# \#keymanager

**URL:** https://community.mosip.io/tag/keymanager/5.md

[Latest](https://community.mosip.io/latest.md) · [Categories](https://community.mosip.io/categories.md) · [Tags](https://community.mosip.io/tags.md)

---

## [DID Document – Handling Multiple Public Keys & VC Verification](https://community.mosip.io/t/did-document-handling-multiple-public-keys-vc-verification/2287)

<div class="topic-metadata">

**Author:** [@Shubham6818](https://community.mosip.io/u/Shubham6818)\
**Replies:** 3\
**Last updated:** [September 15, 2025, 5:59am UTC](https://community.mosip.io/t/did-document-handling-multiple-public-keys-vc-verification/2287 "2025-09-15T05:59:14Z")

</div>

Hi everyone, While debugging Certify service with DID documents, we noticed the following behavior: Starting the Certify service, generating did.json, and issuing a VC works as expected — the VC verifies successfully…

---

## [How was zero-knowledge implemented in MOSIP?](https://community.mosip.io/t/how-was-zero-knowledge-implemented-in-mosip/2124)

<div class="topic-metadata">

**Author:** [@Kaleb](https://community.mosip.io/u/Kaleb)\
**Replies:** 1\
**Last updated:** [June 30, 2025, 12:36pm UTC](https://community.mosip.io/t/how-was-zero-knowledge-implemented-in-mosip/2124 "2025-06-30T12:36:07Z")

</div>

I was looking through the repository to learn how ZK was implemented but what I found was encrypting and decrypting data. Where are the circuits implemented to hide the witness (secret values), and how is the system zero…

---

## [Pre-registration module deployment](https://community.mosip.io/t/pre-registration-module-deployment/1634)

<div class="topic-metadata">

**Author:** [@asif.kangani](https://community.mosip.io/u/asif.kangani)\
**Replies:** 3\
**Last updated:** [November 12, 2024, 6:03am UTC](https://community.mosip.io/t/pre-registration-module-deployment/1634 "2024-11-12T06:03:09Z")

</div>

I want to know the exact dependencies for pre-registration module to run it locally as a individual service … It will be very helful if I got to know which modules should be running already to run a pre-registration serv…

---

## [Cannot upload partner certificate](https://community.mosip.io/t/cannot-upload-partner-certificate/1666)

<div class="topic-metadata">

**Author:** [@Tidiane\_Sy](https://community.mosip.io/u/Tidiane_Sy)\
**Replies:** 1\
**Last updated:** [November 12, 2024, 5:05am UTC](https://community.mosip.io/t/cannot-upload-partner-certificate/1666 "2024-11-12T05:05:01Z")

</div>

Hi all, I’m trying to make the mock mds work. One of the step is to upload the client certificate from the partner portal. I managed to uplaod the root and the intermediate certificate, but the client certificate uplo…

---

## [Kernel-keymanger-service](https://community.mosip.io/t/kernel-keymanger-service/1615)

<div class="topic-metadata">

**Author:** [@OURO-BODI\_Abdourakib](https://community.mosip.io/u/OURO-BODI_Abdourakib)\
**Replies:** 3\
**Last updated:** [October 22, 2024, 2:40pm UTC](https://community.mosip.io/t/kernel-keymanger-service/1615 "2024-10-22T14:40:54Z")

</div>

Hello, I’m facing this challenge when runing kernel-keymanger-service docker images (docker pull mosipid/kernel-keymanager-service:1.2.1.0) The system asked me to provide passeword for mosip user??

