000020117 - XParseCANew:[XrcSYSUNABLE] insufficient system resources

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 22, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000020117
Applies TonCipher Hardware Security Module
Keon Certificate Authority 6.5
IssueXParseCANew:[XrcSYSUNABLE] insufficient system resources
CauseThe error is caused when a CA is being created to use an hardware security module (HSM) to store its keys, but the selected cardset in the HSM are inappropriate for the chosen task.

When using an nCipher system with Keon Certificate Authority, is important to configure both the card sets you intend to use so they are appropriate for use with the CA and the values used when installing Keon Certificate Authority.
ResolutionWhen creating an OCS cardset for use with the "System CA", ensure that your OCS set is a 1 of N, not M of N. Subsequent CAs you configure for producing end-entity certificates are allowed M of N cards in the OCS set.

During the installation of Keon Certificate Authority, you are prompted to select where to store the SSL Server keys; at this point, select only "software" and only the "System Authority Keys" on the nCipher device.
WorkaroundA CA is being created by the Keon Certificate Authority, either during installation or subsequent management
Legacy Article IDa14575

Attachments

    Outcomes