Troubleshooting

To troubleshoot and resolve the domain/name not resolved error, refer the steps below.

  1. Log in to the mid-server-platform-core container and open the Fortanix log file using the command:
    vi /tmp/fortanix.log
  2. Check the log file for the error thrown by Fortanix. If the error is domain/name not resolved, proceed with the next steps.
  3. Export the proxy URL using the command:
    export FORTANIX_PROXY=<proxy_url>
  4. To manage the keys, run the command:
    pkcs11-tool --module <cc_installation>/deps/external_libs/hsm/fortanix/fortanix_pkcs11.so --pin "PIN" -k --label test-key-avx --key-type rsa:2048 --login --login-type user
  5. Navigate to the properties folder using the command
    cd {CC_INSTALLATION_PATH}/deps/properties
  6. Open the hsm file to edit:
    vi hsm
  7. Set the Fortanix proxy and config path in the hsm file by adding the lines below.
    export FORTANIX_PROXY=<proxy_url>
    export FORTANIX_PKCS11_CONFIG_PATH=/appviewx/dependencies/external_libs/hsm/fortanix/pkcs11.conf
    echo "FORTANIX Config Path: $FORTANIX_PKCS11_CONFIG_PATH"
  8. To apply the changes are made in the file, restart the avx-mid-server-platform pod uging the commands below.
    kubectl get pods -n <namespace>
    kubectl delete pods -n <namespace> <PodName>