---

## [Failed to generate Symmetric Key in HSM due to error "Unsupported default key size"](https://community.mosip.io/t/failed-to-generate-symmetric-key-in-hsm-due-to-error-unsupported-default-key-size/1544)

<div class="topic-metadata">

**Author:** [@maliksajidhussain](https://community.mosip.io/u/maliksajidhussain)\
**Replies:** 6\
**Last updated:** [September 11, 2024, 7:01am UTC](https://community.mosip.io/t/failed-to-generate-symmetric-key-in-hsm-due-to-error-unsupported-default-key-size/1544 "2024-09-11T07:01:10Z")

</div>

Hi Support, I am using Acala HSM simulator to generate Master, Base and Symmetric Key from key manager service. The Acala HSM simulator is fips enabled. I’m able to generate Master and Base key. But when try to generate…

---

## [Failed to authenticate Bouncy castle provider by JCE](https://community.mosip.io/t/failed-to-authenticate-bouncy-castle-provider-by-jce/1430)

<div class="topic-metadata">

**Author:** [@maliksajidhussain](https://community.mosip.io/u/maliksajidhussain)\
**Replies:** 9\
**Last updated:** [September 4, 2024, 10:58am UTC](https://community.mosip.io/t/failed-to-authenticate-bouncy-castle-provider-by-jce/1430 "2024-09-04T10:58:01Z")

</div>

Hi, I have compile the MOSIP key manager 1.2.0.1 version locally and running in my local test environment. I am able to create the Root and Master keys using key manager inside softhsm and its all working. I’m failing to…

---

## [keymgruser:FATAL: password authentication failed for user](https://community.mosip.io/t/keymgruser-password-authentication-failed-for-user/1541)

<div class="topic-metadata">

**Author:** [@parandhaman](https://community.mosip.io/u/parandhaman)\
**Replies:** 2\
**Last updated:** [September 2, 2024, 12:23pm UTC](https://community.mosip.io/t/keymgruser-password-authentication-failed-for-user/1541 "2024-09-02T12:23:47Z")

</div>

How to fix this below error ?unable to install keymanager and it failed with below logs from their pod, 105 common frames omitted\\nCaused by: org.postgresql.util.PSQLException: FATAL: password authentication failed for …

---

## [Release Announcement: Inji Certify v0.9.0 Release!](https://community.mosip.io/t/release-announcement-inji-certify-v0-9-0-release/1526)

<div class="topic-metadata">

**Author:** [@sanchi-singh24](https://community.mosip.io/u/sanchi-singh24)\
**Replies:** 0\
**Last updated:** [August 22, 2024, 10:08pm UTC](https://community.mosip.io/t/release-announcement-inji-certify-v0-9-0-release/1526 "2024-08-22T22:08:57Z")

</div>

Dear MOSIP Community, We are thrilled to announce the release of Inji Certify 0.9.0, a significant update that enhances the platform’s capabilities in verifiable credential issuance and management. This release introduc…

---

## [OCI - Mosip 1.2.0 V3 Installation failing for keymanager](https://community.mosip.io/t/oci-mosip-1-2-0-v3-installation-failing-for-keymanager/1124)

<div class="topic-metadata">

**Author:** [@subhashchandrab](https://community.mosip.io/u/subhashchandrab)\
**Replies:** 4\
**Last updated:** [April 3, 2024, 11:24am UTC](https://community.mosip.io/t/oci-mosip-1-2-0-v3-installation-failing-for-keymanager/1124 "2024-04-03T11:24:33Z")

</div>

Hi I’m following the documentation https://docs.mosip.io/1.2.0/deploymentnew/v3-installation/aws-installation-guidelines-new to setup MOSIP on Oracle Cloud environment. Currently I’m facing the below issue when trying t…

---

## [Error while logging in on android registration client](https://community.mosip.io/t/error-while-logging-in-on-android-registration-client/992)

<div class="topic-metadata">

**Author:** [@jeresaf](https://community.mosip.io/u/jeresaf)\
**Replies:** 10\
**Last updated:** [February 14, 2024, 4:43am UTC](https://community.mosip.io/t/error-while-logging-in-on-android-registration-client/992 "2024-02-14T04:43:33Z")

</div>

When logging in to android registration client, an error of Invalid Machine Spec ID found is thrown when the app tries to saveAuthToken. Below are the logs: E/LocalClientCryptoServiceImpl(16100): null E/LocalClientCryp…

