for the HoK, holder of key error of SSO ... make sure your public addresses in vCloud are completed correctly. This needs to be done before registering to the lookup service.
also, make sure that the lookup service has correct and resolvable names, vCloud pulls data from the lookup for forwarding purposes.
if you want ot know what data we pulled, go into the vcloud database and:
select * from config where name like 'lookup%';
If these addresses have incorrect/bad data, like an improper FQDN, then you need to fix the lookup service.