PKCS11Exception CKR_ATTRIBUTE_SENSITIVE with JSCH, PKCS11, and FIPS enabled in Apache Tomcat

Solution Verified - Updated 2020-05-08T13:43:10+00:00 -

Issue

We have tomcat9 (JWS5) server with https enabled. This server installed on RHEL 7.7 and openjdk version "1.8.0_232" environment. When the application deployed in tomcat9, trying to sftp to windows share, it is getting the below error. Attached the full error log for your review. We can sftp from the terminal but not from the application deployed in tomcat server
```
ERROR gov.uspto.trademark.admin.service.DocumentSftpService.fileTransfer - Could not derive key
java.security.ProviderException: Could not derive key
```

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.