Check the Cryptographic Card

To identify a failed cryptographic card (also known as hardware security module), examine the rear of the KMA server and check the LEDs on the card.

Checking an SCA 6000 Card

A functional SCA 6000 card on a KMS 2.1, KMS 2.2, or OKM 2.3 and later KMA that has been initialized through the QuickStart program displays a flashing green Status LED (identified with an S) and solid green FIPS (F) and Initialized (I) LEDs. If the Status LED is not flashing green and the FIPS and Initialized LEDs are not solid green, then the KMA has a faulty SCA 6000 card, which must be replaced if FIPS mode is required. See the SCA 6000 User Guide for a description of the LEDs on an SCA 6000 card.

Checking a Thales nShield Solo+

An existing SPARC KMA in a cluster may contain a failed Thales nShield Solo module. To identify a failed Thales module, examine the rear of the KMA server and check the Status LED on the Thales module. A functional Thales nShield Solo module on an OKM 3.3 or later KMA that has been initialized through the QuickStart program displays a solid-blue Status LED that blinks occasionally. If the Status LED displays a different pattern, contact Oracle Support.