|Applies To||nCipher Hardware Security Module|
Keon Certificate Authority 6.5
|Issue||XParseCANew:[XrcSYSUNABLE] insufficient system resources|
|Cause||The error is caused when a CA is being created to use an hardware security module (HSM) to store its keys, but the selected cardset in the HSM are inappropriate for the chosen task.|
When using an nCipher system with Keon Certificate Authority, is important to configure both the card sets you intend to use so they are appropriate for use with the CA and the values used when installing Keon Certificate Authority.
|Resolution||When creating an OCS cardset for use with the "System CA", ensure that your OCS set is a 1 of N, not M of N. Subsequent CAs you configure for producing end-entity certificates are allowed M of N cards in the OCS set.|
During the installation of Keon Certificate Authority, you are prompted to select where to store the SSL Server keys; at this point, select only "software" and only the "System Authority Keys" on the nCipher device.
|Workaround||A CA is being created by the Keon Certificate Authority, either during installation or subsequent management|
|Legacy Article ID||a14575|