Cryptographic Security Platform 1.0.0 - Installation and administration guide [PDF]

When executed, Certificate Manager can print the following errors.

See Browsing logs with Grafana for how to browse Certificate Manager logs.

Certificate Manager authentication and authorization errors

The application throws the following authentication and authorization errors.

Code	Message
ERR_1006	Failed to hash the password for user: `<Username>`
ERR_1010	`hasPermission` unexpectedly invoked for `<Permission>`
ERR_1011	The util command must have a `--cmd` argument.
ERR_1012	Unknown command `<Command>`
ERR_1013	`--username`, `--password`, and `--email` must be supplied to the `createUser` command.
ERR_1014	Unexpected crypto error:
ERR_1015	Error creating default cert expiry rule for initial user:
ERR_1016	`--username` and `--role` must be provided.
ERR_1017	Unexpected crypto exception:
ERR_1040	Unexpected parsing error while loading auth request:
ERR_1041	Unexpected parsing error while saving auth request:
ERR_1042	Unexpected parsing error while removing auth request:
ERR_1046	Could not find password auth provider entry.
ERR_1047	Failed to hash the password for user: `<Username>`
ERR_1048	Cannot update non-existent user. User must have existing id.
ERR_1049	Login denied. Tenant id not found for user `<Username>`.
ERR_1056	More than one LDAP auth provider registration found (`<Number of registrations>`). Unexpected behavior may result!
ERR_1057	More than one PASSWORD auth provider registration found (`<Number of registrations>`). Unexpected behavior may result!
ERR_1076	Unable to create keystore: `<CA>`
ERR_1077	Cryptography issue when creating user.
ERR_1078	Cryptographic error processing password.
ERR_1079	Unable to initialize SSLContext for LDAPS
ERR_1080	More that one LDAP auth provider registration present. Unexpected results may occur.
ERR_1081	LDAP authentication error.
ERR_1082	Unexpected exception during LDAP lookup.
ERR_1083	Error closing LDAP context.
ERR_1084	Could not find Active Directory user.
ERR_1085	Error creating the daemon user:
ERR_1086	Error creating the initial user:

Certificate Manager administration errors

The application throws the following administration errors.

Code	Message
ERR_1100	Internal error occurred
ERR_1101	Error parsing license : `<Error message>`
ERR_1102	Error parsing license: Epm client could not parse license
ERR_1103	Error parsing license : `<Error message>`
ERR_1104	Error parsing license: Epm client could not parse license
ERR_1105	Order Number of `<Order number>` uploaded license doesn't match the existing license `<Customer contact reference>`
ERR_1106	License revision `<Revision>` already uploaded.
ERR_1107	Uploaded license revision `<Uploaded revision>` is outdated. Current license revision : `<Current revision>`.
ERR_1108	Failed to create the license expiry schedule
ERR_1109	Failed to send email for license consumption
ERR_1110	Failed to send email for license expiry
ERR_1111	Failed to check the license expiry schedule
ERR_1112	Failed to delete existing license expiry schedule
ERR_1113	Failed to create the license expiry schedule
ERR_1114	Invalid plugin name: `<Plugin name>`
ERR_1115	Error executing plugin options for plugin: `<Plugin name>`
ERR_1116	Error loading plugin jar `<JAR file name>`. Plugin will not be loaded!
ERR_1117	Error loading plugin classloader.
ERR_1118	Plugin `<Canonical name>` is missing a language bundle. Plugin will not be loaded!
ERR_1119	Plugin `<Canonical name>` has invalid language bundle. No messages section found. Plugin will not be loaded!
ERR_1120	Plugin `<Canonical name>` has invalid language bundle. No languages found. Plugin will not be loaded!
ERR_1121	Plugin `<Canonical name>` has an invalid language bundle. Language `<Key>` is an invalid map. Plugin will not be loaded!
ERR_1122	Plugin `<Canonical name>` has an invalid language bundle. Language `<Name>`, key `<Key>` is invalid (`<Value>`). Plugin will not be loaded!
ERR_1123	Error initializing plugins! No `<Plugin class name>` plugins will be loaded until invalid plugin is removed!
ERR_1124	updatePlugin: Error converting global options to Json string from list
ERR_1125	validatePluginStateUpdate : cannot deactivate plugins that don't require license
ERR_1126	validatePluginStateUpdate : cannot deactivate plugin `<Name>` as its in use by destination : `<Label>`
ERR_1127	validatePluginStateUpdate : cannot deactivate plugin `<Name>` as its in use by source : `<Label>`
ERR_1128	addPlugin: Error converting global options to Json string from list
ERR_1129	Error converting global options to list from `Json byte[]`
ERR_1130	addPlugin: Error converting global options to list from `Json byte[]`
ERR_1131	Error fetching language bundle, Plugin `<Plugin name>` not found
ERR_1132	Failed to add an entry to the keystore: `<TBU>`
ERR_1133	Plugin update failed, plugin ID `<Plugin ID>`
ERR_1149	Failed importing multiple addresses.
ERR_1150	Failed importing single addresses.
ERR_1153	Failed to check the events retention schedule: `<Error>`
ERR_1154	Failed to create the events retention schedule: `<Error>`
ERR_1199	Unhandled exception caught

