Oracle Key Manager - Hardware Security Module (HSM) Status Shows "HW error"
(Doc ID 1677133.1)
Last updated on JANUARY 15, 2024
Applies to:
Oracle Key Manager - Version 2.0.0 to 3.3 [Release 2.0 to 3.0]Information in this document applies to any platform.
Symptoms
"HW error" showing in the HSM status of the KMA List
There are no related error messages in the KMA Audit log.
The system messages file show warnings and errors related to the crypto card:
---
Apr 18 19:15:33 kmaserver mca: [ID 925280 kern.warning] WARNING: STALL: count [12100] / limit [12100]
Apr 18 19:15:34 kmaserver genunix: [ID 356749 kern.warning] WARNING: mca0: unable to drain device
Apr 18 19:15:34 kmaserver mca: [ID 154702 kern.warning] WARNING: stale job(s) found in ring ffffffff8b3b4908
..
Apr 18 19:15:34 kmaserver genunix: [ID 246487 kern.warning] WARNING: mca0: crypto job timeout
Apr 18 19:15:35 kmaserver genunix: [ID 272041 kern.notice] NOTICE: mca0: Resetting board...
Apr 18 19:15:40 kmaserver OKM: [ID 718763 local7.error] Core Security Operation Cryptographic Service Provider Error Function Name = Decrypt:C_Decrypt(2), Error Code = 48, Reason = Device error First reboot the KMA. If the problem persists, then power cycle the KMA.
Apr 18 19:15:40 kmaserver OKM: [ID 912309 local7.error] Set User Passphrase Internal Core Security error super 111.222.333.444 User ID = user1, Quorum Key Split User Name = user2, Quorum Key Split User Name = user3 Check other recent audit events for more information.
Apr 18 19:15:59 kmaserver genunix: [ID 579641 kern.notice] NOTICE: mca0: Device standing by.
sca6000info log show the mca0 online and initialized but busy:
---
/usr/sbin/scadiag -l mca0
Device mca0
State : Online
Status: Initialized (FIPS)
/usr/sbin/scadiag -s mca0
Device mca0 busy.
Changes
No known change
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
| Symptoms |
| Changes |
| Cause |
| Solution |
| References |