Skip to main content

Troubleshooting HSM Connectivity

tip

Find more helpful information in Primus PKCS#11 Testing and Troubleshooting.

Test HSM Connectivity

Now that you have established the connection with your CloudHSM or on-premises Primus HSM partition, you can utilize the ppin tool to verify your connectivity with the HSM by executing the following command:

ppin --test
Load config file: 'C:\Program Files\Securosys\Primus P11\primus.cfg'

hsm0: Connect to a-api.cloudshsm.com port 2310, firmware: RX-2.20.0-T
slot0 (id=0), user=DEMO_PARTITION: OK
slot1 (id=1), user=DEMO_PARTITION2: CKR_TOKEN_NOT_PRESENT

Listing Partitions

Multiple different partitions are assigned to PKCS#11 slot ids and can be listed by the ppin tool:

ppin -l

********************
Primus Permanent PIN
********************
[01] slot-id 0: user 'DEMO_PARTITION' permanent secret: Configured
[02] slot-id 1: user 'DEMO_PARTITION2' permanent secret: Configured
[03] slot-id 5: user 'CLOUDSHSMPAR' permanent secret: MISSING
[01] service/proxy user 'PROXY_USER' permanent secret: MISSING