Skip navigation
RobMcDougall
RobMcDougall
Currently Being Moderated

"HSM Support Not Available" Error

Jan 25, 2010 1:17 PM

Hi,

 

I'm trying to configure an HSM credential under LiveCycle ES2.  I've done all the steps listed in the documentation (established a Network Trust Link, assigned the client to a partition, etc.).  I'm able to run the demo app provided by the HSM vendor and am able to talk to the HSM.  When I try and configure the credential from the LiveCycle adminui, the Test HSM Connectivity fails with the following error in the log:

 

2010-01-25 16:06:50,561 INFO  [com.adobe.truststore.crypto.CryptoUtil] encryptBytes: Building secret key for length: 16

2010-01-25 16:06:53,817 INFO  [com.adobe.truststore.crypto.CryptoUtil] encryptBytes: Building secret key for length: 16

2010-01-25 16:07:08,508 INFO  [com.adobe.truststore.crypto.CryptoUtil] encryptBytes: Building secret key for length: 16

2010-01-25 16:07:08,509 ERROR [com.adobe.livecycle.signatures.client.types.exceptions.SignaturesBas eRuntimeException] ALC-DSS-300-000 Generic SignaturesBaseException  HSM Support not available (in the operation : getCredential)

2010-01-25 16:07:08,594 INFO  [com.adobe.truststore.crypto.CryptoUtil] encryptBytes: Building secret key for length: 16

2010-01-25 16:07:17,329 INFO  [com.adobe.truststore.crypto.CryptoUtil] encryptBytes: Building secret key for length: 16

2010-01-25 16:07:17,332 ERROR [com.adobe.livecycle.signatures.client.types.exceptions.SignaturesBas eRuntimeException] ALC-DSS-300-000 Generic SignaturesBaseException  HSM Support not available (in the operation : getCredential)

2010-01-25 16:07:17,354 INFO  [com.adobe.truststore.crypto.CryptoUtil] encryptBytes: Building secret key for length: 16

2010-01-25 16:07:17,362 ERROR [com.adobe.livecycle.signatures.client.types.exceptions.SignaturesBas eRuntimeException] ALC-DSS-300-000 Generic SignaturesBaseException  HSM Support not available (in the operation : getSlotsWithTokens)

2010-01-25 16:07:17,363 ERROR [org.jboss.ejb.plugins.LogInterceptor] RuntimeException in method: public abstract java.lang.Object com.adobe.idp.dsc.transaction.impl.ejb.adapter.EjbTransactionBMTAdapt erLocal.doRequiresNew(com.adobe.idp.dsc.transaction.TransactionDefinit ion,com.adobe.idp.dsc.transaction.TransactionCallback) throws com.adobe.idp.dsc.DSCException:

ALC-DSS-300-000 Generic SignaturesBaseException  HSM Support not available (in the operation : getSlotsWithTokens)

 

com.adobe.livecycle.signatures.hsm.HSMProvider.getSlotsWithTokens(HSM Provider.java:202)

com.adobe.truststore.dsc.HSMCredentialHelper.listSlots(HSMCredentialH elper.java:101)

com.adobe.truststore.dsc.CredentialServiceImpl.listSlots(CredentialSe rviceImpl.java:482)

sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl. java:39)

sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces sorImpl.java:25)

java.lang.reflect.Method.invoke(Method.java:597)

com.adobe.idp.dsc.component.impl.DefaultPOJOInvokerImpl.invoke(Defaul tPOJOInvokerImpl.java:118)

com.adobe.idp.dsc.interceptor.impl.InvocationInterceptor.intercept(In vocationInterceptor.java:140)

com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.procee d(RequestInterceptorChainImpl.java:60)

com.adobe.idp.dsc.interceptor.impl.DocumentPassivationInterceptor.int ercept(DocumentPassivationInterceptor.java:53)

com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.procee d(RequestInterceptorChainImpl.java:60)

com.adobe.idp.dsc.transaction.interceptor.TransactionInterceptor$1.do InTransaction(TransactionInterceptor.java:74)

com.adobe.idp.dsc.transaction.impl.ejb.adapter.EjbTransactionBMTAdapt erBean.doRequiresNew(EjbTransactionBMTAdapterBean.java:218)

sun.reflect.GeneratedMethodAccessor388.invoke(Unknown Source)

sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces sorImpl.java:25)

java.lang.reflect.Method.invoke(Method.java:597)

org.jboss.invocation.Invocation.performCall(Invocation.java:359)

org.jboss.ejb.StatelessSessionContainer$ContainerInterceptor.invoke(S tatelessSessionContainer.java:237)

org.jboss.resource.connectionmanager.CachedConnectionInterceptor.invo ke(CachedConnectionInterceptor.java:158)

org.jboss.ejb.plugins.CallValidationInterceptor.invoke(CallValidation Interceptor.java:63)

org.jboss.ejb.plugins.AbstractTxInterceptor.invokeNext(AbstractTxInte rceptor.java:121)

org.jboss.ejb.plugins.AbstractTxInterceptorBMT.invokeNext(AbstractTxI nterceptorBMT.java:173)

org.jboss.ejb.plugins.TxInterceptorBMT.invoke(TxInterceptorBMT.java:7 7)

org.jboss.ejb.plugins.StatelessSessionInstanceInterceptor.invoke(Stat elessSessionInstanceInterceptor.java:169)

org.jboss.ejb.plugins.SecurityInterceptor.invoke(SecurityInterceptor. java:168)

org.jboss.ejb.plugins.LogInterceptor.invoke(LogInterceptor.java:205)

org.jboss.ejb.plugins.ProxyFactoryFinderInterceptor.invoke(ProxyFacto ryFinderInterceptor.java:138)

org.jboss.ejb.SessionContainer.internalInvoke(SessionContainer.java:6 48)

org.jboss.ejb.Container.invoke(Container.java:960)

org.jboss.ejb.plugins.local.BaseLocalProxyFactory.invoke(BaseLocalPro xyFactory.java:430)

org.jboss.ejb.plugins.local.StatelessSessionProxy.invoke(StatelessSes sionProxy.java:103)

