The audit messages in this section are from the Cryptographic Security Platform Vault Management Appliance, the Cryptographic Security Platform Vault for Cloud Keys, the Cryptographic Security Platform Vault for Databases, and the Cryptographic Security Platform Vault for VM Encryption.

There are many audit messages produced by Cryptographic Security Platform Vault. Many of these are informative and require no action. In the table below, we list many of the audit messages and show:

  • Whether an Alert is also generated.
  • The severity (L=Low, M=Medium, H=High).
  • What the resolution is if any action should be taken.
  • In the Message column,

    • a %s represents a string value. For example, in the following message:

      Added user %s to group %s

      The actual message will be displayed with the name of the user and group, for example:

      Added user fred to group IT
    • a value in braces, such as {user_name}, represents a placeholder that is replaced with an actual value. For example, in the following message:

      '{user_name}' created the policy '{policy_name}'

      The actual message will be displayed with the name of the user and policy, for example:

      'Fred' created the policy 'Default_Policy'

Msg ID

Message

Severity

Alert?

Category

Description

Resolution

1

System License installed.

L

false

Security

A new license has been uploaded and installed.


2

Begin System Initialization

L

false

Security



3

Created group %s

M

false

Security

The specified admin group has just been created.


4

Created Domain %s

L

false

Security

This message appears during initialization of the first KeyControl node.


5

Added user %s to group %s

M

false

Security

The user shown has been added to the specified admin group.


6

Expired password for user %s

H

false

Security

A password has expired for the specified user.

The specified user needs to log into the GUI and change his/her password.

7

User %s logged out from ipaddr %s

L

false

Security

The specified user has just logged out from the IP address shown.


8

Changed following attributes for user Security Administrator :- Password, Password Expiration Date, Password History List

M

false

Security

One or more of the listed attributes has been changed for the user.


9

Changed SMTP Auth Settings

M

false

Security

Email settings have been modified.


10

EKS has been removed, not destroying old admin keypair

M

false

Security

Permission to use External Key Store has been removed. The old Admin Key was NOT removed on the EKS to allow restoration of older backups.

Informational only. Restore or add new access if so desired.

11

Regenerated Admin Key. The generation count of this key is %s. Reason: %s

H

true

Security



12

Created Cloud Virtual Machine Set %s

L

false

Security



13

Could not create Cloud Virtual Machine Set %s, HTCC server connection not configured

M

false

Security



14

Masterkey Recovered on node %s

H

true

Security



15

User %s logged in from ipaddr %s

L

false

Security

The specified user has just logged in from the IP address shown.


16

Repeated log in failures for %s from ipaddr %s

H

true

Security

There have been a succession of log in failures for the specified user.

A security admin should check whether the correct user has been trying to log in or not.

17

Account disabled for %s due to repeated log in failures

H

true

Security

The number of failed log in attempts has reached the maximum allowed value.

A security admin needs to reset the account to enable access.

18

Server registration failed -- No license Installed

H

true

Security



19

Attempt to register a new %s server "%s" failed -- licensed limit reached.

H

true

Security

The number of KeyControl servers is already at the limit imposed by the license. An attempt is being made to another node.

A new license will be required before the number of nodes in the cluster can be extended. Please contact hytrust.support@entrust.com

20

Storage Pool %s Filestore %s on server %s is low on space.

H

true

Clusters



21

Changed following Settings :- %s

M

false

Security



22

Changed following attributes for group %s :- %s

M

false

Security

One or more of the listed attributes has been changed for the group shown.


23

Virtual Machine %s authenticated

L

false

Security

A virtual machine has registered or re-authenticated.

This message is in response to direct admin actions. No action is required.

24

Virtual Machine %s created in group %s

L

false

Security



25

Removed Server %s from Cloud %s

L

false

Security



26

Created Cluster Info %s

L

false

Security



27

Removed Cluster Info %s

L

false

Security



28

Activated account for user %s

M

false

Security

A user's account has been activated.


29

Disabled account for user %s

H

false

Security

A user's account has been disabled.

A security admin should check to see if the account should be enabled again.

30

Created user %s

M

false

Security

The specified user has been created.


31

Deleted user %s

M

false

Security

The specified user has been deleted.


32

Renamed user %s to %s

L

false

Security

A username has been modified.


33

Deleted group %s

L

false

Security

The specified group has been deleted.


34

Renamed group %s to %s

L

false

Security

An admin group has been renamed.


35

Removed user %s from group %s

M

false

Security

The specified user has been removed from the group shown.


36

Using EKS for MasterKey protection

M

false

Security

An External Key Store has been configured to protect the Admin Key.


37

Admin Key regeneration failed. Failed to use external KMIP Server for MasterKey protection

M

true

Security

An External Key Store has been configured to protect the Admin Key but access was not allowed for keypair creation.

EKS denied access to create/retrieve an RSA keypair. Please check KMIP settings and configuration.

38

Could not register to HTCC, htcc server, password and log in must be specified

H

false

Security



39

Could not register to HTCC %s: HTCC log in failed

H

false

Security



40

Could not register to HTCC %s. Please check user privileges and Boundary Control License on HTCC

H

false

Security



41

Successfully registered with HTCC Server %s

M

false

Security



42

Keyid %s has %s

H

true

Security

Keyid has expired and/or rotated. Keys only expire if a Cloud Admin has explicitly set them to expire.


43

The Key for disk %s Virtual Machine %s has %s

H

true

Security

A key for the specified virtual machine has either expired or been rotated. Keys only expire or rotate if a Cloud Admin has explicitly set them to expire or rotate.


44

Key in VMSet %s on VMV %s has %s

M

true

Security



45

Changed following KeyControl cluster settings :- %s

M

false

Clusters

The name of the cluster has been modified.


46

Deleted Domain %s

M

true

Security



47

Changed following KPS Settings :- %s

M

false

Security



48

Changed following VS Appliance Settings :- %s

M

false

Security



49

Unknown pool %s appeared on VMV, destroying...

M

true

Security



50

Changed following Storage Pool Settings :- %s

M

false

Security



51

Changed following attributes of filestore %s :- %s

M

false

Security



52

Changed following settings for Cluster Info %s :- %s

M

false

Security



53

Coretrace Server %s, changed following attributes :- %s

M

false

Security



54

Changed following settings for Cloud VM Set %s :- %s

M

false

Security



55

Cloud VM Set %s changed group ownership from %s to %s.

H

false

Security



56

Deleted Cloud VM Set %s

M

false

Security



57

Cloud VM Set %s: added keyid %s using %s cipher

H

false

Security

A virtual machine user has explicitly requested creation of a KeyID using the specified cipher.


58

Cloud VM Set %s: Virtual Machine %s removed keyid %s

M

false

Security

A virtual machine user has explicitly requested deletion of the specified KeyID. It has been removed from the specified Cloud VM.


59

Cloud VM Set %s: updated keyid %s

L

false

Security

The KeyID description was changed.


60

Cloud VM Set %s: Virtual Machine %s attempted to fetch inactive keyid %s

M

false

Security

The KeyID shown has been revoked but an attempt was made to fetch it.

The cloud admin who owns the key should determine whether access should be reinstated or not.

61

Cloud VM Set %s: Virtual Machine %s attempted to fetch expired keyid %s

M

false

Security

An attempt has been made to fetch an expired KeyID.

The cloud admin who owns the key should determine whether access should be reinstated or not. This is only possible if the KeyID was set to 'No use?' on expiration.

62

Cloud VM Set %s: Virtual Machine %s fetched keyid %s

M

false

Security

A request has been made to access the specified KeyID.


63

Revoked permission for keyid %s

M

true

Security

KeyID is currently revoked. It must be activated before use.

The cloud admin who owns the key should determine whether access should be reinstated or not.

64

Granted permission for keyid %s

H

true

Security

KeyID has been activated after having been previously revoked.


65

Cloud VM Set %s keyid %s updated - description %s

L

false

Security

The description field for the specified KeyID has been updated.


66

Cloud VM Set %s keyid %s updated - key expires on %s, onexpiry %s

M

false

Security

The expiration date and effect on expiration for the specified KeyID have been updated.


67

Cloud VM Set %s Keyid %s has expired

M

true

Security

The specified KeyID has reached its expiration date.

The owning cloud admin should verify that the KeyID should be no longer used.

68

Keyid %s has expired

M

true

Security

A request to access an expired KeyID has been made.

The owning cloud administrator should verify that the KeyID should no longer be used.

69

The Key for keyid %s in Cloud VM Set %s expires in %d day(s).
Please extend the key life.

M

true

Security

A KeyID is about to expire.

The owning cloud administrator should verify whether the KeyID should expire and, if not, update the expiration date.

70

Unable to check keyid %s

M

false

Security

An error occurred while attempting to check properties of KeyID.

An internal error occurred while checking expiration/rotation properties for specific keyid. Informational only, keyid will be checked again.

71

Cloud VM Set %s: added fsid %s using %s cipher

M

false

Security



72

Cloud VM Set %s: Virtual Machine %s removed fsid %s

M

false

Security



73

Cloud VM Set %s: Virtual Machine %s updated fsid %s

M

false

Security



74

Revoked permission for fsid %s

M

true

Security



75

Granted permission for fsid %s

M

true

Security



76

Cloud VM Set %s fsid %s updated - key expires on %s, onexpiry %s

M

false

Security



77

Cloud VM Set %s Fsid %s has expired

M

true

Security



78

Properties changed for VMSet %s on server %s (%s)

M

false

Security



79

Virtual Machine %s, changed following attributes: %s

M

false

Security



80

Deleted Virtual Machine %s

L

true

Security



81

Deleted Certificate %s

L

false

Security

An unused certificate was deleted


82

The Virtual Machine %s, could not be checked for geo-location boundary. HTCC log in failed

H

true

Security



83

The Virtual Machine %s, is not in the geo-location boundary. Key access is denied

H

true

Security



84

The Virtual Machine %s, is in the geo-location boundary. Key access is granted

M

true

Security



85

Added Virtual Machine %s, authentication complete

L

true

Security

A virtual machine has completed registration.

