[Pki-users] Utimaco HSM "Not Found" problem

[Christina Fu]

Hi Arshad,

Just a thought.  Did you try removing the space for your token name?

Christina

Arshad Noor wrote:
> Can someone from the DogTag team explain the process by which
> the installation servlet "finds" PKCS11 modules/HSMs and logs
> into them?  Alternatively, if you can point me to the specific
> source module that performs this, I'd be happy to look at it
> myself.
>
> I'm still baffled by our inability to have the installation
> servlet find the Utimaco HSM module, despite the fact that
> modutil sees it:
>
> $ pet105:~> modutil -dbdir /var/lib/subca01/alias -nocertdb -list
>
> Listing of PKCS #11 Modules
> -----------------------------------------------------------
>   1. NSS Internal PKCS #11 Module
>          slots: 2 slots attached
>         status: loaded
>
>          slot: NSS Internal Cryptographic Services
>         token: NSS Generic Crypto Services
>
>          slot: NSS User Private Key and Certificate Services
>         token: NSS Certificate DB
>
>   2. CryptoServer
>         library name: /usr/bin/libcs2_pkcs11.so
>          slots: 1 slot attached
>         status: loaded
>
>          slot: CryptoServer Device '/dev/cs2' - Slot No: 0
>         token: CBUAE TEST
> -----------------------------------------------------------
>
>
> There were some SELinux errors, but I fixed all of them; despite
> all calls now being successful, the installation servlet will
> still not see the HSM.
>
> Thanks.
>
> Arshad Noor
> StrongAuth, Inc.
>
> _______________________________________________
> Pki-users mailing list
> Pki-users at redhat.com
> https://www.redhat.com/mailman/listinfo/pki-users