Hello,
after Android update for many models of Samsung phones example A35, A52, we detected issue with keystore. There is not possible to send email from Work profile via Samsung email with certificate - use S/MIME.
After update there is only message below:
"To use credential store, change, your screen lock type to Pattern, PIN, Password, or Biomettrics then try again."
Any new PIN, biomettrics, password did not help.
Deleted - delete all certificates and install it again, it did not help.
Create new work profile after update it did not help also.
This exception also displayed new two phases for access to work profile it is hidden field which is not system settings now.
Before update it worked properly in work profile, after system update when we used Personal profile it worked, there is problem with work profile only.
Via ADB it displayed exception in keystore.
EmailKeystoreService: isAliasExists()
System.err: java.lang.NullPointerException: alias == null
System.err: at android.security.keystore2.AndroidKeyStoreSpi.engineContainsAlias(AndroidKeyStoreSpi.java:1104)
System.err: at java.security.KeyStore.containsAlias(KeyStore.java:1314)
System.err: at com.android.server.emailksproxy.EmailKeystoreService.isAliasExists(EmailKeystoreService.java:88)
System.err: at com.samsung.android.knox.util.ISemKeyStoreService$Stub.onTransact(ISemKeyStoreService.java:122)
System.err: at android.os.Binder.execTransactInternal(Binder.java:1375)
System.err: at android.os.Binder.execTransact(Binder.java:1311)
Protocol: SemCertificateUtil::grantAccessForAKS() - alias[null] isn't in remoteAKSSvc, uid[1010339]
EmailKeystoreService: isAliasExists()
keystore2: system/security/keystore2/src/error.rs:182 - Rc(r#KEY_NOT_FOUND), "system/security/keystore2/src/service.rs:172: In get_key_entry, while trying to load key info. 1000, Some(\"102024\")"
EmailKeystoreService: isAliasExists:: returns FAILURE
Protocol: SemCertificateUtil::grantAccessForAKS() - alias[102024] isn't in remoteAKSSvc, uid[1010339]
SQLiteLog: (28) double-quoted string literal: "imap"
SQLiteLog: (28) double-quoted string literal: "eas"
Security: SdpHelper::isSdpActive() - Sdp isn't enabled!
P.