This message is in response to direct admin actions. No action is required.

86

Added Virtual Machine %s, authentication pending

M

true

Security

A virtual machine has a registration request pending.

The cloud admin needs to complete authentication in the KeyControl GUI.

87

Removed Server %s from Cloud %s

L

false

Security



88

Renamed Server %s to %s

L

false

Security



89

Virtual Machine %s re-connected, authentication pending

H

true

Security

A virtual machine has a re-authorization request pending.

The cloud admin needs to complete re-authorization in the KeyControl GUI.

90

Revoked permissions for Virtual Machine %s

M

false

Security



91

Re-authenticated Virtual Machine %s from KPS

M

false

Security

A virtual machine has been re-authorized.

This message is in response to direct admin actions. No action is required.

92

Virtual Machine %s added disk %s

L

false

Security

A new disk has been added to the specified virtual machine.


93

Virtual Machine %s removed disk %s

L

true

Security

A disk has been removed from the specified virtual machine.


94

Virtual Machine %s : disk %s renamed to %s

L

false

Security



95

Virtual Machine %s attempted to fetch key for inactive disk %s. %s

L

false

Security

If a disk is not active, no keys will be delivered.


96

Virtual Machine %s attempted to fetch expired key for disk %s. %s

H

false

Security

If a key has expired an attempt by a virtual machine to fetch the key will fail.

The cloud admin should determine whether the expiration date should be extended. This does not apply to shredded keys.

97

Virtual Machine %s fetched key for disk %s. %s

L

false

Security

A key for the specified disk has been requested by the virtual machine shown.


98

Virtual Machine %s created key for disk %s using %s cipher

L

false

Security

A disk has been encrypted. The type of cipher is shown.


99

Virtual Machine %s revoked permission for disk %s

M

true

Security



100

Virtual Machine %s granted permission for disk %s

M

true

Security



101

Virtual Machine %s added mount point %s

L

false

Security

An encrypted folder has been mounted.


102

Virtual Machine %s removed fs %s

L

true

Security

An encrypted folder has been removed.


103

Virtual Machine %s attempted to fetch key for inactive fsid %s

M

false

Security

A virtual machine attempted to access an inactive FSID.

The cloud admin should determine whether the FSID should be made accessible.

104

Virtual Machine %s attempted to fetch expired key for fsid %s

H

false

Security

The FSID has expired and therefore the filesystem cannot be mounted.

The cloud admin should determine whether the FSID should be made accessible. This is only possible if the FSID has not been shredded.

105

Virtual Machine %s fetched key for fsid %s

L

false

Security

A filesystem was mounted using the specified FSID.


106

The Key for disk %s Virtual Machine %s has expired

H

true

Security

An attempt is being made to change properties for an already expired key.

The cloud admin should determine whether the key of the disk should be made accessible. This is only possible if the disk's key has not been shredded.

107

Virtual Machine %s set key expiry to %s, onexpiry to %s for disk %s

H

false

Security

An expiration date has been set on a key for the specified disk. The effect taken on expiration is shown.

The cloud admin should determine whether the expiration date should be extended.

108

The Certificate for Virtual Machine %s expire%s %d days%s.
Please renew the certificate.

M

true

Security



109

The Key for disk %s Virtual Machine %s has expired

H

true

Security

The key shown for the specified virtual machine has expired.

The cloud admin should determine whether the expiration date should be extended.

110

The Key for disk %s Virtual Machine %s expires in %d day(s).
Please extend the key life.

H

true

Security

The encryption key shown is about to expire.

The cloud admin should determine whether the expiration date should be extended.

111

Unable to check key for disk %s Virtual Machine %s

M

false

Security

An error occurred while attempting to check properties of key for the given disk and virtual machine.

An internal error occurred while checking expiration/rotation properties for specified key. Informational only, key will be checked again.

112

Virtual Machine %s rebooted, reauthentication required

H

true

Security

A virtual machine has rebooted and the reboot setting requires that the virtual machine is re-authenticated.

The cloud admin needs to complete re-authorization in the KeyControl GUI.

113

Virtual Machine %s has new alerts, please check

M

true

Security



114

Added Coretrace policy "%s" to Virtual Machine %s

L

true

Security



115

Activated Coretrace policy "%s" for Virtual Machine %s

M

false

Security



116

De-activated Coretrace policy "%s" for Virtual Machine %s

M

false

Security



117

Modified Coretrace policy "%s" for Virtual Machine %s

M

false

Security



118

Removed Coretrace policy "%s" for Virtual Machine %s

M

false

Security



119

Deleted CAStore %s

M

false

Security



120

Removed Server %s from Domain %s

L

false

Clusters



121

Storage pool %s created on server %s (%s)

L

false

Security



122

Storage pool %s extended on server %s (%s)

L

false

Security



123

Log added to Storage pool %s on server %s (%s)

L

false

Security



124

Log removed from Storage pool %s on server %s (%s)

L

false

Security



125

Storage pool %s deleted from server %s (%s)

L

false

Security



126

Disk added to hot spare list on server %s (%s)

L

false

Security



127

Disk removed from hot spare list on server %s (%s)

L

false

Security



128

Filestore %s created on server %s (%s)

L

false

Security



129

Filestore %s deleted from server %s (%s)

L

false

Security



130

Removed server %s (%s) from domain %s

L

true

Clusters



131

KMIP Server restarted on %s

M

false

Security

The KMIP server has been restarted on the specified host.


132

KMIP Server started on %s

L

true

Security

The KMIP server has been started on the specified host.


133

KMIP Server halted on %s

H

true

Security

The KMIP server has been halted on the specified host.


134

KMIP Server: All client certificates removed

H

true

Security

All client certificates have been removed from the KMIP server.


135

KMIP Server: Client certificate %s removed

H

true

Security

The specified client certificate has been removed from the KMIP server.


136

KMIP Server: Client certificate %s updated

M

false

Security

The specified client certificate has been updated on the KMIP server.


137

KMIP Server: Client certificate %s created

M

true

Security

The specified client certificate has been created on the KMIP server.


138

Could not store oskey on %s/%s. Needs recovery

H

true

Clusters

Could not store object store key on joining KeyControl node

KC join did not succeed, node should be removed from cluster. If problem persists contact support.

139

Reconnect not allowed for %s/%s. Please follow reauthentication steps

H

true

Clusters

KC has attempted to reauthenticate with cluster that does not recognize it

KeyControl node likely was in the cluster and removed. Should be re-joined

140

Cluster join failed for %s/%s.

H

true

Clusters

KC has failed to join cluster

KeyControl node join can be attempted again. If problem persists contact support

141

Reconnect info does NOT match. Follow reauthentication steps for node %s/%s

H

true

Clusters

KC has attempted to reauthenticate with cluster but its info has changed

KeyControl node likely needs MasterKey recovery or kicked out of cluster and re-joined

142

Could not store connection info for %s/%s

H

true

Clusters

KC cannot store info to reconnect to cluster on restart

Condition could be transitory, node could be restarted. Also could indicate that KC disk is full

143

Problem with auth/secd communication

H

true

Clusters

Communication stack on KC is not working


144

System utilities NOT functioning. Authentication will not happen

H

true

Clusters

Auth daemon unable to query system information


145

Attempt to add node %s/%s which has valid data but no clusterid. Please reauthenticate if this is a valid action.

M

true

Clusters

KC was formerly in a cluster that has no identifying cluster ID

If action is a valid one, proceed with join. Note that the KC data on joining node will be destroyed

146

Attempt to add node %s/%s which has a different clusterid. Please reauthenticate if this is a valid action.

M

true

Clusters

KC was formerly in a different cluster than the one it is attempting to join

If action is a valid one, proceed with join. Note that the KC data on joining node will be destroyed

147

Could not restore cluster to normal operating mode after adding new node, error $rc

M

true

Clusters

KC cluster state could not be restored to normal operating state

Can indicate cluster join issues

148

{$prodname} Server system hostname ($myip) $act.

L

false

Clusters



149

Restricted support log in enabled on hostname

M

true

Security

Restricted support log in was enabled on KC


150

%s support log in enabled on hostname

M

true

Security

Full or Restricted support log in was enabled on KC


151

%s support log in disabled on hostname

M

true

Security

Full or Restricted support log in were disabled on KC


152

KeyControl node {$myip[0]}/{$myhost[0]} has failed upgrade to version {$curver}

H

true

Clusters

KC upgrade to new version has failed

KC will revert to prior install. Upgrade can be attempted again if valid or contact support

153

KeyControl node {$myip[0]}/{$myhost[0]} reverted from {$str[1]} to {$str[2]}

M

true

Clusters

User initiated revert to previous version has succeeded.


154

KeyControl node {$myip[0]}/{$myhost[0]} has successfully upgraded to version {$curver}

M

true

Clusters

KC upgrade to new version has succeeded.


155

KeyControl node {$myip[0]}/{$myhost[0]} has failed upgrade finalization to version {$curver}

H

true

Clusters

KC upgrade to new version has failed

KC will revert to prior install. Upgrade can be attempted again if valid or contact support

156

Hostname %s, Management IP %s, Current Version %s, New Version %s. Upgrade from version {$oldver} (b{$oldrevision}) to version {$curver} (b{$newrevision}) not allowed. Consult product documentation for upgrade procedure

H

true

Clusters

KC upgrade to this version is not supported from current version

Upgrade to a supported version and/or contact support

157

Upgrade from version {$oldver} to version {$curver} not officially supported but allowed for development

L

true

Clusters

KC upgrade to this version is not officially supported but allowed for development build


158

Internal error $ret checking upgrade from {$oldver} to {$curver}

H

true

Clusters

An error has occurred attempting to valid upgrade

Contact support

159

Multiple KeyControl nodes still in cluster. All excess KeyControl nodes must be removed before upgrade.

H

true

Clusters

Upgrade should be attempted on only a single node cluster

Remove all nodes from cluster except the node to be upgraded

160

Insufficient free space to perform upgrade. Consult product documentation for procedure to add another disk

H

true

Clusters

Disk does not have enough space for upgrade

Consult support for freeing disk space or create/join a node with more space and upgrade that

161

System has reverted to prior installation.

