Re: [SignServer-develop] PKCS11 not initialized

[Markus K. <ma...@pr...>]

On 09/19/2016 06:19 PM, Arnaud Defos wrote:
> Hi everyone,
> 
> If the HSM is unavailable (for example, if you unplug and plug the
> network), the HSM becomes offline in signserver.

What HSM/PKCS#11 shared library are you using?

I believe this could be a bit different depending on which HSM is used
if it would survive networking issues or not.

> 
> If I try to generate a key, I have
> a org.signserver.common.CryptoTokenOfflineException.
> 
> I try to launch :
> $> bin/signserver.sh activatecryptotoken 1
> and
> $> bin/signserver.sh reload 1
> 
> But it doesn't work... HSM is still offline in signserver even if I can
> ping it.

The last reload here could be putting the (crypto) worker offline again
as its configuration is again loaded from the database. You should do
the activate command last.

> 
> If I restart signserver, it works. What can I do without restarting
> signserver ?
> 
> Thanks for your answer !
> 
> 
> Arnaud
> 

Cheers,
Markus
PrimeKey Solutions AB

PrimeKey Solutions offers a commercial EJBCA & SignServer support
subscription and training. Please see www.primekey.se or contact
in...@pr... for more information.
https://www.primekey.se/Services/Support/
https://www.primekey.se/Services/Training/