Error Messages
| Error/Warning Message | Description |
|---|---|
| Out of memory | System doesn't have enough memory (RAM) available. |
| Not found | Item does not found. |
| Missing parameters | Some cryptographic input parameter(s) not provided. |
| Configuration file not found | Property file does not exists at specified path. |
| Logged out | Logged out already from nae/kmip session, can't log back in. |
| Missing authentication info | Authentication info, username and password is not present into authinfo. |
| Incorrect key type | Incorrect key type for the operation getting performed. Example - Expecting RSA public key but provided is RSA private key. |
| Supplied buffer too small | Allocated memory space or buffer provided is not large enough to accommodate the data being processed |
| Unsupported algorithm | Provided algorithm is not supported for the operation getting performed. |
| Invalid parameter value | NULL pointer reference found for function input parameter(s) or input parameter(s) is out of range. |
| Missing configuration entry | Entry for some configuration(s) not provided in the property file. |
| Config file version mismatch | Version of the provided property file is not matching with the library trying to load. |
| Config file entry error | Value provided against a property in the property file is invalid. |
| Key not exportable | Cryptographic key cannot be exported from CM due to security restrictions. |
| Invalid session | NAE/KMIP session is invalid. |
| Invalid key | Failed to create Key or Key has become invalid for the operation getting performed. |
| Cannot write to logfile | Failed to write data to a log file. This can happen due to various reasons related to file permissions, file system issues, or incorrect file paths. |
| Unsupported command | Batch operation is not supported by the server. |
| Key Version does not exist | Requested version does not exist for the key. |
| Key is NOT a Versioned Key | Requested key is not a versioned key. |
| Connection failed | A recoverable error, load balancer is trying to connect with another server for us if configured in the property file. |
| Not an IP address | Invalid NAE/KMIP IP address is provided in the property file. |
| Connection read error | This error message comes when there is no data to read from socket. |
| Connection write error | This error message comes when there is no data to write on socket. |
| Connection generic error | XML protocol negotiation failed. Old server protocol is not supported. |
| Connection fatal error | A fatal XML error response received from server for an XML request. |
| Connection non fatal error | A non-fatal XML error response received from server for an XML request. |
| Connection error: Invalid response | Failed to parse XML response received from server due to presence/absence of a tag. |
| Connection error: Invalid data size | Failed to parse XML response received from server due to invalid data size of a tag. |
| Connection error: Maximum buffer reached | Allocated buffer provided is not large enough to read the data. |
| Connection error: Out of memory | System doesn't have enough memory (RAM) available. |
| Connection CA file error | Failed to open or verify CA cert file. |
| Connection certificate file error | Cannot load Certificate with common name or thumbprint. |
| Connection private key error | Failed to load certificate private key due to invalid passphase/location/permission/format. |
| TCP/SSL protocol mismatch | Server resets the connection on a read as it is expecting an SSL connection but found TCP connection or vice versa. |
| Export key list for all versions not created | Failed to save all the versions exported for a key in the persistent cache. |
| Illegal address in the Syslog_Server_IP property | Syslog hostname or IP address provided in the property file is invalid. |
| Operation authentication failed | Unrecognizable client request. Failed to Authenticate User |
| Could not parse client request | Could not parse client XML request. |
| NAE error: Client request has invalid XML format | Client request has invalid XML format. |
| NAE error: Header length cannot exceed 8192 bytes | Header length cannot exceed 8192 bytes in the XML request. |
| NAE error: Invalid or missing data section | Invalid or missing data section in the XML request. |
| NAE error: Invalid data chunk | Invalid data chuck is provided for operation getting performed. |
| NAE error: Invalid chunk size | Invalid chunk size. |
| Key clone not supported | Key clone is not supported by server. |
| NAE error: Invalid user | Invalid username or password. |
| Missing credentials | Username or password is empty. |
| Insufficient permissions | Insufficient permissions for the logged in user for the operation getting performed. |
| NAE authentication required | Authentication with NAE/KMIP server is required. |