---

## [Android- android sbi communicating with ctk on Synergy enviroment ,can not upload certificate](https://community.mosip.io/t/android-android-sbi-communicating-with-ctk-on-synergy-enviroment-can-not-upload-certificate/969)

<div class="topic-metadata">

**Author:** [@nizhuanxinghe](https://community.mosip.io/u/nizhuanxinghe)\
**Replies:** 2\
**Last updated:** [December 8, 2023, 11:49am UTC](https://community.mosip.io/t/android-android-sbi-communicating-with-ctk-on-synergy-enviroment-can-not-upload-certificate/969 "2023-12-08T11:49:26Z")

</div>

At present, the CTK tool officially provided by MOSIP is for the Synergy environment. When we tried to upload Device and FTM certificates in the PMP of the Synergy environment, we found that the website did not have an…

---

## [How to register an account in keycloak platform from synergy environment？](https://community.mosip.io/t/how-to-register-an-account-in-keycloak-platform-from-synergy-environment/970)

<div class="topic-metadata">

**Author:** [@nizhuanxinghe](https://community.mosip.io/u/nizhuanxinghe)\
**Replies:** 3\
**Last updated:** [December 8, 2023, 8:16am UTC](https://community.mosip.io/t/how-to-register-an-account-in-keycloak-platform-from-synergy-environment/970 "2023-12-08T08:16:30Z")

</div>

In the synergy keycloak platform， I dont find anywhere to registrite ， if the register function is not supported，could you provide a valid acount for me to upload cerficates for testing android sbi。thanks a milion for an…

---

## [401 Unauthorized](https://community.mosip.io/t/401-unauthorized/782)

<div class="topic-metadata">

**Author:** [@moxq](https://community.mosip.io/u/moxq)\
**Replies:** 2\
**Last updated:** [September 20, 2023, 12:12pm UTC](https://community.mosip.io/t/401-unauthorized/782 "2023-09-20T12:12:03Z")

</div>

\*When I debug locally KeymanagerBootApplication service,request:http://localhost:8088/v1/keymanager/getCertificate?applicationId=test&referenceId=111，response 401，

---

## [Where to find the Encryption Certificate](https://community.mosip.io/t/where-to-find-the-encryption-certificate/751)

<div class="topic-metadata">

**Author:** [@dragon\_king](https://community.mosip.io/u/dragon_king)\
**Replies:** 4\
**Last updated:** [September 18, 2023, 7:17am UTC](https://community.mosip.io/t/where-to-find-the-encryption-certificate/751 "2023-09-18T07:17:52Z")

</div>

in the mds specification document MDS Specification - MOSIP Docs 1.1.5 the document said i can download the certificates from the blew url. POST https://{base\_url}/v1/masterdata/device/encryptioncertficates\` The Enc…

---

## [how to issue certificate for device by device manage server](https://community.mosip.io/t/how-to-issue-certificate-for-device-by-device-manage-server/742)

<div class="topic-metadata">

**Author:** [@dragon\_king](https://community.mosip.io/u/dragon_king)\
**Replies:** 1\
**Last updated:** [August 31, 2023, 8:57am UTC](https://community.mosip.io/t/how-to-issue-certificate-for-device-by-device-manage-server/742 "2023-08-31T08:57:52Z")

</div>

I am developping the manage sever for auth device. I am not sure how to issue certificate for the auth device. I have two schemes。 The first scheme is use the open source pki like ebjca to issue certificate for the dev…

---

## [Kernel-keymanager-service v1.2.0 issue](https://community.mosip.io/t/kernel-keymanager-service-v1-2-0-issue/542)

<div class="topic-metadata">

**Author:** [@manish\_choudhary](https://community.mosip.io/u/manish_choudhary)\
**Replies:** 7\
**Last updated:** [July 4, 2023, 6:11pm UTC](https://community.mosip.io/t/kernel-keymanager-service-v1-2-0-issue/542 "2023-07-04T18:11:35Z")