L

true

Clusters

System has successfully reverted to prior version


162

Failed revert to prior installation.

H

true

Clusters

System failed to revert to prior version

Contact support. Current version is still in place

163

System utilities NOT functioning.

H

true

Clusters

Unable to query system info


164

Error resizing partition

H

true

Clusters

An error occurred while resizing the KeyControl storage. Please contact support.


165

Error resizing storage pool

H

true

Clusters

An error occurred while resizing the KeyControl storage. Please contact support.


166

Successfully resized KeyControl storage pool

M

false

Clusters

The storage pool on the KeyControl node was successfully resized.


167

KMIP Server operation failed - internal error

M

true

Security

KMIP server operation failed with an internal error.

Consult support or retry operation

168

%s operation %s for %s on %s, TaskId: %s.

L

false

Security

A task has changed state


169

Virtual Machine %s : disk %s resized to %s

L

false

Security

Virtual Machine disk is resized


170

Virtual Machine %s : KC mapping %s attached

L

false

Security

A KC Mapping is attached to a virtual machine


172

Passwd changed for htadmin

M

true

Security

An admin reset console/htadmin passwd


173

User %s failed to change %s passwd

M

true

Security

An administrator attempted to reset the console/htadmin password, but the operation failed.


174

A support event has occurred on {$prodname} node %s. Please create a Support Bundle and include core files as described in the online help, then contact support.

H

true

Security

A support event has occurred. Generate a support bundle and contact Entrust Support for assistance.


175

New certificate created with guid %s in group %s

L

false

Security

A new certificate has been created for use with policy agent or KMIP server


176

Backup created successfully for %s (%s)

L

false

Clusters

A new backup image has been created on the KeyControl appliance


177

Failed to create backup for %s (%s)

M

false

Clusters

Creation of the backup image failed.

Backup will be retried automatically or can be triggered manually via the WebGUI

178

{$prodname} Cluster is in normal mode

L

false

Clusters

The KeyControl cluster state has returned to normal operating mode


179

{$prodname} Cluster is in degraded mode

H

false

Clusters

The KeyControl cluster has gone into degraded mode. This occurs when the KeyControl nodes in the cluster are not able to communicate successfully

Check the availability and connectivity of the KeyControl nodes in the cluster

180

{$prodname} Cluster is in standby mode

L

false

Clusters

The KeyControl cluster is in a standby state. This is a temporary state which occurs when a node is joining the cluster


181

Freespace available on %s has fallen below 2G. Consider increasing the storage capacity of this system.

H

true

Security

The amount of free disk space available to the KeyControl appliance has dropped below our recommended threshold. Please increase the size of the disk or contact support for more assistance

Increase the size of the disk and reboot the KeyControl appliance to resize

182

Login failure for %s from %s

L

false

Security

User unsuccessfully attempted to log in to the KeyControl instance


183

Reboot of %s initiated by %s

M

true

Clusters

Domain administrator initiated reboot of KeyControl node


184

KeyControl node reboot initiated from console

M

true

Security

The KeyControl node was rebooted from the console


185

KeyControl node shutdown initiated from console

M

true

Security

The KeyControl node was shut down from the console.


186

Azure agent: illegal attempt to install plugin

M

true

Security

Azure "extensions" (a.k.a. "plugins") to a KeyControl virtual machine are not allowed


187

Azure agent: illegal attempt to disable or uninstall a plugin

M

true

Security

Azure "extensions" (a.k.a. "plugins") to a KeyControl virtual machine are not allowed


188

%d inactive tasks found on Cloud VM Set %s. %s task for %s on %s not updated since %s, TaskId: %s.

L

true

Security

List of tasks that have not been updated for a long time


189

Updated LDAP configuration: %s

M

false

Security

The values for the given LDAP fields have been updated


190

Virtual Machine %s synchronized devices.
Following devices were not found - %s

M

false

Security

The Policy Agent synchronized the registered device list; some devices not found


191

Virtual Machine %s synchronized devices.
Reason for sync: %s

M

true

Security

The Policy Agent synchronized the registered device list


192

Virtual Machine %s state for disk %s changed to %s. %s

L

false

Security

Disk state on policy agent changed


193

HyTrust bootloader ssh key updated for %s

L

false

Security

Private key required for ssh log in to Hytrust bootloader updated on KC


194

Two-factor authentication enabled for %s

L

false

Security

Two factor authentication has been enabled for the user


195

Two-factor authentication disabled for %s

M

true

Security

Two factor authentication has been disabled for the user


196

{$prodname} Cluster is in degraded mode during node-join

L

false

Clusters

The KeyControl cluster has gone into degraded mode while a new node is joining the cluster. This occurs as KeyControl restarts communication protocols after a new node has joined the cluster.


197

{$prodname} Cluster is in normal mode during node-join

L

false

Clusters

The KeyControl cluster has gone into normal mode while a new node is joining the cluster. This occurs as KeyControl restarts communication protocols after a new node has joined the cluster.


198

New AppLink created to %s

M

true

Clusters

A new Application Link has been created. This link will allow secure communication between the Entrust products.


199

Application link removed for Product (%s) Version (%s) IP List (%s)

L

false

Clusters

Application link has been removed for the external product.


200

admin user logged in successfully

M

false

Security

htadmin account log in successful in one of the KeyControl nodes


201

%s account logged in from

M

false

Security

Full support account log in successful in one of the KeyControl nodes


203

%s account log in failure from -

M

false

Security

Failed attempt to log in to full support account


204

Full support account logged in from and executed

M

false

Security

Full support account log in successful and executed a command


205

%s account log in failure from attempting

M

false

Security

Failed attempt to log in to full support account and execute command


206

Created new log bundle - %s with options - %s

L

false

Security

New log bundle creation has been initiated by some user


207

Downloaded log bundle - %s

L

false

Security

Latest log bundle has been downloaded by some user


208

Exported Cloud VM Set %s

M

false

Security

A Cloud VM Set has been exported


209

Imported Cloud VM Set %s

M

false

Security

A Cloud VM Set has been imported


210

Following guests have unsupported policy agent installed in Cloud VM Set %s:
%s(%s)

M

true

Security

A Cloud VM Set has guests with unsupported agent version

Upgrade policy agent on reported guests

211

Unsupported Policy Agent (version %s ) detected on guest %s.

M

false

Security

A guest has an unsupported agent version installed

Upgrade policy agent on reported guest

212

Download of admin key generation %s initiated by %s

M

false

Security

Download of admin key initiated via admin_key GET call


213

Reset of KMIP server initiated

M

false

Security

Reset of KMIP server initiated


214

KMIP Response/Request:

M

false

Security

Create, destroy or revoke of KMIP object initiated


215

KMIP Response/Request:

M

false

Security

Operation on some KMIP object initiated


216

The Certificate for Virtual Machine %s will auto-renew in %d days%s.

L

true

Security



217

The Certificate for Virtual Machine %s failed to auto-renew. Certificate expire%s %d days%s.
Please renew the certificate.

H

true

Security



218

Set Key Encryption Key expiry to %s onexpiry to %s, for Cloud VM Set %s. %s Cloud VMs affected.

H

false

Security

An expiration date has been set for Key Encryption Key for the specified Cloud VM Set. The effect taken on expiration is shown.

The cloud admin should determine whether the expiration date should be extended.

219

The Key Encryption Key for Cloud VM Set %s expire%s in %d days%s.

H

true

Security


The cloud admin should determine whether the expiration date should be extended.

220

The Key Encryption Key for Cloud VM Set %s has expired. %s Cloud VMs affected.

H

true

Security

The Key Encryption Key for specified Cloud VM Set has expired.

The cloud admin should determine whether the expiration date should be extended.

221

Access to Key Encryption Key of Cloud VM Set %s has been revoked. %s Cloud VMs affected.

H

true

Security

Access to specified Cloud VM Set has been revoked.


222

Access to Key Encryption Key of Cloud VM Set %s has been granted. %s Cloud VMs affected.

H

true

Security

Access to specified Cloud VM Set has been granted.


223

The Key Encryption Key for Cloud VM Set %s has expired. %s Cloud VMs deleted. Deleted CVM Set %s.

H

true

Security

The Key Encryption Key for specified Cloud VM Set has expired.


224

The Certificate for Virtual Machine %s failed to auto-renew as the Virtual Machine is unreachable.

H

true

Security

The Certificate Auto Renewal of a virtual machine fails if the virtual machine is in auto renewal period and is unreachable.


225

Authentication of Server %s (%s) failed due to incorrect passphrase

H

false

Security

Authentication of KeyControl node failed due to incorrect passphrase.


226

Cloud VM Set creation failed. Error: Failed to store key in HSM. %s

H

true

Security

Cloud VM Set creation failed. Failed to store key in HSM.

A security admin should check whether the HSM connection is configured properly

227

Key Encryption Key import failed. Error: Failed to store key in HSM. %s

H

true

Security

Key Encryption Key import failed. Failed to store key in HSM.

A security admin should check whether the HSM connection is configured properly

228

Failed to fetch Key Encryption Key from HSM. Error: %s

H

true

Security

Failed to fetch Key Encryption Key from HSM.

A security admin should check whether the HSM connection is configured properly

229

Successfully imported Key Encryption Key for Cloud VM Set %s.

M

false

Security

Successfully imported Key Encryption Key


230

Removed Domain %s from group %s

L

false

Security

Removed Domain from group


231

Authenticated Server %s (%s)

L

false

Clusters

New KeyControl node has been successfully authenticated and added to the cluster


232

Added Server %s (%s) to Domain %s

L

false

Clusters

Server has been successfully added to a domain


233

Invalid Key Encryption Key size specified for Cloud VM Set %s.

H

true

Security

Invalid Key Encryption Key size

Verify that the Key Encryption Key size is 128 bits or 256 bits

234

Retention period has expired for Cloud VM Set %s. %s Cloud VMs deleted. Deleted Cloud VM Set %s.

L

true

Security

Retention period has expired for Cloud VM Set


235

Retention period for Cloud VM Set %s will expire in %d days.

