Issue description

This error typically occurs during the initial setup process of an API Co-Signer.

During the initial setup process, the First user on this machine checkbox must be selected when the first API user to be added to the API Co-Signer machine is created. If the API user is created and the checkbox is not selected, the error below appears in the date_time_run.log file (located in the same directory in which the API Co-Signer script runs):

customer_cosigner:24 ERROR 31/12/2000 20:03:21,462 untrusted/ra_loader.cpp(457)
fireblocks::common::ra_loader::download_loader_with_access_token - Failed to download loader enclave file, http status 401

customer_cosigner:24 FATAL 31/12/2000 20:03:21,463 main.cpp(490) ::init - Failed to download ra loader

Resolution

There are two resolutions for this issue.

Resolution 1: Start over with a new API user

1. Delete the API user that you attempted to pair with the API Co-Signer.
2. Create another API user. Make sure to select the First user on this machine checkbox.
3. Run the following command on the API Co-Signer instance:
   

   ./cosigner stop
       docker kill $(docker ps -q)
       docker rm $(docker ps -aq)
       docker rmi $(docker images -q)

4. Run the following command to begin the setup process again:
   

   ./cosigner setup

Resolution 2: Contact Fireblocks Support

If you cannot create an API user or require the setup to be completed with the existing API user, contact Fireblocks Support.