Certificate Manager automation errors

The application throws the following automation errors.

Code	Message
ERR_1207	Failed to mapping existing source plugin options.
ERR_1208	Failed to process existing source plugin options.
ERR_1209	Failed to migrate existing source plugin options.
ERR_1214	Failed to send email for report `<Report name>`, schedule id: `<Schedule ID>`. Error:
ERR_1215	Failed to generate missing report: `<Report ID>`
ERR_1216	Failed to generate missing schedule: `<Schedule ID>`
ERR_1217	Failed to return report: `<Report ID>`. Error: `<Error>`
ERR_1218	Error while retrieving report data:
ERR_1219	Error while generating report:
ERR_1220	User `<Username>` does not have permission to edit or delete report `<Report name>`
ERR_1221	Error while generating report: `<Error>`
ERR_1222	User `<Username>` does not have permission to access artifact `<Artifact ID>`
ERR_1223	User `<Username>` does not have permission to access execution `<Execution ID>`
ERR_1224	Failed to check the reports retention schedule: `<Error>`
ERR_1225	Failed to create the reports retention schedule: `<Error>`
ERR_1230	Field '`<Name>`' value '`<Value>`' cannot be parsed as `<Type>`. Field will be treated as a String.
ERR_1231	Unexpected exception while processing rule. RULE WILL BE SKIPPED!
ERR_1232	Expiry notification is dropped for certificate `<Certificate name>`. The address field `<Address field>` is empty.
ERR_1233	Expiry notification is dropped for certificate `<Certificate name>`. The address field `<Address field>` is not referring to a text custom field.
ERR_1234	Action plugins not currently supported. THIS ACTION WILL BE SKIPPED!
ERR_1235	Exception while executing rule. RULE WILL BE SKIPPED!
ERR_1236	Error running rules engine for certificate renewal rule.
ERR_1237	Execution of action failed.
ERR_1238	FAILED processing conditions. RULE WILL BE SKIPPED!
ERR_1239	I/O issue while parsing conditions. RULE WILL BE SKIPPED!
ERR_1240	Error running rules engine for event.
ERR_1241	Could not parse plugin config, ACTION WILL BE SKIPPED: `<Plugin config>`
ERR_1242	FAILED to create the expiration rules schedule! Expiry notifications will not be sent!
ERR_1243	Error while processing event rule conditions. RULE WILL BE SKIPPED!
ERR_1244	Only NOTIFICATION actions are supported! ACTION WILL BE SKIPPED!
ERR_1254	Unexpected IOException while formatting the certificate. Error:
ERR_1255	Unexpected IOException while formatting the certificate chain. Error:
ERR_1256	Unexpected IOException while formatting the certificate. Error:
ERR_1260	FAILED to create the key manager scan schedule! Key managers will not be scanned!
ERR_1261	Error encountered while scanning key manager.
ERR_1262	Error encountered while scanning source.
ERR_1271	User `<User ID>` does not have permission to view, edit or delete destination `<Label>`
ERR_1272	Error verifying destination config `<Label>`
ERR_1273	Error verifying destination config for plugin `<Plugin name>`
ERR_1274	Error while generating report.
ERR_1275	Failed to retrieve schedule runtimes for `<Schedule name>`
ERR_1276	Failed to parse schedule runtimes for `<Schedule name>`
ERR_1280	Failed processing conditions for renewal success. RULE WILL BE SKIPPED!
ERR_1281	I/O issue while parsing conditions for renewal success. RULE WILL BE SKIPPED!
ERR_1282	Failed processing conditions for renewal failure. RULE WILL BE SKIPPED!
ERR_1283	I/O issue while parsing conditions for renewal failure. RULE WILL BE SKIPPED!
ERR_1289	Expiry notification is dropped for certificate `<Certificate name>`. The address field `<Address field>` is empty.
ERR_1290	Error running rules engine for certificate renewal rule.
ERR_1291	Failed processing rule. RULE WILL BE SKIPPED!
ERR_1292	I/O issue while running rule. RULE WILL BE SKIPPED!
ERR_1293	Expiry notification is dropped for certificate `<Certificate name>`. The custom field `<Custom field>` is empty.
ERR_1294	Expiry notification is dropped for certificate `<Certificate name>`. The address field `<Address field>` is not referring to a text custom field.
ERR_1295	Expiry notification is dropped for certificate `<Certificate name>`. The address field `<Address field>` is empty.
ERR_1296	Error running rules engine for certificate renewal rule.
ERR_1299	Execution of rule action failed.