H

true

Security

Retention period expiration for Cloud VM Set

The cloud admin should determine whether the retention date should be extended.

236

Set Retention Date to %s for Cloud VM Set %s.

L

false

Security

Changed Retention period for Cloud VM Set


237

Failed to delete Key Encryption Key from HSM for Cloud VM Set %s. Error: %s.

M

true

Security

Failed to delete Key Encryption Key from HSM


238

New CA Certificate added to Certificate Store for verifying %s

L

false

Clusters

New CA certificate has been added to verify some subsystem


239

CA Certificate for %s removed from Certificate Store

H

false

Clusters

CA Certificate for some subsystem has been removed from Certificate Store


240

Authentication for LDAP user %s failed. Reason :- %s

H

false

Security

Reason for LDAP log in failures


241

Cannot register Cloud VM until Key Encryption Key for Cloud VM Set %s is imported

L

true

Security

Cannot register Cloud VM


242

Virtual Machine %s HTcrypt driver update -- %s

L

false

Security

HTcrypt driver state on policy agent changed


243

New self-signed certificates generated for %s

L

false

Clusters

New self-signed certificates generated for server


244

New SSL certificate installed for %s

L

false

Clusters

New SSL certificate installed for server


245

CSR generated with common name - %s

L

false

Clusters

New CSR generated


246

Web server for %s restarted

L

false

Clusters

Webserver/Apache restarted for server


247

Certificate installation task got timed out. There are VMs that did not receive the new CA certificate. Please contact Cloud Administrators to log in to the Virtual Machine and execute hcl heartbeat before restarting the webserver

H

true

Clusters

One (or more) policy agents did not receive the new CA certificate uploaded. Cloud administrator has to log in to the policy agent and execute hcl heartbeat


248

Cannot update CA as part of SSL certificate installation for %s. Please log in to the Virtual Machine and execute hcl heartbeat

H

true

Clusters

Domain Administrator has attempted to install a new SSL certificate for the webserver. Unfortunately one of the policy agents did not receive a copy of the new CA certificate that can verify the SSL certificate of the webserver. Cloud administrator has to log in to the policy agent and execute hcl heartbeat


249

External web server certificate of %s has expired. A new certificate must be installed before the associated VMs can communicate with %s. After the new certificate has been installed, the certificate information on the associated VMs must be manually updated if the new certificate is from a different Certificate Authority. For more information, search for certificates in the WebGUI online help.

H

true

Clusters

Certificate used by the external webserver of one of the nodes has expired. Domain administrator has to install a new certificate. If the newly installed certificate is generated by a new CA, cloud administrators will have to log in to policy agent and update the CA certificate file. The latest CA certificate file can be found in the cloud tab in WebGUI


250

External web server certificate of %s will expire in %s days, %s hours and %s minutes. If another certificate is not installed before the current one expires, the VMs will not be able to communicate with %s after %s and all VMs may need to be manually updated after the new certificate is installed. For more information, search for certificates in the WebGUI online help.

H

true

Clusters

Certificate used by the external webserver of one of the nodes is about to expire. Domain administrator has to install a new certificate before it gets expired. Otherwise policy agents will not be able to communicate with the KC after expiry


251

CA certificate used for verifying %s:%s on %s has already expired. Please upload a new CA certificate to verify the %s server certificate. Otherwise %s users will not be able to log in to the WebGUI.

H

true

Clusters

CA certificate used by the LDAP server has already expired. Security Administrator has to install a new certificate to verify the LDAP server certificate. Otherwise LDAP users will not be able to log in to the WebGUI.


252

CA certificate used for verifying %s:%s on %s will expire in %s days, %s hours and %s minute. If another CA certificate is not installed before the currentone expires, %s users will not be able to log in to the WebGUI after %s.

M

true

Clusters

CA certificate used for evaluating LDAP server certificate is about to expire. Security Administrator has to install a new certificate before the current one expires. Otherwise LDAP users will not be able to log in to the WebGUI after the CA certificate expiry date.


253

Certificate for %s:%s has already expired. Please re-configure %s after updating the certificate in %s.

H

true

Clusters

Certificate for APPLINK has already expired. APPLINK should be reconfigured after uploading a new certificate.


254

Certificate for %s:%s will expire in %s days, %s hours and %s minutes. Once the certificate of %s is updated, please re-configure the %s:%s

M

true

Clusters

Certificate for APPLINK is about to get expired. Security Administrator has to install a new certificate and re-configure the APPLINK before the current one expires.


255

{$prodname} Cluster is in maintenance mode

L

false

Clusters

The KeyControl cluster is in maintenance state. This is a temporary state which occurs during upgrade process


256

Virtual Machine with IP %s is a possible clone of %s (%s) and hardware signature verification is turned off.

H

true

Security

A possible clone of a virtual machine that is already registered has been detected. Verify that the virtual machine is valid and register it as a new virtual machine using 'hcl register -c' command.


257

{$prodname} node %s has been successfully upgraded from version %s to version %s

M

true

Clusters

CSP Vault node upgrade to new version has succeeded.


258

{$prodname} node %s has been successfully reverted from version %s to version %s

M

true

Clusters

CSP Vault node revert to old version has succeeded


259

Access Control Policy: %s, at version: %s applied to disk: %s on Virtual Machine: %s

H

true

Security

Access Controls Policy version update to disk.


260

Access Control Policy removed from disk: %s on Virtual Machine: %s

H

true

Security

Access Controls Policy removed.


261

New Access Control Policy: %s created.

L

false

Security

New Access Control Policy Created.


262

Access Control Policy: %s updated. Policy now available as: %s.

H

false

Security

Access Control Policy Updated.


263

Access Control Policy: %s deleted.

L

false

Security

Access Control Policy Deleted.


264

Access Control Rule: %s added to Policy: %s.

H

false

Security

New Access Control Rule added to Policy.


265

Access Control Rule: %s updated for Policy: %s.

H

false

Security

Access Control Rule updated for Policy.


266

Access Control Rule: %s deleted from Policy: %s.

H

false

Security

Access Control Rule deleted from Policy.


267

hytrust_accesscontrols rpm state changed to: %s on Virtual Machine: %s

M

false

Security

HyTrust Access Controls rpm state changed


268

Initiated application of Access Control Policy: %s to disk: %s on Virtual Machine: %s.

H

false

Security

Access Control Policy application initiated by Admin.


269

Initiated removal of Access Control Policy: %s from disk: %s on Virtual Machine: %s.

H

false

Security

Access Control Policy removal initiated by Admin.


270

Created Cloud VM Set %s with Single Encryption Key

L

true

Security

CVMSet created with Single Encryption Key for dedup


271

Failed to upgrade {$prodname} nodes: %s. Reverting upgraded nodes: %s

L

true

Clusters

Failed to upgrade KeyControl nodes.


272

Failed to revert {$prodname} nodes %s. Remove nodes %s after reboot.

L

true

Clusters

Failed to revert KeyControl nodes.


273

Upgrade Cancelled. Error: %s

L

true

Clusters

Failed to finalize upgrade.


274

%s got reverted during upgrade. Reverting other nodes in the cluster to version %s

L

false

Clusters

Failed to upgrade KeyControl node.


275

Successfully cancelled {$prodname} upgrade.

M

false

Clusters

Cancelled KeyControl Upgrade.


276

IP conflict detected for %ipaddr with MAC %this_mac on %this_month %this_day %this_time

H

true

Security

Another virtual machine is/was using this KeyControl IP address.


277

Access Controls removed successfully on Virtual Machine %s

H

true

Security

Successful Access Controls removal on virtual machine


278

Applying Policy %s, version %s failed on Virtual Machine %s. %s

H

true

Security

Policy application failure on virtual machine with reason.


279

Applying Policy %s, version %s failed on disk %s of Virtual Machine %s

H

true

Security

Failure in Policy application on a specific disk of a virtual machine.


280

Error removing Access Control Policy on disk %s of Virtual Machine %s

H

true

Security

Error removing Access Control Policy on a disk.


281

%s doesn't allow local user creation. Cannot support Access Controls

H

true

Security

virtual machine doesn't support Access Controls due to inability to create local users


282

%s doesn't allow ssh for localhost. Cannot support Access Controls

H

true

Security

Cannot setup Access Controls on virtual machine since it doesn't allow ssh for localhost


283

%s doesn't allow password-based ssh log in. Cannot support Access Controls

H

true

Security

Cannot setup Access Controls on virtual machine since it doesn't allow password-based ssh log in.


284

Access Control setup failed on Virtual Machine %s. Please check /var/log/htac.log on Virtual Machine for more details

H

true

Security

Failure in initial Access Controls setup


285

Insufficient free space on %s to perform upgrade. Consult product documentation for procedure to add another disk

H

true

Clusters

Disk does not have enough space for upgrade

Consult support for freeing disk space or create/join a node with more space and upgrade that

286

Access Control tampering detected on Virtual Machine %s

H

true

Security

Access Control Tampering


287

Error enforcing policy %s, version %s on Virtual Machine %s. %s

H

true

Security

Access Control Policy application failure due to htadmin error


288

New AD Server: %s created.

L

false

Security

Create AD Server


289

Updated AD Server config: %s.

L

false

Security

Updated AD Server config


290

Deleted AD Server: %s.

L

false

Security

Deleted AD server


291

User account htadmin already exists on Virtual Machine %s. Please delete htadmin, before enforcing Access Control Policy

L

true

Security

Local user account htadmin detected before Access Control pre-setup tests


292

Virtual Machine - %s cannot verify communications from KeyControl because the KeyControl SSL certificate has changed but the CA certificate on the Virtual Machine was not updated when the new SSL certificate was installed for KeyControl. To update the CA certificate on the Virtual Machine and restore connectivity, log into the WebGUI, download the latest CA certificate from Cloud tab > Actions > Download CA Certificate, copy the CA certificate to the Virtual Machine, and execute "hcl update_ca -f </path/to/cert>"

H

true

Security

SSL certificate of KeyControl has changed and webserver has been restarted. One of the VMs did not receive the latest copy of the CA certificate to verify KeyControl. To restore communication, download the latest CA certificate from WebGUI cloud tab, copy it to the virtual machine and execute hcl update_ca command


295

Virtual Machine %s is using an older Hardware Signature format. Please run "hcl auth" cmd on the Virtual Machine for a more secure signature.

