3771224 - SAPCAR: error in signature verification (error 60). SSF-RC: SSF_API_UNKNOWN_SIGNER

When trying to upgrade system version by using SUM tool, face error at phase “SUBMOD_KERNEL_SCAN_TOOLCHK_NONSERIAL/KERNEL_EXE”:

- Module:              PREP_INPUT_KERNEL/Target Kernel (1): Extraction and Checks
- Phase Name:          PREP_INPUT_KERNEL/SUBMOD_KERNEL_SCAN_TOOLCHK_INP/SUBMOD_KERNEL_SCAN_TOOLCHK_NONSERIAL/KERNEL_EXE
- Phase Log File:      KERNELINP.LOG
- Error Message:       Last generated error message:
'MANIFEST_SIGNATURE'/'SIGNATURE: invalid manifest signature' for archive
'<file directory and file name>'.

Further checking CAR.log, see below error message:

SAPCAR: error in signature verification (error 60). SSF-RC: SSF_API_UNKNOWN_SIGNER
Detail: Signer is not known or not trusted *OR* Recipient not found (in address book/PSE)

SAP AS ABAP System.

SUM, SAPCAR, CRL, KERNEL_EXE, MANIFEST_SIGNATURE, invalid manifest signature' for archive, SAPCAR: error in signature verification (error 60), SSF-RC: SSF_API_UNKNOWN_SIGNER, Signer is not known or not trusted, CommonCryptoLib, 2507917, revocation. , KBA , BC-UPG-DTM-TLA , Downtime Minimization for ABAP , BC-SEC-CRYPTOLIB , CommonCryptoLib , Problem