Check the Cryptographic Card

To identify a failed cryptographic card (also known as hardware security module), examine the rear of the KMA server and check the LEDs on the card.

Checking an SCA 6000 Card

A functional SCA 6000 card on a KMS 2.1, KMS 2.2, or OKM 2.3 and later KMA that has been initialized through the QuickStart program displays a flashing green Status LED (identified with an S) and solid green FIPS (F) and Initialized (I) LEDs. If the Status LED is not flashing green and the FIPS and Initialized LEDs are not solid green, then the KMA has a faulty SCA 6000 card, which must be replaced if FIPS mode is required. See the SCA 6000 User Guide for a description of the LEDs on an SCA 6000 card.

Checking an nShield Solo+

An existing SPARC KMA in a cluster may contain a failed nShield Solo module. To identify a failed module, examine the rear of the KMA server and check the Status LED on the module. A functional nShield Solo module on an OKM 3.3 or later KMA that has been initialized through the QuickStart program displays a solid-blue Status LED that blinks occasionally. If the Status LED displays a different pattern, contact Oracle Support.