OKM - HSM status shows "HW error" and audit event log shows "Cryptographic Service Provider Error"

Asset ID:	1-72-1917142.1
Update Date:	2018-04-26
Keywords:

Solution Type Problem Resolution Sure

Solution 1917142.1 : OKM - HSM status shows "HW error" and audit event log shows "Cryptographic Service Provider Error"

Applies to:

Oracle Key Manager - Version 2.0.0 to 3.1 [Release 2.0 to 3.0]
Information in this document applies to any platform.

Symptoms

HSM Status in KMA List shows "HW Error"

sca6000info.txt shows these errors:

Trying to log into the SCA key slot...
PKCS11 Error: [00000005] (General error)
PKCS11 Error: [00000190] (Cryptoki is not initialized)
PKCS11 Error: [00000190] (Cryptoki is not initialized)
PKCS11 Error: [00000190] (Cryptoki is not initialized)

The audit event log shows errors like this:

System Messages Medium Term Retention Core Security Operation Cryptographic Service Provider Error Error 000043000024
2014-08-05 17:40:43.357703+00 Function Name = CreateKey:C_GenerateKey, Error Code = 5, Reason = General error First reboot the KMA.
If the problem persists, then power cycle the KMA.

Changes

No known changes

Cause

Thermal heat issues could cause HSM "HW errors" especially when older model SCA6000 cards are installed.

Solution

1. Attempt to switch the HSM Status to "Software" by locking and then unlocking the KMA.
2. If the HSM Status continues to show "HW error", try rebooting the KMA from the OKM Console.
3. If the problem persists, power cycle the KMA from the ELOM or from the power switch.
4. If the HSM status continues to show "HW Error", a field engineer will have to be sent onsite to replace the SCA6000 card.

Attachments

This solution has no attachment