2677330 - ssfAuxCreateMemoryPSE: Could not reset PIN for container

During JAVA upgrade with SUM tool, systemPKI related problem occurred:

One of SUM traces shows the message like:

"The following problem has occurred during step execution: com.sap.sdt.util.diag.DiagException: SUM has detected that the SystemPKI is supported by your system. To continue, you have to configure it as described in SAP Note 2200230"

Also, sapcontrol command AccessCheck returns:

> sapcontrol -nr <xx> -host <your host> -systempki E:\usr\sap\<SID>\SYS\profile\SID_JAVA_HOSTNAME -function AccessCheck Stop

AccessCheck
FAIL: SSSLERR_PEER_CERT_UNTRUSTED, SapSSLSessionStart failed in plugin_fopen()

or

Loading instance PSE failed

Above command with -debug option shows the following error:

ssfAuxCreateMemoryPSE: Memory PSE container created #_MemPSE_#731213036909664151179623
ssfAuxCreateMemoryPSE: Instance PSE loaded in container #_MemPSE_#731213036909664151179623
*** ERROR => ssfAuxCreateMemoryPSE: Could not reset PIN for container #_MemPSE_#731213036909664151179623
*** ERROR => CRYPTOLIB Last Error: 0 - <none> [ssfxxpki.c   169]
*** ERROR => CRYPTOLIB Error Stack: <empty> [ssfxxpki.c   171]

JAVA or Dual stack upgrade

SSSLERR_PEER_CERT_UNTRUSTED SAPSYSTENMANE ssfAuxCreateMemoryPSE PIN , KBA , BC-CST-STS , Startup Service , BC-UPG-TLS-TLA , Upgrade tools for ABAP , Problem