A new cluster was created as part of the T4 store process. The new cluster has a new cluster (client) certificate. This certificate must be exported and installed on all key servers so that subsequent recovery commands in the execute phase, such as mkkeyserver, will succeed.
Be sure to export the new cluster certificate by using the chsystemcert -export command and install the SSL certificate on all key servers before you proceed with the svcconfig restore -execute command.