000025924 - Problems with Keon Certificate Authority 6.x after nCipher HSM firmware upgrade

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000025924
Applies ToKeon Certificate Authority 6.x
Sun Solaris 2.8
nCipher hardware module
IssueProblems with Keon Certificate Authority 6.x after nCipher HSM firmware upgrade
KCA error:

kca.rsasecurity.com-/opt/RSA_KeonCA# ./START

======> Starting Secure Directory Server

(ERROR) Unable to initialize RSA Keon Key Recovery Module (RSA KKRM) services.

[XrcSYSUNABLE: insufficient system resources]

Error: Startup of Secure Directory Server failed!

ca.rsasecurity.com-/opt/RSA_KeonCA#
Ran nCipher command nfkmcheck and got the following information:

nfkmcheck: warning: Module #1 not Usable

nfkmcheck: information: Module #1 Slot #0 Empty

nfkmcheck: fatal error: World not Usable

nfkmcheck: warned about 1 problems (besides the fatal error)

nfkmcheck: fatal error occurred - not all checks carried out!
CausenCipher Security World was not loaded after firmware upgrade
ResolutionTo correct this issue, follow the nCipher documentation on how to load your existing Security World onto the HSM.
WorkaroundFirmware upgrade on nCipher HSM
Legacy Article IDa20616

Attachments

    Outcomes