I’m getting an error when attempting to format a new blank card (sc650).
Fresh, new install of CA, KRA, TKS, TPS on single instance.
Insert card into reader (3121) and ESC (1.1.0-13 on Windows 10) prompts for phone Home URL.
Enter TPS phone Home URL then press Format button and get error (in localhost.log).
 
I have the same issue on RHCS 9.1 (latest patches) as well as Dogtag 10.3.x.  Not sure where the issue lies or how to fix.
 
SEVERE: Servlet.service() for servlet [tps] in context with path [/tps] threw exception
java.io.IOException: Invalid chunk header
        at org.apache.coyote.http11.filters.ChunkedInputFilter.throwIOException(ChunkedInputFilter.java:615)
        at org.apache.coyote.http11.filters.ChunkedInputFilter.doRead(ChunkedInputFilter.java:192)
        at org.apache.coyote.http11.AbstractInputBuffer.doRead(AbstractInputBuffer.java:287)
        at org.apache.coyote.Request.doRead(Request.java:438)
        at org.apache.catalina.connector.InputBuffer.realReadBytes(InputBuffer.java:290)
        at org.apache.tomcat.util.buf.ByteChunk.substract(ByteChunk.java:390)
        at org.apache.catalina.connector.InputBuffer.readByte(InputBuffer.java:304)
        at org.apache.catalina.connector.CoyoteInputStream$1.run(CoyoteInputStream.java:91)
        at org.apache.catalina.connector.CoyoteInputStream$1.run(CoyoteInputStream.java:87)
        at java.security.AccessController.doPrivileged(Native Method)
        at org.apache.catalina.connector.CoyoteInputStream.read(CoyoteInputStream.java:85)
        at org.dogtagpki.tps.TPSConnection.read(TPSConnection.java:55)
        at org.dogtagpki.server.tps.TPSSession.read(TPSSession.java:72)
        at org.dogtagpki.server.tps.processor.TPSProcessor.handleAPDURequest(TPSProcessor.java:311)
        at org.dogtagpki.server.tps.processor.TPSProcessor.selectApplet(TPSProcessor.java:279)
        at org.dogtagpki.server.tps.processor.TPSProcessor.selectCardManager(TPSProcessor.java:2968)
        at org.dogtagpki.server.tps.processor.TPSProcessor.getAppletInfo(TPSProcessor.java:2900)
        at org.dogtagpki.server.tps.processor.TPSProcessor.format(TPSProcessor.java:1831)
        at org.dogtagpki.server.tps.processor.TPSProcessor.process(TPSProcessor.java:2852)
        at org.dogtagpki.server.tps.TPSSession.process(TPSSession.java:119)
        at org.dogtagpki.server.tps.TPSServlet.service(TPSServlet.java:60)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:731)
        at sun.reflect.GeneratedMethodAccessor48.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:498)
        at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:288)
        at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:285)
        at java.security.AccessController.doPrivileged(Native Method)
        at javax.security.auth.Subject.doAsPrivileged(Subject.java:549)
 
-----------------------------------------------------------
Dennis Gnatowski 
dgnatowski@yahoo.com