PKCS11Exception CKR_ATTRIBUTE_SENSITIVE with JSCH, PKCS11, and FIPS enabled in Apache Tomcat

Solution Verified - Updated -


  • We have tomcat9 (JWS5) server with https enabled. This server installed on RHEL 7.7 and openjdk version "1.8.0_232" environment. When the application deployed in tomcat9, trying to sftp to windows share, it is getting the below error. Attached the full error log for your review. We can sftp from the terminal but not from the application deployed in tomcat server

    ERROR gov.uspto.trademark.admin.service.DocumentSftpService.fileTransfer - Could not derive key Could not derive key


  • Red Hat JBoss Web Server (JWS)
  • Apache Tomcat

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In