Common Issues and How to Resolve Them
|
Error/Issue |
Resolution |
|---|---|
|
CKR_USER_PIN_NOT_INITIALIZED (0x102) |
C_SetPIN not called after user creation. Fix: call C_SetPIN to activate HMAC credentials. |
|
CKR_SESSION_EXISTS (0x1B8) on C_InitPIN |
Use same session for C_InitToken and C_InitPIN. C_SetPIN is mandatory between SO creation and C_InitPIN. |
|
CKR_DEVICE_ERROR (0x30) |
ADMIN key path incorrect or HSM not started. Verify with csadm GetState. |
|
CKR_USER_ANOTHER_ALREADY_LOGGED_IN (0x104) |
Remove AD= from config if using explicit C_Login. Or restart HSM to clear stale sessions. |
|
PinIncorrect on ZetaCA startup |
HSM_PIN must match the activated (C_SetPIN) User PIN, not the initial C_InitPIN value. |
|
ECDSA verification fails |
Convert Utimaco raw r||s signature to DER format before verification. |
Troubleshooting common issues