Certificate Manager control errors

The application throws the following control errors.

Code	Message
ERR_1302	Error getting authority capabilities from CAGW
ERR_1303	Failed to check the domain sync trigger
ERR_1304	Unable to add domain sync for authority
ERR_1305	Internal error contacting CAGW.
ERR_1306	Error while reading XML stream from upload.
ERR_1307	Unexpected exception while pushing certificate:
ERR_1308	HTTP Error while uploading certificate: `<Error>` : \n `<Response body>`
ERR_1309	Error while uploading certificate: `<Error>`
ERR_1310	Unable to parse properties for domain: `<Domain name>`
ERR_1311	User `<User ID>` doesn't have access to authority `<Authority ID>`
ERR_1312	Internal error contacting CAGW.
ERR_1313	Unable to get profiles for authority
ERR_1314	Unable to get the subject DN for authority
ERR_1315	Unable to get the Capabilities for authority
ERR_1316	Unexpected error contacting CAGW: `<Error>`
ERR_1330	User `<User ID>` does not have permission to view, edit or delete key manager `<Key manager>`
ERR_1331	Error verifying key manager config `<Key manager label>`
ERR_1332	saveOrUpdateKeyManager: Error converting plugin options to Json string from list
ERR_1333	Error converting plugin options to list from Json byte[]
ERR_1334	Error verifying key manager config for plugin `<Plugin name>`
ERR_1349	Failed to sync domains, Error from CAGW: `<Error>`
ERR_1350	Unexpected response received from CAGW
ERR_1351	Internal error contacting CAGW
ERR_1352	Unexpected response received from CAGW: `<Error>`
ERR_1353	Unexpected response received from CAGW: `<Error>`
ERR_1354	Unexpected response received from CAGW: `<Error>`
ERR_1355	Error configuring the SSL client connection to the CAGW APIs.
ERR_1356	Error configuring the SSL client connection to the CAGW APIs.
ERR_1357	Error configuring the SSL client connection to the CAGW APIs
ERR_1358	Error configuring the SSL client connection to the CAGW APIs.
ERR_1359	Error configuring the SSL client connection to the CAGW APIs.
ERR_1362	Error parsing authority certificate validity period: `<Certificate validity period>`
ERR_1363	Error parsing authority certificate validity period: `<Certificate validity period>`
ERR_1374	Error response from CAGW: `<Error>`
ERR_1375	Unable to parse properties for domain: `<Domain name>`
ERR_1376	Internal error contacting CAGW: `<Error>`
ERR_1377	Internal error contacting CAGW.
ERR_1378	Internal error contacting CAGW.
ERR_1379	Internal error contacting CAGW while responding to an authority request.
ERR_1380	Failed to create the authority domain sync schedule for authority `<Authority ID>`
ERR_1381	Failed to delete the authority domain sync schedule for authority `<Authority ID>`
ERR_1382	Certificate Authority `<Authority ID>` not found
ERR_1383	Unable to parse plugin options for authority `<Authority ID>`:
ERR_1384	Error response from CAGW while getting domain: `<Domain name>`
ERR_1385	Failed to get domain. Error from CAGW: `<Error>`
ERR_1386	Failed to submit domain, Error from CAGW: `<Error>`
ERR_1387	Unable to fetch whois record from server `<Server name>`. Error:
ERR_1388	Unable to close whois client connection with server `<Server name>`. Error:
ERR_1389	Unable to fetch whois record from default host. Error:
ERR_1390	Unable to close whois client connection with default server. Error:
ERR_1392	Error on DNS lookup : `<Error>`
ERR_1394	Failed to submit domain, Error from CAGW: `<Error>`
ERR_1397	Certificate Authority `<Authority ID>` not found
ERR_1398	Unable to parse plugin options for authority `<Authority ID>`
ERR_1399	Unable to import/update domain id `<Domain ID>` due to Json parsing error from authority `<Authority ID>`

Certificate Manager certificate errors

The application throws the following certificate errors.

