Novell ACCESS MANAGER 3.1 SP2 - IDENTITY SERVER GUIDE 2010 Manual page 58

4h (Conditional) If the
for the following errors:
5 Enable netHSM logging.
This logging feature is very verbose. It should be turned on only while you are debugging a
problem. If it is left on, your machine can quickly run out of disk space.
5a To the
following line:
JAVA_OPTS="${JAVA_OPTS} -DJCECSP_DEBUG=255 -DJCECSP_DEBUGFILE=/var/
opt/novell/tomcat5/logs/nCipher_jcecsp.debug"
5b Restart Tomcat by entering the following command:
/etc/init.d/novell-tomcat5 restart
5c Look for clues in the
58 Novell Access Manager 3.1 SP2 Identity Server Guide
catalina.out
Check the Health of the Identity Server. If the status is red, use the error message to

resolve the issue.
Make sure the

novlwww
 Verify that the
externKeystore.properties
valid values. See Step 5 on page
 Verify that the
tomcat5.conf
file in the
tomcat5.conf
nCipher_jcecsp.debug
file does not contain any entries for providers, check
user has read rights to the keystore.
file has all the required lines with
52.
file is configured correctly. See
/var/opt/novell/tomcat5/conf
file.
Step 4 on page 52.
directory, add the