OpenSSO Policy Agent: 3.0-05 : NSPR Failure While Sending to https://openssohost:port/opensso/namingservice, error = SEC_ERROR_PKCS11_DEVICE_ERROR

(Doc ID 2018997.1)

Last updated on SEPTEMBER 01, 2017

Applies to:

Oracle OpenSSO - Version 8.0.2 and later
Information in this document applies to any platform.

Symptoms

On : OpenSSO Policy Agent 3.0-05

When accessing a resource protected by OpenSSO Policy Agent 3.0-05 for OHS server, the following error occurs.


STEPS
-----------------------
The issue can be reproduced at will with the following steps:
1. Install OpenSSO Policy Agent 3.0-05 for OHS sever
2. Configure OpenSSO server to use SSL
3. import the root CA of the OpenSSO server certificate into OpenSSO Policy Agent's cert db.
4. Access the resource protected by the Policy Agent.
5. You see the message as "Access denied" in the browser and the policy agent logs show NSPR related errors.



Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms