The RKM Server log file (e.g. C:\Program Files\Apache Software Foundation\Tomcat 5.5\logs\key-manager.log) contains the following error when trying to retrieve a key:

com.rsa.kms.key.support.KeyProviderException: Client failed to provide certificate

or in RKM Server 2.1.2:

com.rsa.keymanager.access.certificate.DefaultCertificateIdentityEstablisher - Request does not contain a certificate.

or

com.rsa.keymanager.access.framework.AuthenticationException: The identity of the request could not be established.

If you are using the RKM 2.11 Java Client, running a sample (e.g. CheckConfig) gives output:

     [java] Attempting to contact Key Manager Server
     [java]  Key Manager Server IS NOT AVAILABLE
     [java]  Possible reasons why the sample code is unable to access the
     [java]  server are:
     [java]  - The Key Manager server has not been started
     [java]  - The Key Manager server Master Password has not been entered
     [java]  - The Key Manager server host name or IP address in the
     [java]    configuration file is incorrect
     [java]  - The Key Manager server port number in the configuration file is
     [java]    incorrect
     [java]  - The Key Manager server certificate as configured at the client
     [java]    is not the correct certificate
     [java]  - An identity matching the client certificate has not been
     [java]    configured on the server
     [java]  - RSA Access Manager has not been correctly configured
     [java]  - The Web Server has not been correctly configured