If the Encryption Key Manager fails to start, check for a firewall.
Either a software firewall or a hardware firewall may be blocking the Encryption
Key Manager from accessing the port.
EKM server not started. EKM.properties config could not be
loaded or found.
1. This error occurs when starting the KMSAdminCmd or EKMLaunch without
specifying the complete path of KeyManagerConfig.properties when the
properties file is not located in the default path.
Default path on Windows is C:/Program Files/IBM/KeyManagerServer/
Default path on Linux platforms is /opt/ibm/KeyManagerServer/
2. Re-enter the command to start the KMSAdminCmd and include the complete
path of the KeyManagerConfig.properties file. See Appendix B, “Encryption
Key Manager Configuration Properties Files” for more information.
EKM server is not started. File name for XML metadata file needs
to be specified in the configuration file.
The Audit.metadata.file.name entry is missing from the configuration file.
To correct this problem, add the Audit.metadata.file.name property to the
KeyManagerConfig.properties configuration file.
Failed to start EKM.Mykeys. The system cannot find the
specified file.
1. This error message occurs when the keystore entries in
KeyManagerConfig.properties do not point to an existing file.
2. To correct this problem, ensure the following entries in the
KeyManagerConfig.properties file point to existing, valid keystore files:
Admin.ssl.keystore.name
TransportListener.ssl.truststore.name
TransportListener.ssl.keystore.name
Admin.ssl.truststore.name
See Appendix B, “Encryption Key Manager Configuration Properties Files” for
more information.
Failed to start EKM. File does not exist = safkeyring://xxx/yyy
The error can be caused by specifying the wrong provider in the IJO variable in
the Encryption Key Manager environment shell script.
For JCECCARACFKS keystores use:
-Djava.protocol.handler.pkgs=com.ibm.crypto.hdwrCCA.provider
and for JCERACFKS keystores use:
-Djava.protocol.handler.pkgs=com.ibm.crypto.provider
Chapter 6. Problem Determination 6-3
To Next Page
Loading...
Need help?
General