AWSIoT Android SDK не может создать новый сертификат + ключ

Соответствующий раздел моей программы:

private static final String CUSTOMER_SPECIFIC_ENDPOINT = "a228q6docijn1f.iot.eu-central-1.amazonaws.com";
// Cognito pool ID. For this app, pool needs to be unauthenticated pool with
// AWS IoT permissions.
private static final String COGNITO_POOL_ID = "eu-central-1:36b201e2-d55e-4601-9430-031fc7990291";
// Name of the AWS IoT policy to attach to a newly created certificate
private static final String AWS_IOT_POLICY_NAME = "all-iot";

// Region of AWS IoT
private static final Regions MY_REGION = Regions.EU_CENTRAL_1;
// Filename of KeyStore file on the filesystem
private static final String KEYSTORE_NAME = "KeyStoreAlfred01.bks";
// Password for the private key in the KeyStore
private static final String KEYSTORE_PASSWORD = "<THIS I FILLED IN CORRECTLY>";
// Certificate and key aliases in the KeyStore
private static final String CERTIFICATE_ID = "keystorealfred01";


AWSIotClient mIotAndroidClient;
AWSIotMqttManager mqttManager;
String clientId;
String keystorePath;
String keystoreName;
String keystorePassword;

KeyStore clientKeyStore = null;
String certificateId;

CognitoCachingCredentialsProvider credentialsProvider;

@Override
protected void onCreate(Bundle savedInstanceState) {
    super.onCreate(savedInstanceState);
    setContentView(R.layout.activity_main);
    Toolbar toolbar = (Toolbar) findViewById(R.id.toolbar);
    setSupportActionBar(toolbar);

    btnGenNumber = (Button) findViewById(R.id.btnGenNumber);
    btnConnect = (Button) findViewById(R.id.btnConnect);
    btnYoutubeSearch = (Button) findViewById(R.id.btnYoutubeSearch);

    btnGenNumber.setOnClickListener(new View.OnClickListener() {
        @Override
        public void onClick(View view) {
            Random r = new Random();
            int num = r.nextInt(51);

            try {
                mqttManager.publishString(Integer.toString(num), "test", AWSIotMqttQos.QOS0);
                Toast.makeText(getApplicationContext(), "Published number " + Integer.toString(num), Toast.LENGTH_LONG).show();

                Log.i(LOG_TAG, "Publish done");
            } catch (Exception e) {
                Log.e(LOG_TAG, "Publish error.", e);
            }

            Log.i(LOG_TAG, "Button generated a new number" + num);
        }
    });

    btnYoutubeSearch.setOnClickListener(new View.OnClickListener() {
        @Override
        public void onClick(View view) {
            Intent intent = new Intent(Intent.ACTION_SEARCH);
            intent.setPackage("com.google.android.youtube");
            intent.putExtra("query", "Android");
            intent.setFlags(Intent.FLAG_ACTIVITY_NEW_TASK);
            startActivity(intent);
        }
    });
    // Initialize the AWS Cognito credentials provider
    credentialsProvider = new CognitoCachingCredentialsProvider(
            getApplicationContext(), // context
            COGNITO_POOL_ID, // Identity Pool ID
            MY_REGION // Region
    );
    Log.i(LOG_TAG, "Credentials provider output " + credentialsProvider.toString());
    Region region = Region.getRegion(MY_REGION);
    mIotAndroidClient = new AWSIotClient(credentialsProvider);
    mIotAndroidClient.setRegion(region);

    //keystorePath = "/mnt/sdcard/awsIOTtryout01";
    keystorePath = getFilesDir().getPath();
    keystoreName = KEYSTORE_NAME;
    keystorePassword = KEYSTORE_PASSWORD;
    certificateId = CERTIFICATE_ID;

    Log.i(LOG_TAG, "Begin certificate load");

    // To load cert/key from keystore on filesystem
    try {
        if (AWSIotKeystoreHelper.isKeystorePresent(keystorePath, keystoreName)) {
            if (AWSIotKeystoreHelper.keystoreContainsAlias(certificateId, keystorePath,
                    keystoreName, keystorePassword)) {
                Log.i(LOG_TAG, "Certificate " + certificateId
                        + " found in keystore - using for MQTT.");
                // load keystore from file into memory to pass on connection
                clientKeyStore = AWSIotKeystoreHelper.getIotKeystore(certificateId,
                        keystorePath, keystoreName, keystorePassword);
                Log.i(LOG_TAG, "Certificate loading complete");
                //btnConnect.setEnabled(true);
            } else {
                Log.i(LOG_TAG, "Key/cert " + certificateId + " not found in keystore.");
            }
        } else {
            Log.i(LOG_TAG, "Keystore " + keystorePath + "/" + keystoreName + " not found.");
        }
    } catch (Exception e) {
        Log.e(LOG_TAG, "An error occurred retrieving cert/key from keystore.", e);
    }