$Proxy177.doRequiresNew(Unknown Source)

com.adobe.idp.dsc.transaction.impl.ejb.EjbTransactionProvider.execute (EjbTransactionProvider.java:133)

com.adobe.idp.dsc.transaction.interceptor.TransactionInterceptor.inte rcept(TransactionInterceptor.java:72)

com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.procee d(RequestInterceptorChainImpl.java:60)

com.adobe.idp.dsc.interceptor.impl.InvocationStrategyInterceptor.inte rcept(InvocationStrategyInterceptor.java:55)

com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.procee d(RequestInterceptorChainImpl.java:60)

com.adobe.idp.dsc.interceptor.impl.InvalidStateInterceptor.intercept( InvalidStateInterceptor.java:37)

com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.procee d(RequestInterceptorChainImpl.java:60)

com.adobe.idp.dsc.interceptor.impl.AuthorizationInterceptor.intercept (AuthorizationInterceptor.java:188)

com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.procee d(RequestInterceptorChainImpl.java:60)

com.adobe.idp.dsc.interceptor.impl.JMXInterceptor.intercept(JMXInterc eptor.java:48)

com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.procee d(RequestInterceptorChainImpl.java:60)

com.adobe.idp.dsc.engine.impl.ServiceEngineImpl.invoke(ServiceEngineI mpl.java:121)

com.adobe.idp.dsc.routing.Router.routeRequest(Router.java:129)

com.adobe.idp.dsc.provider.impl.base.AbstractMessageReceiver.routeMes sage(AbstractMessageReceiver.java:93)

com.adobe.idp.dsc.provider.impl.vm.VMMessageDispatcher.doSend(VMMessa geDispatcher.java:225)

com.adobe.idp.dsc.provider.impl.base.AbstractMessageDispatcher.send(A bstractMessageDispatcher.java:66)

com.adobe.idp.dsc.clientsdk.ServiceClient.invoke(ServiceClient.java:2 08)

com.adobe.truststore.ui.impl.TrustStoreProxy.getSlots(TrustStoreProxy .java:903)

com.adobe.truststore.ui.struts.actions.UpdateHSMCommonAction.execute( UpdateHSMCommonAction.java:63)

org.apache.struts.action.RequestProcessor.processActionPerform(Reques tProcessor.java:431)

org.apache.struts.action.RequestProcessor.process(RequestProcessor.ja va:236)

org.apache.struts.action.ActionServlet.process(ActionServlet.java:119 6)

org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432)

javax.servlet.http.HttpServlet.service(HttpServlet.java:710)

javax.servlet.http.HttpServlet.service(HttpServlet.java:803)

org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl icationFilterChain.java:290)

org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF ilterChain.java:206)

com.adobe.framework.SetCharacterEncodingFilter.doFilter(SetCharacterE ncodingFilter.java:173)

org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl icationFilterChain.java:235)

org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF ilterChain.java:206)

com.adobe.truststore.ui.TSAuthFilter.doFilter(TSAuthFilter.java:63)

org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl icationFilterChain.java:235)

org.apache.catalina.core.ApplicationFilterChain.doFilter

 

Any idea on what the problem might be?  Has anyone seen this before?

 

We've configured HSMs on previous versions of LiveCycle before however this is our first attempt under ES2.

 

Regards,

Rob

805 Views   2 Replies   Latest reply: RobMcDougall, Jan 27, 2010 5:37 AM
 
Replies
  • kapss
    Currently Being Moderated
    1. kapss,
    Jan 27, 2010 2:10 AM   in reply to RobMcDougall
    Report

    Hi Rob,

     

    Is this a 64 bit Windows with a 64 bit Sun JRE? In case of this combination, HSM is not supported in LiveCycle ES2 out of the box. This is since the 64 bit Windows Sun JRE does not ship with the PKCS#11 JNI Bridge. The support is done via deploying a separate Web Service in a 32 bit Sun JRE on the same machine and accessing this Web Service inside the Livecycle Digital Signature's service using an SPI. The mechanism to do this is available in the Livecycle Digital Signatures Documentation.

     
    |
    Mark as:
  • RobMcDougall
    Currently Being Moderated
    2. RobMcDougall,
    Jan 27, 2010 5:37 AM   in reply to kapss
    Report

    Ouch!  That's exactly what the problem is.  I'm using a 64-bit OS and 64-bit JVM.

     

    Can you point me to where in the docs this is?  The docs for 9.0 are not organized by product so I'm having some trouble finding it.  I've checked the
    "Preparing to Install", the "Installing and Deploying on JBoss", the "Administration Help", and the "Release Notes".  None of these mention the issue.

     

    Thanks for the help.

     

    Regards,

    Rob

     
    |
    Mark as:
Actions

More Like This

  • Retrieving data ...

Bookmarked By (0)

Answers + Points = Status

  • 10 points awarded for Correct Answers
  • 5 points awarded for Helpful Answers
  • 10,000+ points
  • 1,001-10,000 points
  • 501-1,000 points
  • 5-500 points