When you use an nCipher based keystore in your NAS2 configuration, you must select SunPKCS11-nShield as your cryptography provider. Also, it is recommended to select BC as your S/MIME PKIX JCE Provider.