article Qlik Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception in Official Support Articles

Qlik Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

TalendSolutionExpert — Mon, 01 Sep 2025 06:55:27 GMT

You receive an exception when you run a Job that uses key pair authentication for Snowflake. The exception occurs when you run the Job from Studio locally or on a JobServer or Remote Engine

Starting job Snowflake_CreateTable at 09:21 19/07/2021.
[statistics] connecting to socket on port 3725
[statistics] connected
Exception in component tDBConnection_2 (Snowflake_CreateTable)
java.lang.RuntimeException: java.io.IOException: Missing Keystore location
at edw_demo.snowflake_createtable_0_1.Snowflake_CreateTable.tDBConnection_2Process(Snowflake_CreateTable.java:619)
at edw_demo.snowflake_createtable_0_1.Snowflake_CreateTable.runJobInTOS(Snowflake_CreateTable.java:3881)
at edw_demo.snowflake_createtable_0_1.Snowflake_CreateTable.main(Snowflake_CreateTable.java:3651)
[FATAL] 09:21:38 edw_demo.snowflake_createtable_0_1.Snowflake_CreateTable- tDBConnection_2 java.io.IOException: Missing Keystore location
java.lang.RuntimeException: java.io.IOException: Missing Keystore location
at edw_demo.snowflake_createtable_0_1.Snowflake_CreateTable.tDBConnection_2Process(Snowflake_CreateTable.java:619) [classes/:?]
at edw_demo.snowflake_createtable_0_1.Snowflake_CreateTable.runJobInTOS(Snowflake_CreateTable.java:3881) [classes/:?]
at edw_demo.snowflake_createtable_0_1.Snowflake_CreateTable.main(Snowflake_CreateTable.java:3651) [classes/:?]

Cause

The Keystore path is not configured correctly at the Job or Studio level before connecting to Snowflake DB on the metadata and using the same metadata connection in the Jobs.

Resolution

To use key pair authentication for Snowflake, the Keystore settings must be configured in Talend Studio before connecting to Snowflake.

Configuring the Keystore at the Studio level

Perform one of the following options.

Option 1:

Update the appropriate Studio initialization file (Talend-Studio-win-x86_64.ini,Talend-Studio-linux-gtk-x86_64.ini,or Talend-Studio-macosx-cocoa.ini depending on your operating system), with the following settings:

-Djavax.net.ssl.keyStore={yourPathToKeyStore}
-Djavax.net.ssl.keyStoreType={PKCS12}/{JKS}
-Djavax.net.ssl.keyStorePassword={keyStorePassword}

Option 2:

Update the Keystore configuration in Studio SSL preferences with the required Path, Password, and Keystore Type.
Add the Key Alias to the Snowflake metadata.

Key Alias will be created with your keystore .p12 file

Configuring the Keystore at the Job level

Update the tSetKeystore components in your Job, if you plan to run the Job when the target execution is local, Remote Engine, or JobServer (the versions do not matter). Before selecting the Key Pair option for the tSnowflakeConnection component, configure the key pair authentication on the Basic settings tab of the tSetKeystore component:

Select JKS from the TrustStore type pull-down list.
Enter " " in the TrustStore file field.
Clear the TrustStore password field.
Select the Need Client authentication check box.
Enter the path to the Keystore file in double quotation marks in the KeyStore file field.
Enter the Keystore password in the KeyStore password field.

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

jdela — Fri, 23 Feb 2024 20:42:48 GMT

Hi Jamie - I tried both the options you listed above, however i am still getting the same error message. Need help!

Thanks

Jodi

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Xiaodi_Shi — Mon, 26 Feb 2024 02:28:59 GMT

Hello @jdela

Could you please indicate in which Talend version/edition you are? What does your certificate file look like? Is it in a correct format?

Note: Talend tsetkeystore component itself can only take in .jks or .p12/.pfx format. If you are using PKCS8 format, you need to convert your p8 certs into a supported format.