</div>

Hello! commons-packet-manager(1.2.0.1-SNAPSHOT) dependency used in admin and idrepo services has kernel-keymanager-service(1.2.0-SNAPSHOT) as an internal dependency. The build is failing because kernel-keymanager-servic…

---

## [MOSIP services v3 1.2.0.1 installation issues - kernel (notifier) , keymanager](https://community.mosip.io/t/mosip-services-v3-1-2-0-1-installation-issues-kernel-notifier-keymanager/138)

<div class="topic-metadata">

**Author:** [@rcsampang](https://community.mosip.io/u/rcsampang)\
**Replies:** 10\
**Last updated:** [April 3, 2023, 7:23am UTC](https://community.mosip.io/t/mosip-services-v3-1-2-0-1-installation-issues-kernel-notifier-keymanager/138 "2023-04-03T07:23:49Z")

</div>

Hello! I would like to ask for help in solving the issues encountered during installation of MOSIP services v3 1.2.0.1, particularly: kernel (notifier) , keymanager Events: Type Reason Age …

---

## [KeyManager service error: pkcs11.wrapper.PKCS11Exception: CKR\_GENERAL\_ERROR](https://community.mosip.io/t/keymanager-service-error-pkcs11-wrapper-pkcs11exception-ckr-general-error/165)

<div class="topic-metadata">

**Author:** [@zeddari](https://community.mosip.io/u/zeddari)\
**Replies:** 12\
**Last updated:** [March 28, 2023, 6:26pm UTC](https://community.mosip.io/t/keymanager-service-error-pkcs11-wrapper-pkcs11exception-ckr-general-error/165 "2023-03-28T18:26:42Z")

</div>

Hi We have built the keymanager using docker file and we have tried to start it but we are getting the following error: . pkcs11.wrapper.PKCS11Exception: CKR\_GENERAL\_ERROR Please note that we have also updated the cli…

---

## [Mosip IDA module Keys](https://community.mosip.io/t/mosip-ida-module-keys/375)

<div class="topic-metadata">

**Author:** [@bch](https://community.mosip.io/u/bch)\
**Replies:** 2\
**Last updated:** [March 24, 2023, 6:04am UTC](https://community.mosip.io/t/mosip-ida-module-keys/375 "2023-03-24T06:04:06Z")

</div>

Hi, I have a question about id-authentication keys: I found two database keys one for keymanager service et other for IDA service. Why there is two keys DB? Can use keymanager service keys for IDA module

---

## [MOSIP File Manager CrashLoopBackOff](https://community.mosip.io/t/mosip-file-manager-crashloopbackoff/351)

<div class="topic-metadata">

**Author:** [@rcsampang](https://community.mosip.io/u/rcsampang)\
**Replies:** 0\
**Last updated:** [March 9, 2023, 11:00am UTC](https://community.mosip.io/t/mosip-file-manager-crashloopbackoff/351 "2023-03-09T11:00:05Z")

</div>

Hello! I am having issues with mosip-file-manager with a status of CrashLoopBackOff. Deleting and restarting the pod still ends up with CrashLoopBackOff. Anyone who have a fix on this? Also I have updated to the lates…

---

## [IDA-AUTHENTICATION authentication-demo-ui](https://community.mosip.io/t/ida-authentication-authentication-demo-ui/304)

<div class="topic-metadata">

**Author:** [@bch](https://community.mosip.io/u/bch)\
**Replies:** 1\
**Last updated:** [January 27, 2023, 6:18am UTC](https://community.mosip.io/t/ida-authentication-authentication-demo-ui/304 "2023-01-27T06:18:42Z")

</div>

Hi, I working on authentication-demo-ui to test ID-authentication Module, in the repo i found the keys folder contains all partner and device certifcat, Otherwise in property file there is a config of partner ida.refer…

