On 01/21/2012 10:02 AM, Dan Whitmire wrote: Yes, but this is a somehow generic message, this does not tell much, could be key size mismatch, or hash, hw token, client or server libraries, or other. You may want to post here sanitized output of the matching catalina.out and debug logs when this is happening, if possible. Which step of the TKS configuration are you in when this is happening? Thanks, M.