A new keystore can be generated using the Java keytool command as shown below:
keytool -genseckey -alias metadata -keypass <metadata key password> -storepass <key store password> -keystore keystore -storetype JCEKS -keyalg DESede
Note: Make sure the keystore is placed in the location specified by the
property encryption.keystore.location and that the passwords you’ve
used in the keytool commands are placed in the file specified by
the property encryption.keystore.keyMetaData.location.