Hi ,
I am configuring external HSM called SoftHSM to certificate system. Here is my
configuration DogTag 9.0Fedora 15
After pkicreate, i created softhsm entry into the db. Here are the details
[root@fed15vmnew alias]# modutil -dbdir . -nocertdb -listListing of PKCS #11
Modules----------------------------------------------------------- 1. NSS Internal PKCS
#11 Module slots: 2 slots attached status: loaded
slot: NSS Internal Cryptographic Services token: NSS Generic Crypto
Services
slot: NSS User Private Key and Certificate Services token: NSS Certificate
DB
2. SOFTHSM PKCS #11 Module library name: /usr/lib/softhsm/libsofthsm.so
slots: 1 slot attached status: loaded
slot: SoftHSM token:
softhsm-----------------------------------------------------------
[root@fed15vmnew alias]# modutil -dbdir . -nocertdb -list "SOFTHSM PKCS #11
Module"-----------------------------------------------------------Name: SOFTHSM PKCS
#11 ModuleLibrary file: /usr/lib/softhsm/libsofthsm.soManufacturer: SoftHSMDescription:
Implementation of PKCS11PKCS #11 Version 2.20Library Version: 1.3Cipher Enable Flags:
NoneDefault Mechanism Flags: RSA
Slot: SoftHSM Slot Mechanism Flags: RSA Manufacturer: SoftHSM Type: Software Version
Number: 1.3 Firmware Version: 1.3 Status: Enabled Token Name: softhsm Token
Manufacturer: SoftHSM Token Model: SoftHSM Token Serial Number: 1 Token Version: 1.3
Token Firmware Version: 1.3 Access: NOT Write Protected Login Type: Login required User
Pin: Initialized
/var/lib/pki-ca/conf/password.confadded this linehardware-softhsm=12345&Modified
/var/lib/pki-ca/conf/serverCertNick.confsofthsm:Server-Cert cert-pki-ca
After this, configuration link doesn't open
https://fed15vmnew.newnet.local:9445/ca/admin/console/config/login?pin=mg...
password.conf & serverCertNick.conf are unmodified then, configuration link opens and
SoftHSM module is listed as Found, but doesn't allow to set it as default for the CA
system.
Please help in setting up external HSM to be configured with certificate system.
Thanks,
Br,Kishore8105176926