Code	Message
ERR_1426	Renewal failed. Missing certificate id.
ERR_1427	Failed auto renewal for certificate `<Certificate ID>`.
ERR_1428	Automated renewal failed for certificate `<Certificate ID>` due to certificate processing error
ERR_1430	Automated renewal failed for certificate`<Certificate ID>` due to destination errors: `<List of errors>`
ERR_1431	Failed to find the renewal daemon user for auto renewal
ERR_1432	Failed to create the renewal schedule for cert `<Certificate serial>` : `<Error>`
ERR_1433	Failed to check the renewal schedule `<Error>`
ERR_1434	Failed to create the renewal schedule `<Error>`
ERR_1435	Adding definition for custom field with duplicate display order : `<Label>` of type `<Type>` at position `<Display order>`
ERR_1436	Deleting definition for custom field with Id : `<Metadata ID>` failed as it is in use by `<Certificates using metadata>` certificates
ERR_1437	Updating definition for custom field with duplicate display order : `<Label>` of type `<Type>` at position `<Display order>`
ERR_1438	Updating definition for custom field with Id : `<Metadata ID>` failed as it is in use by `<Certificates using metadata>` certificates
ERR_1439	Updating definition for custom field with duplicate display order : `<Metadata values>`
ERR_1440	Other certificate custom field definitions exists with same display order `<List>`
ERR_1441	Updating definition for custom field with Id : `<Metadata ID>` failed as one of its value `<List>` is in use by `<Certificates>` certificates
ERR_1442	Error parsing the value `<Value>` for custom field `<Metadata ID>`
ERR_1443	Unsupported Operator `<Operator>` for custom field Id: `<Metadata ID>`
ERR_1450	Could not unarchive certificate because entitlement limit reached.
ERR_1452	Error response from CAGW `<Error>`
ERR_1453	Error exporting a certificate: `<Error>`
ERR_1454	Failed to parse certificate `<Certificate name>` stored in DB. Error: `<Error>`
ERR_1455	Certificate Chain is not available for export
ERR_1456	Error while exporting certificate: `<Error>`
ERR_1457	Error saving chain to keystore for export of : `<Certificate name>`
ERR_1458	Error adding P12 to response stream
ERR_1459	Unable to parse response from CAGW to export certificate for : `<Certificate name>`. Error: `<Error>`
ERR_1460	Certificate can not be exported since the issuing Authority is not known
ERR_1461	Certificate Authority not found
ERR_1462	Error adding P12 to response stream
ERR_1463	Unexpected response received from CAGW when exporting a certificate
ERR_1464	Internal error contacting CAGW
ERR_1465	Failed to export certificate for `<Certificate name>`. Error from CAGW: `<Error>`
ERR_1466	Failed to export certificate for `<Certificate name>` with serial number `<Certificate serial number>`. Certificate key is not backed up.
ERR_1467	Unable to parse response from CAGW to export certificate for : `<Certificate name>`. Error: `<Error>`
ERR_1468	Export private key is not supported for export type `<Type>` You can uncheck \\\"Include Private Key\\\" and try again, however, your exported certificate will not have the private key
ERR_1469	Export certificate chain is not supported for export type `<Type>` You can uncheck \\\"Include Certificate Chain\\\" and try again, however, your exported certificate will not have certificate chain
ERR_1470	Public certificate must be requested for export type `<Type>`
ERR_1471	At least one of public certificate, certificate chain or private key must be requested for export type `<Type>`
ERR_1472	At least one of public certificate, certificate chain or private key must be requested for export type `<Type>`
ERR_1473	Unable to revoke the authority `<Authority name>`
ERR_1474	Unable to unhold the authority `<Authority name>`
ERR_1477	Error building certificate query with filter : `<Filter>`. Error `<Error>`
ERR_1478	Error fetching certificates with predicate : `<Predicate>`. Error `<Error>`
ERR_1479	Certificate Bulk Edit Error: 'certificatesFilter' missing from request body
ERR_1480	Certificate Bulk Edit Error: If 'clearOutAccessTags' is set, 'accessTags' must be empty.
ERR_1481	Certificate Bulk Edit Error: No updated values provided
ERR_1482	Certificate Bulk Edit Error building certificate query with filter : `<Filter>` , Error : `<Error>` .
ERR_1483	Certificate Bulk Edit Error building certificate query with filter : `<Filter>` , Error : `<Error>` .
ERR_1484	Certificate Bulk Edit Error updating certificates with filter : `<Filter>` , Error : `<Error>`
ERR_1486	Certificate unhold error : Could not find certificate with id: `<Certificate ID>` .
ERR_1487	Certificate unhold error : No Authority Id associated with this certificate: `<Certificate ID>` .
