Many users experienced the same difficulty with keyring:
when a master password dialog appears, it's unclear whether user is asked for a password to check or just to enter it first time.
From end user point of view these cases are quite different. In the case it's first time, "change" option does not make sense at all; user should think out a good password and enter it. On subsequent calls user should remember, which password has (s)he once entered and enter it exactly.
This really irritated each user I knew who faced this dialog.
The dialog already says to either enter a new password or type in the same password you entered before. But should be able to change UI according to whether one has been entered before; may need to change how EncryptionProvider works a bit to differentiate between the two cases.
Anyway this dialog is only used for platforms which lack a native keyring, which should be quite rare (just Solaris 10, tracked separately).
Disabling "Change..." section the first time the dialog is shown. Should suffice in combination with explanatory text.
Integrated into 'main-golden', will be available in build *201004131450* on http://bits.netbeans.org/dev/nightly/ (upload may still be in progress)
User: Jesse Glick <email@example.com>
Log: #181707: different GUI in case no master password has yet been set.