---

## [Using Keymanager in Admin portal](https://community.mosip.io/t/using-keymanager-in-admin-portal/246)

<div class="topic-metadata">

**Author:** [@rcsampang](https://community.mosip.io/u/rcsampang)\
**Replies:** 5\
**Last updated:** [December 12, 2022, 6:22pm UTC](https://community.mosip.io/t/using-keymanager-in-admin-portal/246 "2022-12-12T18:22:56Z")

</div>

Are there any other documentation / tutorial regarding the use of Keymanager in Admin portal aside from those in MOSIP Docs 1.2.0? I am trying to find out if this can be used to produce the files needed to be placed in …

---

## [Sequence diagram of keymanager avev reg-client](https://community.mosip.io/t/sequence-diagram-of-keymanager-avev-reg-client/245)

<div class="topic-metadata">

**Author:** [@kamiri](https://community.mosip.io/u/kamiri)\
**Replies:** 2\
**Last updated:** [December 1, 2022, 9:30am UTC](https://community.mosip.io/t/sequence-diagram-of-keymanager-avev-reg-client/245 "2022-12-01T09:30:07Z")

</div>

Hi Team, Can you provide me a sequence diagram of key-manager with reg-client. BR

---

## [Cannot get alias from keymanager when first sync happens in reg-client](https://community.mosip.io/t/cannot-get-alias-from-keymanager-when-first-sync-happens-in-reg-client/242)

<div class="topic-metadata">

**Author:** [@kamiri](https://community.mosip.io/u/kamiri)\
**Replies:** 1\
**Last updated:** [November 27, 2022, 3:29am UTC](https://community.mosip.io/t/cannot-get-alias-from-keymanager-when-first-sync-happens-in-reg-client/242 "2022-11-27T03:29:28Z")

</div>

Hi , When the reg-client invoque the sync-data to get get certificate from the key-manager when KM want to validate the certificate I get this error 2022-11-22 18:48:34,141 ERROR \[Thread-9\] i.m.r.u.a.ResponseSignatureA…

---

## [Internal authentication service: getCertificate API not found](https://community.mosip.io/t/internal-authentication-service-getcertificate-api-not-found/240)

<div class="topic-metadata">

**Author:** [@ThalesNejib](https://community.mosip.io/u/ThalesNejib)\
**Replies:** 3\
**Last updated:** [November 24, 2022, 11:44am UTC](https://community.mosip.io/t/internal-authentication-service-getcertificate-api-not-found/240 "2022-11-24T11:44:15Z")

</div>

Hello, I working with authentication-demo-ui, in application.properties (authentication-demo-ui/application.properties at master · mosip/authentication-demo-ui · GitHub) i found the bellow configuration: ida.certifica…

---

## [MOSIP sandbox V2 Release 1.2.0 installation stops at TASK \[helm : Install chart kernel\]](https://community.mosip.io/t/mosip-sandbox-v2-release-1-2-0-installation-stops-at-task-helm-install-chart-kernel/55)

<div class="topic-metadata">

**Author:** [@rcsampang](https://community.mosip.io/u/rcsampang)\
**Replies:** 7\
**Last updated:** [March 18, 2022, 5:28am UTC](https://community.mosip.io/t/mosip-sandbox-v2-release-1-2-0-installation-stops-at-task-helm-install-chart-kernel/55 "2022-03-18T05:28:52Z")

</div>

First of all sorry for the long post. I tried this several times, re-installed kernel module, also re-installed MOSIP from scratch, I still end up with the same error. Can someone help me fix this error? Thanks! I am in…

---

## [Moving Keymanager to independant repo](https://community.mosip.io/t/moving-keymanager-to-independant-repo/35)

<div class="topic-metadata">

**Author:** [@gsasikumar](https://community.mosip.io/u/gsasikumar)\
**Replies:** 0\
**Last updated:** [September 2, 2021, 6:40am UTC](https://community.mosip.io/t/moving-keymanager-to-independant-repo/35 "2021-09-02T06:40:39Z")

</div>

Team, Keymanager has been one of our core components in mosip ensuring data security. Overtime keymanager has been restructured as a part of commons and is one of our robust projects with consistent performance, stabili…
