This is actually a bug report for

JBoss EAP 6.1.0.GA (AS 7.2.0.Final-redhat-8) which doesn't show up in "affects versions" JIRA drop down for some reason.

Anyways we noticed that

/opt/JBoss/jboss-eap-6.1/modules/system/layers/base/sun/jdk/main

Is missing

<path name="sun/security/util"/>

Which caused problems signing certificates at runtime:

Caused by: java.lang.NoClassDefFoundError: sun/security/util/DerValue
at com.textura.cpms.certificate.security.provider.CPMSDBKeyStoreSPIImpl$KeyProtector.recover(CPMSDBKeyStoreSPIImpl.groovy:893) [asset-cpms-certificate-management-4.0.0-SNAPSHOT.jar:]
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.7.0_25]
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) [rt.jar:1.7.0_25]
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_25]
at java.lang.reflect.Method.invoke(Method.java:606) [rt.jar:1.7.0_25]
at org.codehaus.groovy.runtime.callsite.PogoMetaMethodSite$PogoCachedMethodSiteNoUnwrapNoCoerce.invoke(PogoMetaMethodSite.java:272) [groovy-all-2.1.5.jar:2.1.5]
at org.codehaus.groovy.runtime.callsite.PogoMetaMethodSite.call(PogoMetaMethodSite.java:64) [groovy-all-2.1.5.jar:2.1.5]
at org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:116) [groovy-all-2.1.5.jar:2.1.5]
at com.textura.cpms.certificate.security.provider.CPMSDBKeyStoreSPIImpl.engineGetKey(CPMSDBKeyStoreSPIImpl.groovy:263) [asset-cpms-certificate-management-4.0.0-SNAPSHOT.jar:]
at java.security.KeyStore.getKey(KeyStore.java:792) [rt.jar:1.7.0_25]
at java_security_KeyStore$getKey.call(Unknown Source) at org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCall(CallSiteArray.java:45) [groovy-all-2.1.5.jar:2.1.5]
at org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:108) [groovy-all-2.1.5.jar:2.1.5]
at org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:120) [groovy-all-2.1.5.jar:2.1.5]
at com.textura.cpms.service.app.facade.CertificateServiceImpl.createCertificateForUser(CertificateServiceImpl.groovy:76) [asset-service-provider-impl-4.0.0-SNAPSHOT.jar:]

I'm assuming that this was just an oversight by you guys and that you will add this in a future patch.

In the short term is there a work around w/o requiring us to modify the JBoss installation?

Thanks