Best regards

Sabrina

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

jdela — Mon, 26 Feb 2024 15:35:50 GMT

Hi Sabrina,
My answers in Blue below

Original

Hello @jdela Could you please indicate in which Talend version/edition you are? What does your certificate file look like? Is it in the correct format? Note: Talend tsetkeystore component itself can only take pkcs12 or a jks component, I have attached a document that our team created, that has detailed steps on how to create a keystore and import the cert for Snowflake. Best regards Sabrina
I am using Talend version 7.3.1
I am assuming when you say certification file it is snowflake private file , it ends with .p8
Yes, I am using JKS in tsetkeystore component
I did not see any attachment with detailed steps in the email
Thank you
Jodi

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Xiaodi_Shi — Tue, 27 Feb 2024 01:14:39 GMT

Hello @jdela

As the tSetKeyStore component doesn’t accept the PKCS8 format and only takes in .jks or .p12/.pfx format, suggesting to convert your p8 certs into a supported format.
Please see https://knowledge.digicert.com/solution/SO26449.html

Best regards

Sabrina

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

MdFazil — Thu, 21 Mar 2024 05:54:04 GMT

Hi,

I tried uploading the key at Studio's preference. But the SSL certificate is not uploaded, and I have one more doubt here, which is in the "KEY ALIAS" at snowflakes metadata connection what do I need to provide after uploading the key store? Any reply would help. Thanks in advance.

Regards

Fazil M

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Xiaodi_Shi — Thu, 21 Mar 2024 07:53:22 GMT

Hello @MdFazil

Key Alias field is available if Key Pair is selected from the Authentication Type drop-down list and it is the alias name associated with your KeyStore.

Please take a look in the documentation of the component :

https://help.talend.com/r/en-US/8.0/snowflake/tsnowflakeconnection-standard-properties

As it's described, you need first to create your keystore and use another component to load it

https://help.talend.com/r/en-US/8.0/keystore/tsetkeystore

When you create your keystore, normally you create it using an alias.

Feel free to let me know if it helps.

Best regards

Sabrina

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

MdFazil — Thu, 21 Mar 2024 09:17:26 GMT

Hi @Xiaodi_Shi

I want to connect using the Key-pair authentication. As described in this thread, I have configured tKeystore to hold the keys and connected. But, I'm struck at the place where the Key alias need to be given. Can you please tell me how can I set the Key alias or where can I find the alias to enter in the field. Help is appreciated. Thanks

Regards
Fazil M

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Xiaodi_Shi — Fri, 22 Mar 2024 01:13:33 GMT

Hello @MdFazil

Do you have Certificate, Certificate Authority and Private key files?

You need to provide the required key information when creating a new Keystore file at first step.

For example:

keytool -genkey -alias mydomain -keyalg RSA -keystore KeyStore.jks -keysize 2048

Secondly, Import the certificate to that keystore

keytool -import -trustcacerts -alias mydomain -file mycompany.crt -keystore KeyStore.jks

Don't hesitate to post your issue here.

Best regards

Sabrina

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

MdFazil — Fri, 22 Mar 2024 04:31:02 GMT

Hello @Xiaodi_Shi
Thank your for the reply.

I have been trying to load SSL file, but failed in the process and yes have both private key and truststore files(I'll attach the screenshot) after following all these steps, I get error like reject type tag 45. I don't know what can be the cause.

Starting job OnBoardingDemoJob at 09:58 22/03/2024. [statistics] connecting to socket on port 3650 [statistics] connected Exception in component tDBConnection_1 (OnBoardingDemoJob) java.lang.RuntimeException: java.io.IOException: toDerInputStream rejects tag type 45 at talend_snowflake_streaming.onboardingdemojob_0_1.OnBoardingDemoJob.tDBConnection_1Process(OnBoardingDemoJob.java:679) at talend_snowflake_streaming.onboardingdemojob_0_1.OnBoardingDemoJob.tSetKeystore_1Process(OnBoardingDemoJob.java:484) at talend_snowflake_streaming.onboardingdemojob_0_1.OnBoardingDemoJob$5.run(OnBoardingDemoJob.java:1369) [FATAL] 09:58:23 talend_snowflake_streaming.onboardingdemojob_0_1.OnBoardingDemoJob- tDBConnection_1 java.io.IOException: toDerInputStream rejects tag type 45 java.lang.RuntimeException: java.io.IOException: toDerInputStream rejects tag type 45 at talend_snowflake_streaming.onboardingdemojob_0_1.OnBoardingDemoJob.tDBConnection_1Process(OnBoardingDemoJob.java:679) [classes/:?] at talend_snowflake_streaming.onboardingdemojob_0_1.OnBoardingDemoJob.tSetKeystore_1Process(OnBoardingDemoJob.java:484) [classes/:?] at talend_snowflake_streaming.onboardingdemojob_0_1.OnBoardingDemoJob$5.run(OnBoardingDemoJob.java:1369) [classes/:?] [statistics] disconnected Job OnBoardingDemoJob ended at 09:58 22/03/2024. [Exit code = 1]

I have also uploaded the tKeystore configuration here

Can you please provide me with any solution, Thanks in advance.

