# Migration from 26.0.2 to 26.2.5, with trustore certificates

**URL:** <https://forum.keycloak.org/t/migration-from-26-0-2-to-26-2-5-with-trustore-certificates/30268>\
**Category:** Getting advice\
**Tags:** authentication\
**Created:** [July 25, 2025, 2:13pm UTC](https://forum.keycloak.org/t/migration-from-26-0-2-to-26-2-5-with-trustore-certificates/30268 "2025-07-25T14:13:46Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![tania](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/tania/32/9460_2.png) [@tania](https://forum.keycloak.org/u/tania)\
**Post date:** [July 25, 2025, 2:13pm UTC](https://forum.keycloak.org/t/migration-from-26-0-2-to-26-2-5-with-trustore-certificates/30268/1 "2025-07-25T14:13:46Z")

</div>

I migrate from 26.0.2 to 26.2.5. I had to modify from KC\_HTTP\_ENABLED=true to KC\_HTTP\_ENABLED=false, due to  
ERROR: Key material not provided to setup HTTPS. Please configure your keys/certificates, or if HTTPS access is not needed see the `http-enabled` option. If you meant to start the server in development.

I have tried several option, by setting :

ENV KC\_HTTPS\_TRUST\_STORE\_FILE=/opt/keycloak/conf/truststores/xxxx.crt  
ENV KC\_HTTPS\_TRUST\_STORE\_TYPE=PEM

or  
ENV KC\_SPI\_TRUSTSTORE\_FILE\_FILE=/opt/keycloak/conf/truststores/xxxx.crt  
ENV KC\_SPI\_TRUSTSTORE\_FILE\_TYPE=PEM

No luck. I have verified that the certificate is in the correct place.

Any suggestions?