Troubleshooting

The private key was not found at: pkcs11:token=FedoraCert;object= CertKey1

PKCS11_get_private_key returned NULL Could not read private key from org.openssl.engine:pkcs11:pkcs11:token=FedoraCert;object= CertKey1

Check that the Key exists on the slot and provide the correct key name.

open_plugin| W: HSM::ConnectionException(Error::NO_DEVICE_AVAILABLE = 0xbe000007) thrown in select_device Error::NO_DEVICE_AVAILABLE

Make the changes in the key storage section in the cs_pkcs11.cfg file and check that the HSM device is running and reachable from the host.

20.06.2025 07:56:39: C_OpenSession returned Error 0x00000005 (CKR_GENERAL_ERROR)

Check the PKCS#11 log (/tmp/cs_pkcs11_R3.log by default) for errors. If it doesn’t exist or doesn’t get updated, check if the CS_PKCS11_R3_CFG environment variable is set with the location of the PKCS#11 configuration file.

Error occurred on device 4002@IP:

Error B0680071 CryptoServer module CXI

VDM mech not handled

The OSCCA module is still installed, and it’s interfering with Quantum Protect. Please uninstall the OSCCA module

LoginUser= failed: p11_login: C_Login [type=1] returned Error 0x00000102 (CKR_USER_PIN_NOT_INITIALIZED)

PKCS#11 Slot is not initialized. Refer to Initialize a Slot.

The CryptoServer PKCS#11 Library R3 is not initialized.

Error CKR_CRYPTOKI_NOT_INITIALIZED occurred

PKCS#11 Slot is not initialized. Refer to Initialize a Slot.

20.06.2025 07:51:25.108 | [00000332:00000332] C_OpenSession| E: HSM::ConnectionException(Error::NO_CONNECTION = 0xbe000015)
thrown in open_session
Error::NO_CONNECTION

The provider couldn’t connect to the HSM. Please check the PKCS#11 configuration file and ensure the Device section is correctly configured. See Configuration of the PKCS#11 Provider for details.

20.06.2025 07:10:30.866 | [00000059:00000059] C_GetSlotInfo | E: Error CKR_DEVICE_REMOVED occurred.

The device was disconnected during the cryptographic operation. This probably happens because of connection issues.