000013852 - XparseCAGenerateKeypair: [XrcSYSUNABLE] insufficient system resources

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 22, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000013852
Applies ToRSA Certificate Manager 6.7 build 422
RSA Certificate Manager 6.8
IssueXparseCAGenerateKeypair: [XrcSYSUNABLE] insufficient system resources
Unable to install RCM 6.7 against with hardware based system CA keys 2048 bit
Trying to manually create a 2048 bit key in KeySafe results in the error :  "Unable to Generate Key: generateappkey.c:rqcard_ui should never happen"
ResolutionThe root cause of that issue has not been found. However, the following sequence of actions worked around the issue:

1. Try installing RCM with a key size of 2048 bit : This will result in the error "XparseCAGenerateKeypair: [XrcSYSUNABLE] insufficient system resources".
2. Try creating a 2048 bit key in KeySafe : This will result in the error : "Unable to Generate Key: generateappkey.c:rqcard_ui should never happen".
3. Try creating a 1024 bit key in KeySafe : This will succeed.
4. Try creating a 2048 bit key in KeySafe : This will succeed.
5. Try installing RCM with a key size of 2048 bit : This will succeed.
NotesThe error "XparseCAGenerateKeypair: [XrcSYSUNABLE] insufficient system resources" can also occur when creating a new CA with 2048-bit key based on nCipher.  A new CA is only created after multiple attempts fail (showing this error) to create the CA.  The root cause of this similar issue is not known.  However, note that in case there are two (or more) nCipher netHSM's configured for failover, as many (two or more) smart cards (which must have the same PIN) from the same OCS must be inserted in all netHSM for the operation to succeed.
Legacy Article IDa43380

Attachments

    Outcomes