H

true

Security

virtual machine is using an older Hardware Signature format. Please run "hcl auth" cmd on the virtual machine for a more secure signature.


296

Alert email sent to Security Admins on upgrade.

L

true

Security

Alert email sent to Security Admins on upgrade.


297

Abandoning %d inactive tasks on %s. Abandoning %s task %s on %s not updated since %s, TaskId: %s

L

true

Security

List of tasks that have been abandoned due to inactivity


298

Error!!! Could not enable support log in. Please make sure there is enough space in the filesystem

H

true

Security

Cannot enable support log in. Please make sure there is enough space in the file-system

Increase the size of the disk and reboot the KeyControl appliance to resize

299

Error!!! Could not disable support log in. Please make sure there is enough space in the filesystem

H

true

Security

Cannot disable support log in. Please make sure there is enough space in the file-system

Increase the size of the disk and reboot the KeyControl appliance to resize

300

%s attempting %s account log in when object store is not readable

M

false

Security

Attempt to log in to support log in in one of the KeyControl nodes when object store is down


301

Decryption is not allowed for device %s on Virtual Machine %s. To decrypt: Access Control Policy : %s Version: %d must be removed from device. Auto Encryption Policy should be changed so as to exclude the device.

L

true

Security

Device decryption refused due to applied policies.

Change policies as suggested in error message.

302

Space on HyTrust Bootloader partition %s is running low (%lld bytes free). Often times USN journal is the culprit. You can check USN journal size using the command: "fsutil usn queryjournal %s". To delete USN journal, use the command: "fsutil usn deletejournal /N %s "

H

true

Security

Device decryption refused due to applied policies.

Change policies as suggested in error message.

303

Login failure for %s from %s because %s is in lock out period.

M

false

Security

Attempt to log in to secroot in the lock out period after repeated unsuccessful log in attempts


304

Changed AD group members for group %s. %s

L

false

Security

List of AD Group members has been changed for a KeyControl Group


305

The current number of KeyControl nodes (%d) exceeds the maximum number of nodes allowed by your license (%d). You cannot add any more KeyControl nodes to this cluster until you upgrade your license.

M

true

Security

KeyControl nodes in use exceeds license limit of installed license


306

The current number of VMs registered with this KeyControl cluster (%d) exceeds the maximum number of VMs allowed by your license (%d). You cannot register any additional VMs until you upgrade your license.

M

true

Security

Registered virtual machine count exceeds license limit of installed license


307

Service %s is up

L

false

Security

KeyControl system service is up


308

Service %s is down

H

true

Security

KeyControl system service is down


309

Using AD group membership for %s - %s

M

false

Security

AD group membership of the AD user that was returned by the LDAP server during first time log in. The ADgroup membership will be used to determine the KeyControl Group membership of the AD user.


310

Updating AD group membership for %s - %s

M

false

Security

AD group membership of the AD user that was returned by the LDAP server. The new ADgroup membership will be used to determine the KeyControl Group membership of the AD user who has already logged into KeyControl previously.


311

Added KMIP client configuration. Server: %s

L

false

Security

Added KMIP client configuration


312

Updated KMIP client configuration. Server: %s

L

false

Security

Updated KMIP client configuration


313

Deleted KMIP client configuration. Server: %s

H

true

Security

Deleted KMIP client configuration


314

Deleted all KMIP client configurations.

H

true

Security

Deleted KMIP client configuration


315

Failed to delete key:%s on external KMIP server

M

false

Security

Failed to delete key on KMIP server


316

Added AD Domain: %s

L

false

Security

Added a new AD Domain


317

Updated AD Domain %s. Changed Attributes - %s

L

false

Security

Updated the AD Domain


318

Removed AD Domain %s

L

false

Security

Removed AD Domain from KeyControl


319

Added new Domain Controller %s for AD Domain %s

L

false

Security

Added a new AD Domain Controller


320

Updated Domain Controller %s for AD Domain %s. Changed Attributes - %s

L

false

Security

Updated Domain Controller


321

Removed Domain Controller %s for AD Domain %s

L

false

Security

Removed Domain Controller from KeyControl


322

encrypt failed for device %s on Virtual Machine %s, error %d

M

true

Security

Encrypt operation failed on virtual machine


323

decrypt failed for device %s on Virtual Machine %s, error %d

M

true

Security

Decrypt operation failed on virtual machine


324

rekey failed for device %s on Virtual Machine %s, error %d

M

true

Security

Rekey operation failed on virtual machine


325

Successfully deleted admin key on EKS: %s

M

false

Security

Successfully deleted admin key on KMIP server


326

Successfully generated admin key on EKS: %s

M

false

Security

Successfully generated admin key on KMIP server


327

Failed to generate admin key on EKS: %s

H

true

Security

Failed to generate admin key on KMIP server


328

Failed to store admin key on EKS: %s

H

true

Security

Failed to store admin key on KMIP server


329

Successfully stored admin key on EKS: %s

M

false

Security

Successfully stored admin key on KMIP server


330

Failed to fetch admin key from EKS: %s

M

true

Security

Failed to fetch admin key from KMIP server


331

{$prodname} upgrade failed. Please contact Support

H

true

Clusters

Post upgrade failed


332

Domain Controllers re-ordered for %s

L

false

Security

Order of Domain Controllers has been changed for an AD domain configured


333

Failed to set backup hosts to %s on %s

H

true

Security

Failed to update backup hosts


334

Virtual Machine %s is in BoundaryControl grace period

M

true

Security

virtual machine in Boundary Control grace period


335

Virtual Machine %s, BoundaryControl grace period expired

M

true

Security

virtual machine Boundary Control grace period expired


336

Application Link created from Product (%s) Version (%s) IP List (%s)

L

false

Clusters

A new Application Link has been created from an external product. This link will allow the external product to make API calls to KeyControl.


337

Application Link renewed for Product (%s) Version (%s) IP List (%s)

L

false

Clusters

An Application Link has been renewed for the external product.


338

Failed to upgrade LDAP Settings. Please reconfigure LDAP settings manually

H

true

Security

Failed to upgrade LDAP Settings.


339

Failed to store admin key on HSM

H

true

Security

Failed to store admin key on HSM


340

Removed Server(s) %s from Domain %s

L

true

Clusters



341

Grace period will expire on %s for Virtual Machine %s, please check connectivity

H

true

Security



342

Grace period expired for Virtual Machine %s, please authenticate again

H

true

Security



343

Virtual Machine %s, failed to update following attributes: %s

H

false

Security

Failed to update virtual machine settings


344

Finished propagating changed attributes: %s to all Virtual Machines in Cloud VMSet: %s

H

false

Security

Propagation of changed attributes completed for CVMSet


345

Invalid software was discovered on KeyControl system %s. This is a possible trojan horse attack. Contact Support for assistance

H

true

Security

Whitelisting violation detected on production build


346

Entrust Whitelist validation on KeyControl system %s has discovered modified files. These changes are allowed for development systems, but please review Whitelist logs for correctness.

L

true

Security

Whitelisting violation detected on development build


347

Could not set password for %s: %s

H

true

Security

Failed to set password


348

Password changed for %s

H

true

Security

Password changed


349

Enabled %s user

H

true

Security

Enabled user


350

Failed to enable %s user

H

true

Security

Failure in enabling user


351

Disabled %s account

H

true

Security

Disable account


352

%s user logged out successfully

L

false

Security

User logout


353

Could not download the certificate: %s

M

true

Security

Download certificate failure


354

Downloaded a new CA certificate

M

true

Security

Downloaded CA certificate


355

ssh %sd for %s

M

false

Security

SSH enabled/disabled for user


356

Failed to %s ssh for %s

M

false

Security

Failure in enabling/disabling SSH for user


357

KeyControl restored from version %s backup file

M

false

Security

KeyControl restored from backup successfully


358

License auto-update: %s

M

true

Security

License change during auto-update


359

Failed to %s syslog on %s

H

true

Security

Failed to enable/disable syslog on KeyControl node(s)


360

Generated Syslog Certificate Signing Request with common name %s

L

false

Security

Generated Syslog Certificate Signing Request with common name


361

Changed following Syslog settings attributes: %s

L

false

Security

Changed some Syslog settings attributes.


362

Exporting audit log succeeded for %s (%s). Audit log is available to download.

M

true

Security

Finish exporting audit log


363

Exporting audit log failed for %s (%s).

M

true

Security

Exporting audit log failed


364

CVM Certificate %s, associated with CVM %s, CVMSet %s, revoked successfully

H

true

Security



365

Cloud VM Set creation failed. Error: Failed to create root key in HSM. %s.

H

true

Security

Root key creation failure on HSM during Cloud VM Set creation.

Security Admin should determine whether HSM is properly configured.

366

Cloud VM Set creation failed. Error: Failed to generate wrapped Key Encryption Key in HSM. %s.

H

true

Security

Wrapped Key Encryption Key generation failed on HSM during Cloud VM Set creation

Security Admin should determine whether HSM is properly configured.

367

Virtual Machine %s moved from Cloud VM Set - %s (in KeyControl Group - %s) to Cloud VM Set - %s in (KeyControl Group - %s)

M

true

Security

The virtual machine has been moved from one Cloud VM Set to another (which may belong to a different KeyControl Group).


368

Successfully enabled passphrase based startup authentication

M

false

Clusters

Set startup authentication type


369

Successfully changed passphrase for startup authentication

M

false

Clusters

Changed passphrase for startup authentication


370

Recovered access to KeyControl node %s using passphrase

M

true

Clusters

Recovered Masterkey using passphrase


371

Successfully disabled passphrase based startup authentication

M

false

Clusters

Set startup authentication type


372

Successfully reset nShield HSM configuration

M

false

Security

nShield HSM configuration reset


373

Cloud VM Set %s: Asymmetric KeyID %s created.

M

false

Security

Asymmetric KeyID created


374

Cloud VM Set %s: Asymmetric KeyID %s revoked/unrevoked.

