See below for how to troubleshoot the main Validation Authority issues.

Connectivity issues

As explained in Validation Authority overview, Validation Authority connects to:

  • A database.
  • An HSM.
  • A certificate status source (CA Gateway instance or CRL server).

To check the connection with these components, run the evactl check all command.

Error: Another instance of evactl is running

When trying to create or delete a key, you can encounter the following error.

Error: Another instance of evactl is running create-key or delete-key

When trying to enroll, reenroll or import a PKCS #12, you can encounter the following error.

Error: Another instance of evactl is running enroll, reenroll or import-p12

In both cases:

  1. Make sure that there is no other instance of the evactl command line tool performing any of those operations.

  2. Re-run the command with the FORCE_MUTEX_OPERATION environment variable set to 1. For example: 

    sudo FORCE_MUTEX_OPERATION=1 evactl create-key RSA2048

    Running a command with FORCE_MUTEX_OPERATION set to 1 can override the changes made by another evactl running instance.