INZI481E AN ERROR OCCURRED WHEN SEARCHING THE key_label LABEL INTO THE PKCS#11 KEYSTORE (REASON CODE n:0xxxx)

Explanation

The utility failed searching the label mentioned into the PKCS#11 keystore. More details about the exact problem encountered during this research can be determined from the reason code and the error code at the end of the current message. If the reason code is one corresponding to a failing call of a PKCS#11 API, the three last hexadecimal digits of the error code correspond to the error code encountered at the PKCS#11 tool level. Here is the meaning of the various reason codes which can be encountered:
  • reason code 1: a token corresponding to the slot configured could not be found
  • reason code 2: a login step relying on an explicit password was needed, but there was no password passed for it
  • reason code 3: a key corresponding to the label searched could not be found
  • reason code 4: a call of the C_GetTokenInfo API has failed
  • reason code 5: a call of the C_GetSlotInfo API has failed
  • reason code 6: a call of the C_OpenSession API has failed
  • reason code 7: a call of the C_Login API has failed
  • reason code 8: a call of one of the C_FindObjects family APIs has failed

User response

Verify that the utility has been configured appropriately for the PKCS#11 installation in place on the machine concerned. When the problem encountered corresponds to a failing call of a PKCS#11 API, the value of the PKCS#11 error code might help fixing the problem. For the other reason codes:
  • reason code 1: verify the settings of the slot to be considered into the Db2® instance configuration file for the PKCS#11 keystore
  • reason code 2: store into the utility credentials file the password for the PKCS#11 keystore considered
  • reason code 3: verify that the key searched is indeed stored into the slot configured for the PKCS#11 keystore