M

false

Security

Asymmetric KeyID revoked/unrevoked


375

Cloud VM Set %s: Asymmetric KeyID %s updated - expires %s, onexpiry %s.

M

false

Security

Asymmetric KeyID expiration attributes updated


376

Cloud VM Set %s: Asymmetric KeyID %s description updated.

M

false

Security

Asymmetric KeyID description updated


377

Cloud VM Set %s: Asymmetric KeyID %s deleted.

M

false

Security

Asymmetric KeyID deleted


378

Successfully encrypted plaintext using KeyID: %s

M

false

Security

Encrypted plaintext using keyid key


379

Successfully decrypted ciphertext using KeyID: %s

M

false

Security

Decrypted ciphertext using keyid key


380

Cloud VM Set %s: Asymmetric KeyID %s has expired

M

true

Security

Asymmetric KeyID expired


381

Fatal error on {$prodname} nodes: %s. Please contact Support

H

true

Security

KeyControl Upgrade Failure

Reinstall specified nodes to secure KeyControl Cluster

382

CRL regenerated and applied successfully on %s

M

false

Security

CRL regeneration


383

Attempt to register a new KeyControl node (%s) with revision %s failed. Error: %s

M

true

Clusters

Attempt to register a new KeyControl node failed


384

Successfully reset %s

M

true

Clusters

The KeyControl node has been reset.


385

%s. Please contact Entrust to purchase or renew the license. If you do not plan to use this feature, you should delete your existing vault(s) to stop this message. For more information, see the Administration Guide.

M

true

Security

Vault license not enabled or expired


386

Created Secrets Vault %s

M

false

Security

The specified vault has just been created.


387

Successfully removed pre-upgrade snapshots.

M

true

Clusters

KC pre-upgrade snapshots were removed.


388

{$prodname} node %s removed pre-upgrade snapshots.

M

true

Clusters

KC pre-upgrade snapshots were removed from a node.


389

KeyControl configuration has been successfully updated. New node %s needs to be added to nShield HSM server configuration

M

true

Security

Update nShield HSM server configuration


390

Failed to configure newly joined node %s for nShield HSM server

H

true

Security

Failed to configure node for nShield HSM


391

Successfully completed decryption of KMIP objects

H

true

Security

Decrypt operation completed for KMIP objects


392

Successfully completed rekey of KMIP objects

H

true

Security

Rekey operation completed for KMIP objects


393

Successfully enabled encryption of KMIP objects

H

true

Security

Enabled encryption of KMIP objects


394

Successfully disabled encryption of KMIP objects

H

true

Security

Disabled encryption of KMIP objects


395

Failed to generate Key Encryption Key on HSM. Error: %s

H

true

Security

Failed to generate Key Encryption Key on HSM


396

Successfully generated Key Encryption Key on HSM

M

false

Security

Generated Key Encryption Key on HSM


397

Successfully cancelled node-join

M

false

Clusters

Cancelled KeyControl Node-Join


398

Failed to join %s to KeyControl Cluster. Error: %s

M

true

Clusters

Failed to join KeyControl node


399

Successfully joined %s to {$prodname} Cluster

M

false

Clusters

Added new node to KeyControl Cluster


400

CSR generated with common-name %s for node-join

M

false

Clusters

Certificate Signing Request generated for node-join


401

Certificate bundle generated for node-join

M

false

Clusters

Certificate bundle generated for node-join


402

Returning keys to Virtual Machine %s running on ESXi Host %s. Virtual Machine UUID is %s.

M

false

Security

Returning keys to virtual machine on successful authorization with HTCC with additional virtual machine info


403

Returning keys to Virtual Machine %s

M

false

Security

Returning keys to virtual machine on successful authorization with HTCC


404

NTP servers not found on KeyControl %s

H

true

Clusters

NTP servers not found on KeyControl

Configure NTP servers using KeyControl TUI

405

NTP synchronization failed on KeyControl %s

M

true

Clusters

NTP synchronization failed on KeyControl

Check if NTP servers are reachable from KeyControl

406

Freespace available on %s has fallen below %s%% for the /boot volume. Please contact support.

H

false

Clusters

The amount of free disk space on the KeyControl appliance /boot filesystem has dropped below our recommended threshold. Please contact support for assistance.

Contact support.

407

Set Key Encryption Key expiry to %s, onexpiry to %s for Cloud VMSet %s. Initiated rekey process to encrypt all Data Encryption Keys.

M

false

Security

Added Key Encryption Key to Cloud VMSet


408

Successfully encrypted Data Encryption Keys of all CVMs in CVMSet: %s with a Key Encryption Key: %s. %s VMs, %s KeyIDs %s Asymmetric KeyIDs affected

M

false

Security

Successfully encrypted Data Encryption Keys with Key Encryption Key


409

Successfully reset Luna HSM configuration

M

false

Security

Luna HSM configuration reset


410

Successfully tested nShield HSM configuration

M

false

Security

nShield HSM configuration was successfully tested


411

Luna HSM configuration changed:-

M

false

Security

Luna HSM configuration changed


412

Successfully tested Luna HSM configuration

M

false

Security

Luna HSM configuration was successfully tested


413

Luna Cloud HSM configuration changed:-

M

false

Security

Luna Cloud HSM configuration changed


414

Successfully reset Luna Cloud HSM configuration

M

false

Security

Luna Cloud HSM configuration was reset


415

Successfully tested Luna Cloud HSM configuration

M

false

Security

Luna Cloud HSM configuration was successfully tested


416

Failed to create /bootext filesystem. Please contact support for more assistance

H

true

Security

Failed to create /bootext filesystem. Please contact support for more assistance


417

Failed to join %s/%s to KeyControl Cluster. Please contact Support

H

true

Clusters

Failed to join KeyControl node to cluster


418

CloudKey: {} in KeySet {} modified

M

true

Security

CloudKey: {} in KeySet {} modified


419

CloudKey: {} in KeySet {} migrated to HSM

M

false

Security

CloudKey: {} in KeySet {} migrated to HSM


420

Cloud Key {} deleted from KMS

H

true

Security

Cloud Key {} deleted from KMS


421

Cloud Key {} restored to KMS

M

true

Security

Cloud Key {} restored to KMS


422

Cloud Key {} state changed to {} on KMS

H

true

Security

Cloud Key {} state changed to {} on KMS


423

Tag {} (value {}) set on Cloud Key {}

M

false

Security

Tag {} (value {}) set on Cloud Key {}


424

Removed Tag {} on Cloud Key {}

M

false

Security

Removed Tag {} on Cloud Key {}


425

Set users ({}) and administrators ({}) to Cloud Key {}

M

true

Security

Set users ({}) and administrators ({}) to Cloud Key {}


426

Removed {} ({}) from Cloud Key {}

M

true

Security

Removed {} ({}) from Cloud Key {}


427

New Cloud Key {} created in KeySet {}

M

true

Security

New Cloud Key {} created in KeySet {}


428

New Cloud Key {} created in KeySet {} {} {}

M

true

Security

New Cloud Key {} created in KeySet {} Region/Vault {}


429

Cloud Key {} in KeySet {} uploaded to {} {}

M

true

Security

Cloud Key {} in KeySet {} uploaded to {} {}


430

Cloud Key {} in KeySet {} rotated

M

true

Security

Cloud Key {} in KeySet {} rotated


431

Cloud Key {} in KeySet {} scheduled for deletion in {} days

H

true

Security

Cloud Key {} in KeySet {} scheduled for deletion in {} days


432

Deletion schedule canceled on Cloud Key {} in KeySet {}

M

true

Security

Deletion schedule canceled on Cloud Key {} in KeySet {}


433

Cloud Key {} in KeySet {} deletion complete

M

false

Security

Cloud Key {} in KeySet {} deletion complete


434

Processed Expiry Action {} on Cloud Key {} in KeySet {}

H

true

Security

Processed Expiry Action {} on Cloud Key {} in KeySet {}


435

Cloud Key {} region {} imported in KeySet {}

M

false

Security

Cloud Key {} region {} imported in KeySet {}


436

Started Key Import from {} {} from KMS to KeySet {}

M

true

Security

Started Key Import from region/keyvault/keyring {} from KMS to KeySet {}


437

Keys imported from {} {} from KMS to KeySet {}

M

true

Security

Keys imported from region/keyvault/keyring {} from KMS to KeySet {}


438

Keys imported from AWS KMS to KeySet {}

M

true

Security

Keys imported from AWS KMS to KeySet {}


439

Keys migrated to HSM from KEYCONTROL for KeySet {}

H

true

Security

Keys migrated to HSM from KEYCONTROL for KeySet {}


440

KeySet: {} modified

M

true

Security

KeySet: {} modified


441

Started key migration, from {} to {}, for KeySet {}

H

true

Security

Started key migration for KeySet


442

New KeySet: {} created

M

true

Security

New KeySet: {} created


443

Key Set {} deleted

H

true

Security

Key Set {} deleted


444

CSP Account: {} modified

M

true

Security

CSP Account: {} modified


445

CSP Account {} access keys rotated

H

true

Security

CSP Account {} access keys rotated


446

New CSP Account: {} created

M

true

Security

New CSP Account: {} created


447

CSP Account {} deleted

H

true

Security

CSP Account {} deleted


448

Access key rotation failed

H

true

Security

Access key rotation failed


449

CloudKey rotation failed

M

true

Security

CloudKey rotation failed


450

CloudKey expiry processing failed

M

true

Security

CloudKey expiry processing failed


451

CloudKey import failed

M

true

Security

CloudKey import failed


452

CloudKey auto import failed

M

true

Security

CloudKey auto import failed


453

Set Key Policy for Cloud Key {}

M

true

Security

Set Key Policy for Cloud Key


455

Encryption finished on system volumes of KeyControl {}

M

false

Clusters

Encryption finished on system volumes of KeyControl


456

Successfully installed managed Secret Vault Plugin: {} (version {})

M

false

Security

Managed Secret Vault Plugin install success


457

Cloud Key {} in KeySet {} deleted as upload failed

L

false

Security

Cloud Key object deleted as upload failed


458

Enabled Root-of-Trust in password mode

M

false

Security

Enabled Root-of-Trust in password mode


459

Failed to enable Root-of-Trust

M

false

Security

Failed to enable Root-of-Trust


460

Enabled Root-of-Trust in hwsig mode

M

false

Security

Enabled Root-of-Trust in hwsig mode


461

Failed to enable Root-of-Trust

M

false

Security

Failed to enable Root-of-Trust


462

Disabled Root-of-Trust

M

false

Security

Disabled Root-of-Trust


463

Failed to disable Root-of-Trust: %s

M

false

Security

Failed to disable Root-of-Trust: %s


464

A different Cloud Key with name {} for KeyVault {} is already present in KeySet {}.If you want to overwrite the key in KeyControl node, delete the existing key from KeyControl node and import again

M

true

Security

Could not import cloudkey as a different key with the same keyname already present in KeyControl node


465

Created new KMIP tenant {} with Active Directory domain {} and Active Directory user/group {} as initial KMIP administrator

M

true

Security

Created new KMIP tenant with its own Active Directory config and an Active Directory user/group for initial access


466

Deleted KMIP tenant {}

M

true

Security

Deleted KMIP tenant


467

Internal web server certificate of %s has expired. A new certificate must be installed for KeyControl Cluster to be healthy

H

true

Clusters

Certificate used by the internal web server of one of the nodes has expired. Domain administrator has to install a new certificate for the KeyControl cluster to be healthy.


