store we did see the certificate for encryption/decryption is of type 'BCFKS' while in the KB0995277 article 'PKCS12' is mentioned (which I think is outdated).

In the ServiceNow store you can also upload your own certificate, but this must be of type 'BCFKS'.

When you press upload certificate it will show the command to generate such a BCFKS certificate.

At the moment we also have problems installing the plugin .store file and a Case open to investigate this issue, we get the following errors when uploading the plugin (certificate is installed and checked..):
- Unable to upload application: Decrypted content file not found.
followed by:
- No valid certificate found to process the application upload.

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0995277

To fix the decrypt/certificate not found errors we had to change a certificate KMF policy from Reject to Track.
The relevant KMF policy module can be found in the log files, search for "SEVERE *** ERROR *** Access Denied to cryptographic module" 

After this we could upload and install the plugin.