The account running "Apache Tomcat 8.5 jasperreportsTomcat" must be the one which was used to install Jasperreports server (windows) because keystore files (.jrsks and . jrsks p) have been generated on this user's home directory during the install. To change the user, refer to : https://community.jaspersoft.com/wiki/encryption-jasperreports-server-75