Menu

SHAREDLIBRARYNAME Utimaco is not referring to a defined value

Help
2018-12-03
2018-12-19
  • Minh Nguyen

    Minh Nguyen - 2018-12-03

    I'm using Utimaco HSM, PKCS11 and signserver. I has completed install signserver.
    Now, i need connect signserver to PKCS11 on HSM.
    I has changed signserver-deploy.configuaration:
    cryptotoken.p11.lib.31.name=Utimaco
    cryptotoken.p11.lib.31.file=C:\Utimaco\CryptoServer\Software\PKCS11_R2\lib\cs_pkcs11_R2.dll

    When I add PKCS11 worker with config:
    WORKERGENID1.SHAREDLIBRARYNAME=Utimaco

    I got
    Errors:
    - Failed to initialize crypto token: SHAREDLIBRARYNAME Utimaco is not referring to a defined value

    Could you please help me
    Thank you so much!

     
  • Markus Kilås

    Markus Kilås - 2018-12-19

    Hi Minh,

    If you enabled debug logging for SignServer in your application server, you can see from the output when SignServer starts which libraries that could not be found. It could look like this:

    11:28:58,100 DEBUG [org.signserver.common.PKCS11Settings] (ServerService Thread Pool -- 57) Adding: /opt/ETcpsdk/lib/linux-x86_64/libcryptoki.so for P11 name: SafeNet ProtectSe
    rver Gold, with index: 11
    11:28:58,100 DEBUG [org.signserver.common.PKCS11Settings] (ServerService Thread Pool -- 57) Library file not found: /usr/lunasa/lib/libCryptoki2_64.so for P11 name: SafeNet Lun
    a SA, with index: 20
    11:28:58,100 DEBUG [org.signserver.common.PKCS11Settings] (ServerService Thread Pool -- 57) Library file not found: /usr/lunapci/lib/libCryptoki2_64.so for P11 name: SafeNet Lu
    na PCI, with index: 21
    11:28:58,100 DEBUG [org.signserver.common.PKCS11Settings] (ServerService Thread Pool -- 57) Library file not found: /Program Files/LunaPCI/cryptoki.dll for P11 name: SafeNet Luna PCI, with index: 22
    11:28:58,100 DEBUG [org.signserver.common.PKCS11Settings] (ServerService Thread Pool -- 57) Library file not found: 
    

    If your "Utimaco" listing is included there then it could not be found.

    For Windows you might need to anyway use forward slashes as seen in the LunaPCI example.

    Cheers,
    Markus
    PrimeKey Solutions

    Save time and money with an Enterprise support subscription. Please see www.primekey.com for more information.
    https://www.primekey.com/products/software/

     

Log in to post a comment.