Re: [Pki-users] Utimaco HSM "Not Found" problem

Hi, I've updated DogTag to the current modules available (FC11 x86_64): dogtag-pki-ca-ui-1.3.1-1.fc11.noarch dogtag-pki-common-ui-1.3.1-1.fc11.noarch dogtag-pki-console-ui-1.3.1-1.fc11.noarch pki-ca-1.3.3-1.fc11.noarch pki-common-1.3.3-1.fc11.noarch pki-console-1.3.1-1.fc11.noarch pki-java-tools-1.3.1-1.fc11.noarch pki-native-tools-1.3.0-5.fc11.x86_64 pki-selinux-1.3.4-1.fc11.noarch pki-setup-1.3.4-1.fc11.noarch pki-silent-1.3.2-1.fc11.noarch pki-symkey-1.3.2-3.fc11.x86_64 pki-util-1.3.0-5.fc11.noarch I've installed and successfully tested a Utimaco CryptoServer HSM on the operating system, including adding it to secmod.db (in the /var/lib/subca01/alias directory), generating a RSA key-pair, issuing a self-signed and listing the objects using certutil (the attached hsm-config.txt file shows sample output). I've modified CS.cfg in /etc/subca01 to include this token (as the attached modules.txt file shows). I've even restarted pki-cad services after adding the HSM to secmod.db, to ensure that the DogTag code reads secmod.db with the CryptoServer configured in it. However, when it comes time to install a Subordinate CA, the KeyStore page claims that the Utimaco HSM is not found (see keystore-page.png) even though it is correctly listed on the page under "Supported Security Modules". What am I missing? How do I get DogTag to use the HSM to generate the key-pair? Thanks. Arshad Noor StrongAuth, Inc. _______________________________________________ Pki-users mailing list Pki-users(a)redhat.com https://www.redhat.com/mailman/listinfo/pki-users