Home
Known problems with hardware cryptographic support
This topic contains troubleshooting information for known problems with the cryptographic hardware.
You must install the bos.pkcs11 package to get the PKCS11 module, and to initialize the device on AIX.
An added update to the bos.pkcs11 package fixed a forking problem. Obtain the most recent copy of the bos.pkcs11 package from the IBM PSeries Support Site, to ensure you have this fix. If we are having problems using the IBM eBusiness Cryptographic Accelerator Device with IBM HTTP Server, do the following:
- Reboot the machine.
- Kill pkcsslotd and the shared memory it created. To determine what shared memory was created, typeipcs -a and for a size of 270760. This was the memory created by pkcsslotd.
- Export EXPSHM=ON.
- Start the pkcs11 process: /etc/rc.pkcsw11
- Restart IBM HTTP Server: ./apachectl start