When testing connectivity to the HSM appliance (test hsm-keyring keyringid), the test fails with the following error:
% Test failed, error code was Hostname/Address resolution failure
A PCAP shows that the string being passed to DNS has invalid strongs after the hostname. For example, it might append a string such as "\237\004\200\212" after the FQDN. This results in the DNS cache being ignored, and if DNS imputing is enabled it will result in many DNS requests.
This is fixed in SGOS 220.127.116.11 and 18.104.22.168 and later.