    if (clientKeyStore == null) {
        Toast.makeText(getApplicationContext(),"Cert/key was not found in keystore - creating new key and certificate.",Toast.LENGTH_SHORT).show();
        Log.i(LOG_TAG, "Cert/key was not found in keystore - creating new key and certificate.");
        new Thread(new Runnable() {
            @Override
            public void run() {
                try {
                    // Create a new private key and certificate. This call
                    // creates both on the server and returns them to the
                    // device.
                    CreateKeysAndCertificateRequest createKeysAndCertificateRequest =
                            new CreateKeysAndCertificateRequest();
                    createKeysAndCertificateRequest.setSetAsActive(true);
                    Log.i(LOG_TAG,"keys + cert generation : "+createKeysAndCertificateRequest.toString());
                    final CreateKeysAndCertificateResult createKeysAndCertificateResult;
                    createKeysAndCertificateResult =mIotAndroidClient.createKeysAndCertificate(createKeysAndCertificateRequest);

                    //Log.i(LOG_TAG,"Cert ID: New certificate generation done.");
                    //Toast.makeText(getApplicationContext(),"New certificate created", Toast.LENGTH_SHORT).show();
                    // store in keystore for use in MQTT client
                    // saved as alias "default" so a new certificate isn't
                    // generated each run of this application
                    AWSIotKeystoreHelper.saveCertificateAndPrivateKey(certificateId,
                            createKeysAndCertificateResult.getCertificatePem(),
                            createKeysAndCertificateResult.getKeyPair().getPrivateKey(),
                            keystorePath, keystoreName, keystorePassword);

                    // load keystore from file into memory to pass on connection

                    clientKeyStore = AWSIotKeystoreHelper.getIotKeystore(certificateId,
                            keystorePath, keystoreName, keystorePassword);
                    // Attach a policy to the newly created certificate
                    // This flow assumes the policy was already created in
                    // AWS IoT and we are now just attaching it to the
                    // certificate.

                    AttachPrincipalPolicyRequest policyAttachRequest =
                            new AttachPrincipalPolicyRequest();
                    policyAttachRequest.setPolicyName(AWS_IOT_POLICY_NAME);
                    policyAttachRequest.setPrincipal(createKeysAndCertificateResult.getCertificateArn());
                    mIotAndroidClient.attachPrincipalPolicy(policyAttachRequest);
                } catch (Exception e) {
                   // Toast.makeText(getApplicationContext(),"Exception occured when generating new key+cert",Toast.LENGTH_SHORT).show();
                    e.printStackTrace();
                    Log.e(LOG_TAG,"Exception occurred when generating new private key and certificate.",e);
                }
            }
        }).start();
    }

Я использую ANdroid Studio 2.2.2 с использованием Min API: 9 для проекта. Любая помощь высоко ценится !

Обновление: когда файл KeyStore (с сертификатами) присутствует в памяти телефона этого пакета, журналы Android выглядят так:

/CognitoCachingCredentia`enter code here`lsProvider: Loading credentials from SharedPreferences
I/AWS: Credentials provider output com.amazonaws.auth.CognitoCachingCredentialsProvider@2d7ae714
I/AmazonWebServiceClient: {execute-api, eu-central-1} was not found in region metadata, trying to construct an endpoint using the standard pattern for this region: 'execute-api.eu-central-1.amazonaws.com'.
I/AWS: Begin certificate load
I/AWS: Certificate keystorealfred01 found in keystore - using for MQTT.
I/AWS: Certificate loading complete
D/OpenGLRenderer: Render dirty regions requested: true
I/Adreno-EGL: <qeglDrvAPI_eglInitialize:410>: EGL 1.4 QUALCOMM build: AU_LINUX_ANDROID_LA.BF.1.1.1_RB1.05.00.02.042.013_msm8974_LA.BF.1.1.1_RB1__release_AU ()
              OpenGL ES Shader Compiler Version: E031.25.03.00
              Build Date: 01/21/15 Wed
              Local Branch: mybranch7061829
              Remote Branch: quic/LA.BF.1.1.1_rb1.7
              Local Patches: NONE
              Reconstruct Branch: AU_LINUX_ANDROID_LA.BF.1.1.1_RB1.05.00.02.042.013 +  NOTHING
I/OpenGLRenderer: Initialized EGL, version 1.4
D/OpenGLRenderer: Enabling debug mode 0
D/Atlas: Validating map...
W/IInputConnectionWrapper: showStatusIcon on inactive InputConnection
I/Timeline: Timeline: Activity_idle id: android.os.BinderProxy@25603903 time:661926148