martin Edward corr

Hi Im trying to get ejbca to work with Luna HSM but failing. luna client is installed and I can view the slots via lunacm. running ejbca standard docker image. running docker as root. When I start ejbca with debug logging I see this: ejbca-ce | 2025-02-04 15:16:27,563+0000 DEBUG [org.ejbca.config.WebConfiguration] (default task-1) PKCS#11 library /usr/safenet/lunaclient/lib/libCryptoki2_64.so was not detected in file system and will not be available. but the file is there: sh-4.2$ pwd /usr/safenet/lunaclient/lib...

An old thread but I had the same issue and resolved it as follows. The problem was that I had installed ejbca several times and got the ManagementCA root certificates mixed up. I discovered the issue by comparing the root ca serial number to the one encoded in the p12 chain and could see they were different. I cleared all installs out, cleared all certs keys pem p12 crt files then did a fresh install of ejbca then signserver, followed the guides and that sorted it. hope this helps.