The ca-signer-1 and vault-1 tokens are offline

Change the certificate key password

In /etc/openxpki/config.d/realm/ca-one/crypto.yaml, change the certificate key password.

Create correct symlinks and copy the key file

For more information, see Copying the key file and creating a symlink.

Make sure that the key file is readable by OpenXPKI