Log Locations and Interpretation

The following logs can be reviewed to check for errors:

  • Utimaco CNG provider log: The default path is C:\ProgramData\Utimaco\CNG\log. The path is configured in the CNG Provider configuration file, by default in C:\ProgramData\Utimaco\CNG\cs_cng.cfg. More information about the configuration file can be obtained in CNG Provider configuration section.

    • This log contains errors related to the CNG provider. These include errors with the connection to the HSM, with the Keystore, or during the execution of cryptographic operations.

Error

Diagnosis

cng_prov_session_open | E: cs_open_connection [PORT@IP] returned: Error B902B03D
CryptoServer API Windows
tcp: can't get connection
connection attempt refused
cng_prov_open | E: unable to open any device

Error connecting to the cHSM. Please check that the cHSM port and IP are configured correctly in the configuration file and that the cHSM is running.

cng_key_create | E: cng_prov_exec returned: Error B0680001
CryptoServer module CXI
permission denied
FinalizeKey | E: cng_key_create returned: Error B0680001
CryptoServer module CXI
permission denied

The User and password are incorrect, or the CXI Group is incorrectly configured in the CNG Configuration file.

List of Common Errors on the CNG Provider Log