ERR_1488	Certificate unhold error : Cannot unhold certificate `<Certificate ID>`. Authority is not active : `<Authority ID>` .
ERR_1489	Certificate unhold error : Cannot unhold certificate `<Certificate ID>`. No external id found.
ERR_1490	Issue certificate error : Subject DN is required for CSR.
ERR_1491	Issue certificate error : CAGW failed to create certificate for authority `<Authority ID>`
ERR_1492	Issue certificate error : CAGW Failed to create certificate: `<Key manager ID>`.
ERR_1493	Issue certificate error : Subject DN is required for CSR.
ERR_1494	Issue certificate error : Subject DN is required for CSR.
ERR_1495	Issue certificate error : Subject DN is required for CSR.
ERR_1496	Issue certificate error : Subject DN is required for CSR.
ERR_1497	Failed to save certificate:`<Error>`
ERR_1498	Failed to upload certificate to the key manager `<Key manager ID>`. Error `<Error>`
ERR_1499	Certificate revoke error : No Authority Id associated with this certificate. `<Certificate ID>`
ERR_1500	Certificate revoke error : Cannot revoke certificate `<Certificate ID>`. Authority `<Authority ID>` is not active.
ERR_1501	Certificate revoke error : Cannot revoke certificate `<Certificate ID>`. No external id found.
ERR_1502	Failed to apply service-level filters on query `<Filter>`
ERR_1503	Failed to apply service-level filters on query `<Filter>`
ERR_1504	Failed to apply service-level filters on query `<Filter>`
ERR_1505	Could not find certificate with id `<Certificate ID>`
ERR_1506	Could not find certificate with id `<Certificate ID>`
ERR_1508	Failed to issue a certificate from authority `<Authority name>`. Error `<Error>`
ERR_1509	Failed to parse the X509 certificate `<Certificate body>` \n Message: `<Error>`
ERR_1510	Unable to find certificate `<Certificate ID>`
ERR_1511	Failed to process the certificate `<Certificate import request body>` \n Message: `<Error>`
ERR_1512	Failed to process the certificate `<Certificate body>` \n External ID: `<Certificate External ID>` \n Message: `<Error>`
ERR_1513	Failed to apply service-level filters on query `<Filter>`
ERR_1514	Failed to run the certificate count query: `<Error>`
ERR_1521	Error verifying source config `<Source Label>`
ERR_1522	Error verifying source config for plugin `<Plugin name>`
ERR_1523	addOrUpdateSource: Error converting plugin options to Json string from list
ERR_1524	Error scheduling source sync, sources will not ne scanned!
ERR_1525	Error creating certificate from certficate request
ERR_1526	Failed to send new external certificate request notification to approver(s). Error : `<Notification message>`
ERR_1527	Failed to send external certificate request cancellation notification to requestor. Error : `<Notification message>`
ERR_1528	Failed to send certificate request approval notification to requestor. Error : `<Notification message>`
ERR_1529	Failed to send certificate request rejection notification to requestor. Error : `<Notification message>`
ERR_1530	Failed to send new certificate request notification to internal requestor. Error : `<Notification message>`
ERR_1531	Failed to send new internal certificate request notification to approver(s). Error : `<Notification message>`
ERR_1533	Failed to send new certificate request notification to external requestor. Error: `<Notification message>`
ERR_1534	CSR key algorithm `<CSR key algorithm>` does not match the required key algorithm `<Allowed key algorithm>`
ERR_1536	CSR key algorithm keysize `<CSR key size>` does not meet minimum public key size required : `<Allowed key size>`
ERR_1537	Invalid certificate signing request provided
ERR_1540	Failed to send new certificate request notification to external requestor. SMTP Notification Plugin not found
ERR_1541	Failed to send certificate request cancellation notification to external requestor. SMTP Notification Plugin not found
ERR_1542	Failed to send new external certificate request notification to approver(s). SMTP Notification Plugin not found
ERR_1543	Failed to send new certificate request notification to admin. SMTP Notification Plugin not found
ERR_1544	Failed to send new internal certificate request notification to approver(s). SMTP Notification Plugin not found
ERR_1545	Failed to send notification for certificate request cancellation. SMTP Notification Plugin not found
ERR_1546	Failed to send notification for certificate request approval. SMTP Notification Plugin not found
ERR_2010	Found invalid certificate with name `<Certificate name>`.
ERR_2011	Unexpected exception while processing certificate.
ERR_2012	Error processing certificate.
ERR_2013	Error creating certificate factory.
ERR_2015	Failed to parse certificate `<Certificate name>` stored in DB. Error: `<Error message>`