468

Internal web server certificate of %s will expire in %s days, %s hours and %s minutes. A new certificate must be installed before the current one expires for the KeyControl Cluster to be healthy.

H

true

Clusters

Certificate used by the internal web server of one of the nodes is about to get expired. Domain administrator has to install a new certificate before it gets expired. Otherwise cluster will be degraded


469

Cloud Key {} KeyVault {} in KeySet {} synced from KMS

M

false

Security

Cloud Key {} KeyVault {} in KeySet {} synced from KMS


470

Cloud Key {} operations changed to {} on Azure KMS

M

true

Security

Cloud Key {} operations changed to {} on Azure KMS


471

Cloud Key {} KeyVault {} imported in KeySet {}

M

false

Security

Cloud Key {} KeyVault {} imported in KeySet {}


472

CloudKey import failed in KeyVault {} KeySet {} Error {}

M

false

Security

CloudKey import failed in KeyVault {} KeySet {} Error {}


473

Client Secret for Service application {} (CSP {}) will expire on {}. Please update it now to avoid BYOK management service disruption

H

true

Security



474

Client Secret for Service application {} (CSP {}) has expired on {}. Please update it now to resume BYOK management service

H

true

Security



475

Successfully started migration of KMIP objects to multi-tenant KMIP server

M

false

Security

Started migration of KMIP objects to multi-tenant KMIP server


476

Successfully completed migration of KMIP objects to multi-tenant KMIP server

M

false

Security

Completed migration of KMIP objects to multi-tenant KMIP server


477

Successfully cancelled migration of KMIP objects to multi-tenant KMIP server

M

false

Security

Cancelled migration of KMIP objects to multi-tenant KMIP server


478

Successfully sent KMIP tenant account verification email to %s

M

false

Security

Sent KMIP tenant account verification email


479

Successfully reset administrator account password of KMIP vault %s

M

false

Security

Reset KMIP vault administrator account password


480

Successfully reset administrator account password of Secrets vault %s

M

false

Security

Reset Secrets vault administrator account password


481

Failed to initialize Authentication database

M

true

Security



482

Cloud Key {} KeyRing {} imported in KeySet {}

M

false

Security

Cloud Key {} KeyRing {} imported in KeySet {}


483

Cloud Key {} KeyRing {} in KeySet {} synced from KMS

M

false

Security

Cloud Key {} KeyRing {} in KeySet {} synced from KMS


484

CloudKey import failed in KeyRing {} KeySet {} Error {}

M

false

Security

CloudKey import failed in KeyRing {} KeySet {} Error {}


485

Label {} (value {}) set on Cloud Key {}

M

false

Security

Label {} (value {}) set on Cloud Key {}


486

Removed Label {} on Cloud Key {}

M

false

Security

Removed Label {} on Cloud Key {}


487

Failed to delete old access keys for CSP Account '{}'. Error - '{}'

M

false

Security

Failed to delete old access keys for CSP Account '{}'. Error - '{}'


488

EKM Key Access Justification policy violation while accessing Cloud Key {} in KeySet {} : error {}

M

false

Security

EKM Key Access Justification policy violation


489

TDE Connector {} state changed to {} on Keyset {}

M

true

Security

TDE Connector state changed


490

TDE Connector {} expiry date changed to {} on Keyset {}

M

true

Security

TDE Connector expiry date changed


491

Added TDE Connector {} for CVM {} in KeySet {}

M

true

Security

Add TDE connector


492

Removed TDE Connector {} from CVM {} in KeySet {}

M

true

Security

Remove TDE connector


493

Successfully registered with CSP Compliance Manager (id: {}) from {}

M

true

Security

CSP Compliance Manager register


494

Successfully unregistered with CSP Compliance Manager (id: {}) from {}

M

true

Security

CSP Compliance Manager unregister


495

Successfully reset CSP Compliance Manager registration configuration from {}

M

true

Security

CSP Compliance Manager configuration reset


496

User %s reset syslog settings

M

false

Security

Reset Syslog settings


497

Attempt to register a new node, named server "%s" failed -- maximum node limit reached.

M

true

Security

Maximum allowed cluster node count reached


498

Backup failed due to insufficient space on root device. Please contact support.

H

true

Security

Backup failed due to insufficient space on the root device.


499

Backup was not started due to heavy load on %s

M

true

Security

Backup was not started due to heavy load on KeyControl


500

Admin Key generation %s can be downloaded from the Settings page (https://%s/appliance/#!/account). Reason for regeneration: %s

H

true

Security

Regenerated Admin Key


501

Rescued %s vault: %s

L

true

Security

Rescued Vault


502

%s logged in from ipaddr %s using Personal Access Token %s

L

false

Security

The specified user has just logged in from the IP address shown with Personal Access Token.


503

AD authorization(Personal Access Token log in) for user %s failed. Reason :- %s

H

false

Security

Reason for AD/LDAP log in failure for Personal Access Token log in


504

%s %s Personal Access Token %s from ipaddr %s

M

false

Security

Create/Update/Delete Actions on Personal Access Token


505

Keys migrated from HSM to KEYCONTROL for KeySet {}

H

true

Security

Keys migrated from HSM to KEYCONTROL for KeySet {}


506

CloudKey: {} in KeySet {} migrated to KEYCONTROL

M

false

Security

CloudKey: {} in KeySet {} migrated to KEYCONTROL


507

Keys migrated from KEYCONTROL to HSM for KeySet {}

H

true

Security

Keys migrated from KEYCONTROL to HSM for KeySet {}


508

Updated %s Vault %s with CSP Compliance Manager %s

M

false

Security

The specified vault has just been updated with CSP Compliance Manager.


509

Configured OIDC without AD with client id %s

M

false

Security

Configured OIDC without AD


510

OIDC without AD configuration removed

M

false

Security

OIDC without AD configuration removed


511

Changed Password Settings :- %s from %s to %s

M

false

Security

One or more of the listed password settings has been changed.


512

Keys cached from HSM to KEYCONTROL for KeySet {}

H

true

Security

Keys cached from HSM to KEYCONTROL for KeySet {}


513

Keys uncached from KEYCONTROL for KeySet {}

H

true

Security

Keys uncached from KEYCONTROL for KeySet {}


514

CloudKey: {} in KeySet {} cached to KeyControl

M

false

Security

CloudKey: {} in KeySet {} cached to KeyControl


515

CloudKey: {} in KeySet {} uncached from KeyControl

M

false

Security

CloudKey: {} in KeySet {} uncached from KeyControl


516

OIDC authorization failed. Reason :- %s

M

false

Security

Reason for OIDC log in failure


517

Connection from node %s to HSM %s has failed

H

true

Security

The node is unable to communicate with the HSM

Security Admin should check the HSM configuration.

518

Connection from node %s to HSM %s is restored

L

true

Security

The node is able to communicate with the HSM again


519

Connection from node %s to HSM %s still failed after HSMROT timeout, locking down

H

true

Security

The node is shutting down because it has lost contact with the HSM

Fix the issue preventing the node from contacting the HSM and restart the node.

520

HSM issue on node %s: %s

M

true

Security

Some HSM issues have been detected on the node that do not prevent communication with the HSM

Security Admin should check the HSM configuration.

521

HSM issues resolved on node %s

L

true

Security

The HSM issues previously reported on the node have been resolved


522

Failed to install self-signed certificate cluster-wide

M

true

Clusters

Install self signed certificate cluster-wide


523

Failed to clean cacert list.

M

false

Clusters

Clean cacert list guid from system setting


524

Successfully moved the cluster to self-signed certificate.

M

false

Clusters

Install self signed certificate cluster-wide


525

Successfully changed the EMS Enforcement crypto policy.

M

false

Clusters

Change EMS Enforced Configuration


526

The license for this system expired %s days ago.
Please renew or upgrade the license. Start that process from the licensing page in the WebGUI at https://%s/appliance/#!/license

H

true

Security

License expired


527

The license for this system expires in %s days.
Please renew or upgrade the license. Start that process from the licensing page in the WebGUI at https://%s/appliance/#!/license

H

true

Security

License will expire after some days.


528

The license for this system expires today.
Please renew or upgrade the license. Start that process from the licensing page in the WebGUI at https://%s/appliance/#!/license

H

true

Security

License is expiring today.


529

This system has exceeded the licensed limit of %s Virtual Machines.
Further Virtual Machine creation is disabled.
Please renew or upgrade the license. Start that process from the licensing page in the WebGUI at https://%s/appliance/#!/license

H

true

Security

This system has exceeded the licensed limit of virtual machines count. Further virtual machine creation is disabled.


