Brian Cole

Thanks, Tomas. My DNS does not resolve the name confluence.primekey.com, but I suspect that is the same content as the URL below, so I am reviewing it now. If this is not the correct URL please correct me. https://download.primekey.se/docs/EJBCA-Enterprise/latest/Generic_PKCS_11_Provider.html ...brian

Tomas, Thank-you for your reply. I have now cleaned up the crypto tokens using the tip you provided. (Incidentally, I did not find that command mentioned in the Community Edition documentation, even for the current version, but I did find it in the Enterprise Edition documentation on the page titled "Managing CAs"). I am planning to update the version of EJBCA too. However I think I know what the problem is, but cannot find out how to fix it. When I view the crypto token in the EJBCA UI, it lists...

I am using EJBCA CE 6.10 with Wildfly. I am using an HSM crypto token (PKCS11), containing private and public keys for several subCAs. The EJBCA UI shows each subCA as a separate crypto token, activated, with the green checkmark. Each certificate appears on the "Certification Authorities" page as well. So everything looks good. Everything looks as I would expect on the UI page titled "CA Structure and CRLs". When I click the button to "Create the CRL" it throws an error. Error: CA token is off-line,...