Fix for HSM cloning issue

1 files changed, 8 insertions, 0 deletions

diff --git a/base/server/cms/src/org/dogtagpki/server/rest/SystemConfigService.java b/base/server/cms/src/org/dogtagpki/server/rest/SystemConfigService.java
index 3e7ea5b75..2de087bad 100644
--- a/base/server/cms/src/org/dogtagpki/server/rest/SystemConfigService.java
+++ b/base/server/cms/src/org/dogtagpki/server/rest/SystemConfigService.java
@@ -852,6 +852,14 @@ public class SystemConfigService extends PKIService implements SystemConfigResou
                 CMS.debug(e);
                 throw new PKIException("Failed to restore certificates from p12 file" + e);
             }
+        } else {
+            CMS.debug("SystemConfigService.getCloningData(): set permissions for certs stored in hardware");
+            try {
+                ConfigurationUtils.importAndSetCertPermissionsFromHSM();
+            } catch (Exception e) {
+                CMS.debug(e);
+                throw new PKIException("Failed to import certs from HSM and set permissions:" + e);
+            }
         }
 
         CMS.debug("SystemConfigService.getCloningData(): verify certs");