|
Home > |
|---|
Here are just a few quick things to check if you are experiencing problems:
•Check the output of the syslog for any information on potential problems (syslog tail).
•If you see an apparent 'hang' condition, connect and check the PED - it may be waiting for a PED action.
•Check if you allowed the PED to time out, or if you started a command that needed PED action while the PED was not connected. You will need to re-issue the failed command after re-inserting the token, and pay attention to the PED.
•If RSA signing seems slow, check the Capabilities and Policies to ensure that Confirmation (policy #29) is switched off - if your security policy demands that signing operations must be verified on the HSM, then expect almost a 50% performance reduction
•If you perform a Restore from Backup operation and some or all of the objects are shown with an error message like "LUNA_RET_SM_ACCESS_DOES_NOT_VALIDATE", you might have interrupted the restore operation (even a partition showContents command could have this effect). Re-issue the Restore command, ensuring that no other commands are run against the partition while the operation is in progress - if other persons might be using their own ssh sessions to access the appliance, it might be best to disconnect the network cable[s] and perform your restore operation from the local (serial) console.
If you find that Windows fails to detect SafeNet PED, especially if you have disconnected and reconnected the PED's USB cable to your computer thePED may not be receiving adequate power. SafeNet PED is powered by PED port connection only when it is connected to a SafeNet HSM. When SafeNet PED is used for Remote PED, it is connected to a computer USB port, which does not have the same electrical characteristics as the PED port on a SafeNet HSM. The PED switches on, but might not receive sufficient power to operate.
•If you are connecting locally, always connect the PED to the SafeNet HSM.
•If you are connecting to a computer for use as a Remote PED server, always connect the PED power supply in addition to the USB connection.