| NAE error: Data too long | Total data size is too long for this cipher. |
| Data size is not a multiple of cipher block size | Total data size is not a multiple of cipher block size. |
| Invalid padding | Invalid padding; encrypted data may have been corrupted. |
| Key change owner failed | Failed to change key owner. |
| Set key metadata failed | Failed to set attributes for a key or opaque object. |
| Failed to create new key version | Failed to create new key version for the given key. |
| Unsupported operation | Operation not supported. |
| Invalid operation | Invalid operation with key. |
| Invalid operation-algorithm pair | Invalid operation with specified algorithm. |
| Invalid or missing algorithm | Invalid algorithm with specified key. |
| Unknown algorithm | Provided algorithm is not known to server. |
| Invalid algorithm for key | There is a mismatch or inconsistency between the cryptographic algorithm and the algorithm associated with the cryptographic key you are trying to use. |
| Invalid IV | Provided IV is not valid w.r.t. provided cryptographic algorithm. |
| Invalid IV size | Length of IV is incorrect w.r.t. provided cryptographic algorithm. |
| Invalid or missing MAC value for MAC verification | Invalid or missing MAC value for MAC verification |
| Invalid TweakData | Provided TweakData data is not valid. |
| Could not decode ciphertext header | Failed to decode header info from the ciphertext. |
| Invalid or missing data size | Invalid or missing data size. |
| Invalid key or certificate name | Invalid key or certificate is provided for the operation getting performed. |
| NAE error: Unknown key | Unknown key name or insufficient permissions. |
| NAE error: Couldn't initialize key | Could not initialize key. |
| NAE error: Key deleted or modified | The key that was being used has been deleted or modified. |
| NAE error: Invalid key version or none specified | Version mismatch for the key. |
| NAE error: Couldn't generate key | Could not generate key at server. |
| NAE error: Couldn't import key | Could not import key from server. |
| NAE error: Key already exists | Key already exists at server. |
| NAE error: Invalid or missing key data | Invalid or missing key data for the key. |
| NAE error: Unsupported key size | Unsupported key size for the specified algorithm. |
| NAE error: Invalid key size | Invalid key size. |
| NAE error: Invalid permissions | Invalid permissions. |
| NAE error: Global key cannot have permissions | Global key cannot have group permissions. |
| Server exceeded maximum number of keys | Maximum supported key capacity by server has been reached. |
| Key or certificate is not asymmetric | Provided key is not asymmetric key. |
| Invalid key or certificate format | Invalid import or export format for the key/certificate. |
| Password is only needed when key or certificate is exported in PKCS#12 format | Password is only needed when key or certificate is exported in PKCS#12 format |
| Password is required when key or certificate is exported in PKCS#12 format | Password is required when key or certificate is exported in PKCS#12 format |
| NAE error: Key is not deletable | Key does have delete permission on server. |
| Global key usage not allowed | Security settings at server do not allow global key usage. |
| Algorithm key size not allowed | Security settings at server do not allow this key size for this algorithm. |
| Algorithm not supported for the operation | Security settings at server do not allow this key size for certificates. |
| Invalid FPE format type | Invalid format type is specified FPE algorithm. |
| Invalid key type | Invalid key type is provided for export operation. |
| Unsupported operation in local mod | Unsupported operation in local mode for the specified key/algorithm. |
| Key is not a certificate | Certificate is expected but a key is provided instead. |
| Export in PKCS#12 or PKCS#8 format is not allowed because certificate has no private key | Export in PKCS#12 or PKCS#8 format is not allowed because certificate has no private key. |
| Certificate could not be verified | Certificate presented by server could not be validated by the client attempting to verify it. |
| Certificate authority not found | Certificate presented by a server cannot be verified because the issuing Certificate Authority (CA) is not recognized or trusted by the client performing the verification. |
| Certificate authority export failed | Failed to export a certificate authority (CA) certificate due to insufficient permissions. |
| Local crypt generic error | Generic cryptographic operation error in local mode |
| Cannot enable key cache | Cannot enable key caching over unsecured connection. Please set your protocol to SSL to use key caching. |
| Cannot enable persistent cache | Persistent cache cannot be enabled due to configuration issues. |
| Cannot obtain persistent cache passphrase | Passphrase for persistent key cache store is not created |
