Per Nilsson

The YubiKey PIV application is limited to the algorithms present in the PIV standard, hence only 1024 and 2048 RSA keys are supported.

This issue has been adressed now, you need a YubiKey 5.7+ to use RSA > 2048 via PIV

One thing that springs to mind is the issue Windows has with different runtime libraries in different dll:s within a single process. This could easily lead to crashes like we...

Im reasonably certain that it is. They wouldn't be using Visual Studio Runtime. A way to check dependensies is by using the utility called depends.exe, you will easily find it...

I'd say that the proper solution for this case would be to build yubico-piv-tool under cygwin, and then use that binary. Unfortunately we don't officially support that. If you do...

If possible, run this with debugging active, which can be done by adding setting to the config file or by setting an environment variable, see here https://docs.yubico.com/hardware/yubihsm-2/hsm-2-user-guide/hsm2-pkcs11-guide.html#configuration

It looks like the application (meaning the client of yubihsm_pkcs11, which in this case also includes the Java pkcs11 wrapper) is setting CKA_TOKEN to CK_FALSE which isn't supported - all...

This is something that would need some configuration in ejbca, I know we have tested with it. Let me see If I can find some info.

Would you kindly provide the versions of the yubihsm_pkcs11 module, the libpkcs11 engine and openssl ? The OS version would also be helpful. Thank you. As a side I can...

Also,could you set the YUBIHSM_PKCS11_DINOUT and YUBIHSM_PKCS11_DBG env variables and re-run the command, and then show the end parts of the log, so we can see if C_CloseSession (or possibly...