CardContact Systems GmbH

Seems like the private exponent is too long. Can you try to edit scsh/sc-hsm/DKEK.js and add var d = e.modInverse(r); if (d.byteAt(0) == 0) { d = d.bytes(1); } var...

Can you post a trace of the last 5 APDUs in the "trace" tab ?

Did you try the import directly after initializing the device ? Try a card reset between initialization and import. There is a known [bug](https://devnet.cardcontact.de/issues/165) in the JVM garbage collector that...

I can reproduce the issue with your development key. It fails with out-of-memory during import. I then disabled secure messaging and after a card reset it worked. You can disable...

That is well possible. We suspect, that these kind of problems are caused by the way RAM objects in the JVM are garbage collected. Unfortunately NXP does not offer any...

There must be something wrong here: The HSM 2 is a SmartCard-HSM 4K which is version 3.x. If version 2.5 is the latest version offered for your device, then you...

Maybe I'm missing something from your post. You need to use the same DKEK share for initialization and for import. I see only two steps where the DKEK share is...

Btw. the Smart Card Shell shows 2.5. You can also run sc-hsm-tool from OpenSC to see the version.

Did you reset the card between initialization and key import ? There is an OOM condition with large RSA keys if device initialization and import is done in the same...

You need to reload the key manager with CTRL-M after doing a reset.