Regards

Fazil M

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Xiaodi_Shi — Fri, 22 Mar 2024 08:23:16 GMT

Hello @MdFazil

We see you've created a topic on talend technical forum and we could move there for further investigation on your own use case.

https://community.qlik.com/t5/Design-and-Development/Couldn-t-connect-Snowflake-to-Talend-through-SSL/m-p/2433558#M140387

Best regards

Sabrina

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

MdFazil — Fri, 22 Mar 2024 08:26:19 GMT

Hello @Xiaodi_Shi

Thanks for the reply, I'm expecting your help there. Thanks

Regards
Fazil M

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

venkattalend — Fri, 14 Mar 2025 02:25:25 GMT

Hi @Jamie_Gregory @Xiaodi_Shi

I am trying to set-up snowflake key-pair authentication from Talend open studio

Talend Version: 8.0.1

Steps followed:

1) generated private and public keys using openssl ( windows)

2) Altered snowflake user with public key

3) stored rsa_key.p8 in talend machine

Based on the thread discussion, I came to know that .p8 is not supported from talend and snowflake does support only .pem (.p8).

Do I need to convert .p8 to .jks and point .jks in keystore component and keeping .p8 on snowflake end

Talend .jks format--------> snowflake .p8

do we need passphrase for private key when connecting from talend ?

please check above understanding is correct

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Xiaodi_Shi — Fri, 14 Mar 2025 03:37:26 GMT

Hello @venkattalend

If your PSCS12 version keystore ended with .pem, please convert this private key to PKCS12 format and use KeyStore type PKCS12 in tSetKeystore component. In Snowflake, assign the public key to the Snowflake user and run your job in studio.

Feel free to let us know if your connection go through and data could be read from the DB.

Best regards

Sabrina

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

venkattalend — Fri, 14 Mar 2025 05:05:17 GMT

@Xiaodi_Shi Understood. What you're saying is that first, I generate keys using OpenSSL in .pem format, and then convert the .p8 to PKCS#12.

let me try and update the group. thanks

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

venkattalend — Fri, 14 Mar 2025 15:19:44 GMT

@Xiaodi_Shi I tried below steps, and finally got error

"New public key rejected by current policy. Reason: 'Invalid Public key' "

can you provide detailed commands to configure the setup

step1
--Generate .jks keystore
keytool -genkey -keyalg RSA -v -keystore keystore.jks -alias first-key-pair

step2
---jks keystore to PKCS12
keytool -importkeystore -srckeystore C:\Users\etldeveloper\Desktop\keypair\keystore.jks -srcstoretype JKS -destkeystore C:\Users\etldeveloper\Desktop\keypair\keystore.p12 -deststoretype PKCS12

step3

--PKCS12 to pem
openssl pkcs12 -in C:\Users\etldeveloper\Desktop\keypair\keystore.p12 -out C:\Users\etldeveloper\Desktop\keypair\keystore.pem

step4

openssl x509 -in certificate.crt -out public_key.pem -outform PEM

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Xiaodi_Shi — Mon, 17 Mar 2025 03:50:06 GMT

Hello @venkattalend

Here is a good example with commands step by step for converting a PEM File to Java KeyStore Format

https://www.baeldung.com/convert-pem-to-jks

Please feel free to let me know if it helps.

Best regards

Sabrina

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

venkattalend — Mon, 24 Mar 2025 00:43:19 GMT

Hi @Xiaodi_Shi

I was able to connect successfully using link https://www.baeldung.com/convert-pem-to-jks

I was able to query data by putting query in "Manual query" but when i try to load tables in sowflake input component it throwing error, please check attached screenshot

what could be the reason?

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Shicong_Hong — Mon, 24 Mar 2025 02:42:27 GMT

@venkattalend could you please share a screenshot of the basic settings of tSnowFlakeConnection? You mentioned that you were able to query a small data set using Manual Query, but an error occurred when loading a large data set, right?

article Qlik Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception in Official Support Articles

Qlik Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Cause

Resolution

Configuring the Keystore at the Studio level

Option 1:

Option 2:

Configuring the Keystore at the Job level

Related Content

Environment

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception

Re: Talend Job using key pair authentication for Snowflake fails with a ‘Missing Keystore location’ exception