The Service Provider could not read the private certificate. If messages such as Could not retrieve entry from keystore or Cannot recover key appear in the log file, ensure that the certificate (private key) password is right.
It is strongly recommended to not use special characters ("-", "_", and so on) when setting the passwords for the keystore and the private key.