| Cannot connect to persistent cache | Failed to connect with persistent key cache store. |
| No user passphrase or callback specified | Client failed to set passphrase callback function to get the passphrase |
| User callback failed to set passphase | Persistent cache passphrase is not set |
| Persistent key caching requires symmetric/asymmetric key caching | Symmetric/Asymmetric key is not enabled with Persistent cache. |
| Persistent_Cache_Directory is not set to a value | Persistent cache directory is not set in the property file. |
| Symmetric_Key_Cache_Expiry > Persistent_Cache_Expiry_Keys. Persistent_Cache_Expiry_Keys must be greater | Persistent_Cache_Expiry_Keys must be greater than Symmetric_Key_Cache_Expiry specified in the property file. |
| Persistent_Cache_Expiry_Keys has an invalid value | Persistent_Cache_Expiry_Keys must be an integer with value >= 0. |
| Persistent_Cache_Max_Size has an invalid value | Persistent_Cache_Max_Size must be an integer with value >= 0. |
| Key version is not supported for this operation | Versioned key is not supported for the operation being performed. |
| Could not encode ciphertext header | Failed to encode ciphertext header for the given key. |
| Cannot open persistent cache file | Failed to open persistent cache file as Cache file does not exists. |
| The properties file value for Persistent_Cache_Directory is invalid | The properties file value specified for Persistent_Cache_Directory is invalid. Unable to stat file/directory. |
| Cannot read persistent cache certificate from ms store | There is an issue in reading persistent cache certificate from the Microsoft Store. |
| persistent cache file format mismatch | Data format of the persistent cache file does not match. |
| Cannot decrypt persistent cache item | Cannot decrypt item stored in the persistent cache |
| Key exists in persistent cache has expired | Key stored in the persistent cache has expired |
| Error in FPE unicode characters file | Unicode characters file is not present, or it is containing invalid length of characters |
| Invalid KMIP_Spec_File specified in properties file | KMIP file specified in the property file is invalid. |
| CA not in MS Store | Specified CA cert is not present at MS store. |
| Failed to configure TLS 1.3 specific ciphers...default TLS 1.3 ciphers are enabled | Could not configure TLS 1.3 cipher suites specified in the property file. Enabling default TLS 1.3 specific cipher suites at connector. |
| Failed to configure TLS 1.2 specific ciphers | TLS 1.2 specific cipher suites specified in the property file are incorrect. |
| Invalid Cipher list | CipherSuites provided in the property file is invalid |
| CA common name is missing | Failed to add CA cert into OpenSSL store as Common name is missing for the CA in MS Store. |
| CA file is missing | CA is not present in the CA cert file. |
| SSL connection failed to | Failed to create SSL connection with server specified in the property file. |
| Connection failed during SSL_write | SSL connection terminated while doing write operation over SSL connection. |
| X509_verify_cert_error_string returned | Hostname of the server could not be verified with the NAE/KMIP IP address specified in the property file. |
| Connection to server failed | Failed to create TCP connection with server due to invalid login credentials. Please check username and password. |
| SSL Connection Connection to server failed | Failed to create SSL connection with server due to invalid certificate. Please check passphrase and cert location. |
| Key info from KS failed | Failed to get key info from server due to connection termination |
| Couldn't Open MS Store. Please ensure Admin Privileges | Failed to open MS Store due to insufficient permissions. |
| GetCACertChainFromMSStore failed to get all certs of the chain | Failed to get certificates from MS Store for all the cert chains |
| getnameinfo failed | Failed to get hostname for the specified NAE/KMIP IP in the property file. |
| GetHostByAddr failed | Failed to get hostname for the specified NAE/KMIP IP in the property file. |
| Unknown Server Error recovered, trying another server | A recoverable error, load balancer is trying to connect with another server for us |
| Error recovered, trying another server | A recoverable error, load balancer is trying to connect with another server for us |
| Cannot obtain key over unsecured connection. Remote encryption will be used instead of local | Key cannot be obtained from server over unsecured TCP connection. |
| Persistent caching is disabled | Could not enabled persistent cache as values provided in the property file outside of yes/no/tcp_ok. |
| VerifySSLCertificate is disabled | Verify SSL certificate for the server is disabled in the property file. |
| Old server protocol not supported | XML protocol negotiation failed. Old server protocol is not supported. |
