Re: [SignServer-develop] Error when work with HSM

[Markus K. <ma...@pr...>]

On 10/10/2015 02:57 PM, Bùi Sĩ Tuấn wrote:
> Hi All,
> I'm testing signserver CE 3.7.0 with Utimaco HSM Simulator. I created a
> CryptoToken Worker and it active.
> Then, I create a XML Signer with this CryptoToken worker, upload cert
> and certchain.
> (cert and certchain created from .p12 file which imported in HSM)
> but I got message error:
>  - No signer certificate available
> And when rung singing test, it got error:
> org.cesecore.keys.token.CryptoTokenOfflineException: No key with alias ''.
> Anyone can help me. Thanks
> I'm a VietNamese. And my English not good :D

Hi Bùi,

Your XML Signer needs to have a property DEFAULTKEY with the name of the
key in the HSM to use. If you don't have such a property that could be
the issue.

An other issue could be if the key is not visible to SignServer/Java. In
the SignServer Admin GUI you can select the CryptoToken Worker and click
the CryptoToken tab to see all the keys available in the HSM. You should
then see the name (key alias/label) of your key.


Best regards,
Markus
PrimeKey Solutions

PrimeKey Solutions offers a commercial EJBCA & SignServer support
subscription and training. Please see www.primekey.se or contact
in...@pr... for more information.
https://www.primekey.se/Services/Support/
https://www.primekey.se/Services/Training/


>  
>  
> *Bùi Sĩ Tuấn*
>  
> *    CA Tech - Ban HTCA - Bkav Security*
> *Office:  Bkav Building - Yen Hoa New Town, Cau Giay Dist, Hanoi  *
> *Mobile: 0126.620.7292*
> 
> /*____________________________________________*/
> 
> <http://www.bkav.com.vn/>
> 
> /*Do your best, the rest will come !  */
> 
> /*Hay làm việc hết mình, những điều tốt đẹp sẽ đến với bạn ! */
> 
>  
> 
> /*Disclaimer:This e-mail and any files transmitted with it are
> confidential and may contain privileged information. It is intended
> solely for the use of the individual to whom it is addressed and others
> authorized to receive it. If you are not the intended recipient you are
> notified that disclosing, copying, distributing or taking any action in
> reliance on the contents of this information is strictly prohibited. If
> you have received this message in error, please notify the sender
> immediately by reply e-mail and delete completely this e-mail from your
> system, without reproducing, distributing or retaining copies.*/
> 
>  
> 
> 
> ------------------------------------------------------------------------------
> 
> 
> 
> _______________________________________________
> SignServer-develop mailing list
> Sig...@li...
> https://lists.sourceforge.net/lists/listinfo/signserver-develop
> 



-- 
Kind regards,
Markus Kilås
PKI Specialist

PrimeKey Solutions AB

Lundagatan 16
SE-171 63 Solna
Sweden

Phone: +46 70 424 94 85
Email: mar...@pr...

https://www.primekey.se