3365908 - SAP Cloud Connector HA - Push from master to shadow failed

The error message "Push from master to shadow failed. See logs on the master side for details" shows in the cloud connector shadow node when building a connection between the Master node and the shadow node.

In the master and shadow node's ljs_trace.log (before version 2.17.0) or scc_core.trc (version 2.17.0 or later), the below errors occur:

Master node

#WARN#com.sap.scc.ha#scc-init-push-24uh68md#          #master 24uh68md: Initial push failed: Data transfer to shadow system failed. See ''Log And Trace Files'' and in particular ljs_trace.log for details.
com.sap.scc.ha.PushRequestException: com.sap.scc.ha.HaHttpClientException: request https://xxxxx:8443/shadow failed with SHADOW_UPDATE Failed to write keystore for subaccount _crossaccount during shadow update
    at com.sap.scc.ha.PushRequest.failed(PushRequest.java:107)
    at com.sap.scc.ha.PushRequest.execute(PushRequest.java:70)
    at com.sap.scc.ha.PushToShadow.lambda$createInitPushAction$2(PushToShadow.java:156)
    at java.lang.Thread.run(Thread.java:838)
Caused by: com.sap.scc.ha.HaHttpClientException: request https://xxxxx:8443/shadow failed with SHADOW_UPDATE Failed to write keystore for subaccount _crossaccount during shadow update
    at com.sap.scc.ha.HaHttpClientSession.checkStatusCode(HaHttpClientSession.java:249)
    at com.sap.scc.ha.HaHttpClientSession.execute(HaHttpClientSession.java:137)
    at com.sap.scc.ha.PushRequest.execute(PushRequest.java:66)
    ... 2 common frames omitted

Shadow node

#ERROR#com.sap.scc.ui#https-jsse-nio2-8443-exec-9#          #Shadow 244hz986: Failed to update key store on account _crossaccount
java.io.IOException: parseAlgParameters failed: ObjectIdentifier() -- data isn't an object ID (tag = 48)
    at sun.security.pkcs12.PKCS12KeyStore.parseAlgParameters(PKCS12KeyStore.java:819)
    at sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2027)
    at java.lang.Thread.run(Thread.java:836)
Caused by: java.io.IOException: ObjectIdentifier() -- data isn't an object ID (tag = 48)
    at sun.security.util.ObjectIdentifier.<init>(ObjectIdentifier.java:285)
    ... 44 common frames omitted
#ERROR#com.sap.scc.ha#com.sap.scc.ha.PingToMaster#          #Shadow 244hz986: Initial push request failed with com.sap.scc.servlets.RequestFailureExecution$IllegalState: Push from master to shadow failed. See logs on the master side for details. [Push from master to shadow failed. See logs on the master side for details.]

SAP cloud connector 2.15.2 - 2.17.0

cloud connector high availability, high availability, HA, Push from master to shadow failed, Failed to update key store on account _crossaccount, ObjectIdentifier() -- data isn't an object ID (tag = 48) , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem