UPDATE: I just fresh-installed in a different machine, same errors. Could it has to do with the fact that the java keystore has several gluu certificates? UPDATE2: it wasn't the case, as expected. Deleted all keys and added the last one, erros persist.

Jose, can you take a look?

Hi Hernán, From what I see, it looks like you are trying to use the SCIM service protected by UMA. You definitely need to better describe your problem, errors obtained, and attach contextual information to give you the best assistance. I suspect your .jks file is corrupted (or you are pointing to a wrong scim-rp.jks file). So far I can suggest you to follow what we state [in this guide](https://gluu.org/docs/ce/3.0.2/admin-guide/scim-uma/#requisites) (if you are using 3.0.2). The JKS file that you grab from the server (`/install/community-edition-setup/output/scim-rp.jks`) needs to be copied to a location your application can have read access to (as your dev machine). See in the code sample the variable `umaAatClientJksPath`. The certificate file is what needs to be imported into your java key store. So it should be `/opt/gluu-server-version/etc/certs/httpd.crt` if you are not protecting your server with a different cert. You can have n certs there, there should be no problem.

Hi, Jose, thank you for your answers. Now, the problem dissappeared when I, for the fifth time, installed Gluu with the JCE option; I got used to not having it installed and, for some reason, it worked, until last friday when I attempted to set up a two node cluster of Gluu. Apparently, without it, the oxauth library was no able to validate the key. Another question would be, if for 3.0.2 version, you guys maybe apply patches, and, inadvertently, I yum installed some patch that uses JCE objects.

Hernán, The linux package administrator confirmed no recent changes in 3.0.2 binaries.

All right, thanks. So, maybe without the JCE package worked for a while, but it is better to always install it, is that right? I mean, the JCE is mandatory.

Not mandatory but recommended to be included in installation. It enables using big keys in RSA algorithms, for instance.