[slaznick@clone ~]$ sudo pkispawn -s CA -f /tmp/tmp9h1A5I Log file: /var/log/pki/pki-ca-spawn.20170109094341.log Loading deployment configuration from /tmp/tmp9h1A5I. Installing CA into /var/lib/pki/pki-tomcat. Storing deployment configuration into /etc/sysconfig/pki/tomcat/pki-tomcat/ca/deployment.cfg. Importing certificates from /tmp/ca.p12: --------------- 4 entries found --------------- Certificate ID: 8ee0731032a214302a657e7279599568c7771997 Serial Number: 0x2 Nickname: ocspSigningCert cert-pki-ca Subject DN: CN=OCSP Subsystem,O=MASTER-DOM.EXAMPLE.COM Issuer DN: CN=Certificate Authority,O=MASTER-DOM.EXAMPLE.COM Trust Flags: u,u,u Has Key: true Certificate ID: 56f350314de03ab5a42e1406c79d91d541aecfe9 Serial Number: 0x1 Nickname: caSigningCert cert-pki-ca Subject DN: CN=Certificate Authority,O=MASTER-DOM.EXAMPLE.COM Issuer DN: CN=Certificate Authority,O=MASTER-DOM.EXAMPLE.COM Trust Flags: CTu,Cu,Cu Has Key: true Certificate ID: 7e2afd290535958e516b2b1b83f37f0e39a48ff7 Serial Number: 0x4 Nickname: subsystemCert cert-pki-ca Subject DN: CN=CA Subsystem,O=MASTER-DOM.EXAMPLE.COM Issuer DN: CN=Certificate Authority,O=MASTER-DOM.EXAMPLE.COM Trust Flags: u,u,u Has Key: true Certificate ID: 4d868b323ee9bd39a9da8d30f924f9eae60cc925 Serial Number: 0x5 Nickname: auditSigningCert cert-pki-ca Subject DN: CN=CA Audit,O=MASTER-DOM.EXAMPLE.COM Issuer DN: CN=Certificate Authority,O=MASTER-DOM.EXAMPLE.COM Trust Flags: u,u,u Has Key: true --------------- Import complete --------------- Imported certificates in /etc/pki/pki-tomcat/alias: Certificate Nickname Trust Attributes SSL,S/MIME,JAR/XPI ocspSigningCert cert-pki-ca u,u,u subsystemCert cert-pki-ca u,u,u caSigningCert cert-pki-ca CTu,Cu,Cu auditSigningCert cert-pki-ca u,u,Pu Installation failed: Apache Tomcat/7.0.69 - Error report

HTTP Status 500 - org.mozilla.jss.NoSuchTokenException

type Exception report

message org.mozilla.jss.NoSuchTokenException

description The server encountered an internal error that prevented it from fulfilling this request.

exception 

org.jboss.resteasy.spi.UnhandledException: org.mozilla.jss.NoSuchTokenException
    org.jboss.resteasy.core.ExceptionHandler.handleApplicationException(ExceptionHandler.java:76)
    org.jboss.resteasy.core.ExceptionHandler.handleException(ExceptionHandler.java:212)
    org.jboss.resteasy.core.SynchronousDispatcher.writeException(SynchronousDispatcher.java:149)
    org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:372)
    org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:179)
    org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.service(ServletContainerDispatcher.java:220)
    org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:56)
    org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:51)
    javax.servlet.http.HttpServlet.service(HttpServlet.java:731)
    sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    java.lang.reflect.Method.invoke(Method.java:498)
    org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:288)
    org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:285)
    java.security.AccessController.doPrivileged(Native Method)
    javax.security.auth.Subject.doAsPrivileged(Subject.java:549)
    org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:320)
    org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:175)
    java.security.AccessController.doPrivileged(Native Method)
    org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
    sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    java.lang.reflect.Method.invoke(Method.java:498)
    org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:288)
    org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:285)
    java.security.AccessController.doPrivileged(Native Method)
    javax.security.auth.Subject.doAsPrivileged(Subject.java:549)
    org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:320)
    org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:260)

root cause 

org.mozilla.jss.NoSuchTokenException
    org.mozilla.jss.CryptoManager.getTokenByName(CryptoManager.java:622)
    com.netscape.cms.servlet.csadmin.ConfigurationUtils.verifySystemCertificates(ConfigurationUtils.java:980)
    org.dogtagpki.server.rest.SystemConfigService.configureClone(SystemConfigService.java:898)
    org.dogtagpki.server.rest.SystemConfigService.configureSubsystem(SystemConfigService.java:1019)
    org.dogtagpki.server.rest.SystemConfigService.configure(SystemConfigService.java:164)
    org.dogtagpki.server.rest.SystemConfigService.configure(SystemConfigService.java:121)
    sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    java.lang.reflect.Method.invoke(Method.java:498)
    org.jboss.resteasy.core.MethodInjectorImpl.invoke(MethodInjectorImpl.java:137)
    org.jboss.resteasy.core.ResourceMethodInvoker.invokeOnTarget(ResourceMethodInvoker.java:280)
    org.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:234)
    org.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:221)
    org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:356)
    org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:179)
    org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.service(ServletContainerDispatcher.java:220)
    org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:56)
    org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:51)
    javax.servlet.http.HttpServlet.service(HttpServlet.java:731)
    sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    java.lang.reflect.Method.invoke(Method.java:498)
    org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:288)
    org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:285)
    java.security.AccessController.doPrivileged(Native Method)
    javax.security.auth.Subject.doAsPrivileged(Subject.java:549)
    org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:320)
    org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:175)
    java.security.AccessController.doPrivileged(Native Method)
    org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
    sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    java.lang.reflect.Method.invoke(Method.java:498)
    org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:288)
    org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:285)
    java.security.AccessController.doPrivileged(Native Method)
    javax.security.auth.Subject.doAsPrivileged(Subject.java:549)
    org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:320)
    org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:260)

note The full stack trace of the root cause is available in the Apache Tomcat/7.0.69 logs.

Apache Tomcat/7.0.69

Please check the CA logs in /var/log/pki/pki-tomcat/ca.