530

This system has exceeded the licensed limit of %s Virtual Machines.
Please renew or upgrade the license. Start that process from the licensing page in the WebGUI at https://%s/appliance/#!/license

H

true

Security

This system has exceeded the licensed limit of virtual machines count.


531

System Initialization Complete

L

false

Security

System Initialization Complete


532

System Autoconfiguration Complete

L

false

Security

System Autoconfiguration Complete


533

Cloud Key {} in KeySet {} replicated to {}

M

true

Security

Cloud Key {} in KeySet {} replicated to {}


534

The Cloud Key {} from KeySet {} will be rotated on {}.

H

true

Security

Send notification before cloudkey rotation.


535

The Cloud Key {} from KeySet {} is expiring on {} with the Action {}.

H

true

Security

Send notification before cloudkey expiration.


536

System has completed automatic renewal of self-signed certificates.

L

false

Clusters

Automatic renewal of self-signed certificates.


537

System has completed automatic renewal of CA certificates.

L

false

Clusters

Automatic renewal of CA certificates.


538

Probable LOW DISK SPACE: refreshing KMIP database is failing. Most probably the disk is low on space. Please consider increasing disk space.

H

true

Security



539

Generated Access Token for TDE Connector {} in KeySet {}

M

true

Security

Add TDE connector


540

Internal CA signed certificate with common name and SANs - '%s', '%s' is generated and installed for %s.

L

false

Clusters

New internal CA signed certificate generated and installed.


541

KeyControl upgrade failed. Failed to revert nodes. Please contact Support

H

true

Clusters

Post upgrade failed


542

Failure to change the EMS Enforcement crypto policy. Reverting to %s

M

false

Clusters

Change EMS Enforced Configuration


543

NTP synchronization succeeded on KeyControl %s

M

true

Clusters

NTP synchronization succeeded on KeyControl

Check if NTP servers are reachable from KeyControl

544

Backup of Cloud Key {} failed: {}

M

true

Security

Backup of Cloud Key {} failed: {}


545

Cloud Key {} backup {} is not available in remote storage

M

true

Security

Cloud Key {} backup {} is not available in remote storage


546

Unsupported ciphers found in KMIP server configuration: %s

L

true

Security

Unsupported ciphers found in KMIP server configuration


547

Updated default cipher list to %s in KMIP server configuration

L

true

Security

Updated default cipher list to %s in KMIP server configuration


548

Cloud Key {} with key id {} is the active key version and cannot be deleted. The scheduled deletion has been cancelled

M

true

Security

Cloud Key {} with key id {} is the active key version and cannot be deleted. The scheduled deletion has been cancelled


549

Cloud Key {} with key id {} is the active key version and cannot be deleted. The scheduled expiry has been cancelled

M

true

Security

Cloud Key {} with key id {} is the active key version and cannot be deleted. The scheduled expiry has been cancelled


550

CSP Account: {} access credentials are due rotation. Please rotate through the Salesforce UI.

M

true

Security

CSP Account: {} access credentials are due for rotation.


551

Started HSM key caching for KeySet {}

M

true

Security

Started HSM key caching for KeySet {}


552

Keys cached to HSM for KeySet {}

M

true

Security

Keys cached to HSM for KeySet {}


553

CSP Account {} failed to access AWS global infra API with the default region. The key management capabilty is unaffected, but some region's full names may not be displayed.

L

true

Security

Unable to access AWS global infra API


554

Certificate based authentication enabled on CSP Account {}

M

true

Security

Certificate based authentication enabled on CSP Account {}


555

Certificate based authentication disabled on CSP Account {}

M

true

Security

Certificate based authentication disabled on CSP Account {}


556

Failed to create new client secret for CSP Account {}. Error {}

M

true

Security

Failed to create new client secret for CSP Account {}. Error {}


557

CloudKey {} status changed from {} to {} on synchronization with Cloud

M

true

Security

CloudKey {} status changed from {} to {} on synchronization with Cloud

Check the cloud status of the cloudkey is expected

558

Cache only key replay attack detected on on csp {}

H

true

Security

Cache only key replay attack detected


559

To comply with certificate validity of CSP Vault's CA signed server certificate, the certificate will be automatically renewed on %s for %s. If you have a VM Encryption-vault, please ensure the authentication of all VMs after that renewal. Or if you have a Database-vault, please ensure the database clients reconnect after that renewal.

H

true

Clusters

To comply with certificate validity of CSP Vault's CA signed server certificate, we will auto renew it on %s for %s. If you use a VME vault, please ensure the re-authentication of all VMs after that renewal.


560

CloudKey {} KeySet {} cannot be migrated to FIPS level 3 HSM because it uses cipher {}.

M

false

Security

CloudKey {} KeySet {} cannot be migrated to FIPS level 3 HSM because it uses cipher {}.


561

Unknown error in check_ncipher_data - %s

H

true

Security

Unknown error in HSM files


562

Failed to clear error in check_ncipher_data - %s

H

true

Security

Failed to clear error in HSM files


563

CSP Vault has renewed the CA certificate that is being used by CSP Vault's external web server.

M

false

Security

CSP Vault has renewed the CA certificate that is being used by CSP Vault's external web server.


564

CSP Vault has renewed the CA certificate that is being used by CSP Vault's internal web server.

M

false

Security

CSP Vault has renewed the CA certificate that is being used by CSP Vault's internal web server.


565

CSP Vault's internal CA certificate, used for external communication (external webserver) will expire on %s. CSP Vault will renew the CA certificate on %s before the expiry. The system will reboot at the time of renewal and will be in read only mode. We recommend to re-authenticate all VMs connected to the VME vault using the commands 'hcl updatecert -a' and 'hcl auth -a' after the renewal. If your vault uses client certificate, then please generate new client certificate and use it at client application after the renewal.

M

true

Security

CSP Vault's internal CA certificate, used for external communication (external webserver) will expire on %s. CSP Vault will renew the CA certificate on %s before the expiry. The system will reboot at the time of renewal and will be in read only mode. We recommend to re-authenticate all vms connected to VME-vault using the commands 'hcl updatecert -a' and 'hcl auth -a' after the renewal. If your vault uses client certificate, then please generate new client certificate and use it at client application after the renewal.


566

CSP Vault's internal CA certificate, used for internal communication (internal webserver) will expire on %s. CSP Vault will renew the CA certificate on %s before the expiry. The system will reboot at the time of renewal and will be in read only mode. If your cluster is in a degraded state following the renewal, reboot each node individually, making sure to reboot the master node last.

M

true

Security

CSP Vault's internal CA certificate, used for internal communication (internal webserver) will expire on %s. CSP Vault will renew the CA certificate on %s before the expiry. The system will reboot at the time of renewal and will be in read only mode. If your cluster is in a degraded state following the renewal, reboot each node individually, making sure to reboot the master node last.


567

OIDC CA Certificate Uploaded Successfully

M

false

Security

OIDC CA Certificate Uploaded Successfully


568

{} purged KeyVault {}.

M

true

Security

{} purged KeyVault {}.


569

KC self-signed certificate for {server.hostname} (use for external webserver) is renewed.

L

false

Security

KC self-signed certificate for {server.hostname} (use for external webserver) is renewed.


570

KC self-signed certificate for {server.hostname} (use for internal webserver) is renewed.

L

false

Security

KC self-signed certificate for {server.hostname} (use for internal webserver) is renewed.


571

Failed to migrate Azure Keyvaults to target keyset {}. Error: {}.

M

true

Security

Failed to migrate Azure Keyvaults to target keyset {}. Error: {}.


572

{} started migration of Azure keyvaults from source KeySets {} to target KeySet {}

M

true

Security

Azure Keyvault migration between KeySets started


573

Migration of Azure Keyvaults to {} did not complete successfully. Expected {} cloud keys and {} key versions but found {} cloud keys and {} key versions.

M

true

Security

Azure Keyvault migration between KeySets partially completed


574

Migration of Azure Keyvaults to {} completed successfully

M

true

Security

Azure Keyvault migration between KeySets completed


575

Warning: CSP Account {} manages keys in overlapping subscriptions with existing Azure CSP accounts: {}. Subscription IDs: {}

M

true

Security

Azure CSP created with overlapping subscriptions with existing Azure CSP accounts


576

Could not process {} on AWS Cloud Key {}. {}. The key has been disabled instead.

M

true

Security

AWS Cloudkey expiry action failed.


577

Changed AD group members for group Appliance. %s

L

false

Security

List of AD Group members has been changed for a CSP Vault Appliance


578

CSR generated for CSP Account {}

M

true

Security

CSR generated for CSP Account


579

Azure keyvault {} containing replica keys has purge protection enabled. Rotation operations will fail.

M

true

Security

A vault containing replica keys has purge protection enabled.


580

Replication of the key rotation for key {} to vault {} failed. The key must be manually restored to {} and synced in KeyControl to restore redundancy. Review other replica vaults in case replication has not occurred in them either.

H

true

Security

Replication of a key rotation in Azure failed.


581

Trial period for vault {} has expired. This vault is now operating in restricted mode. Please connect to CSP Compliance Manager to retrieve a valid license.

H

true

Licensing

Vault trial period has expired.


582

{} {} has not been able to connect to CSP Compliance Manager for {} days. This is required for licensing checks. This vault is now operating in restricted mode. Please check the network connectivity and CSP Compliance Manager status.

H

true

Licensing

Vault grace period has expired.


583

{} {} is unlicensed. No license information is available for {}. This vault is now operating in restricted mode. Check that the vault type is covered by your license.

H

true

Licensing

No license available for vault.


584

The number of {} {} has exceeded the licensed limit of {}. Current usage: {}. This {} is now operating in restricted mode. Please purchase additional licenses.

H

true

Licensing

License limit exceeded.


585

The license for {} expired on {}. This vault is now operating in restricted mode. Please renew your license.

H

true

Licensing

License Expired.


586

Trial period for {} {} is nearing expiration. To avoid loss of service, please connect to CSP Compliance Manager to retrieve a valid license.

M

true

Licensing

Vault trial period is nearing expiration.


587

The license for {} will expire on {}. Please renew your license to avoid loss of service.

M

true

Licensing

License Nearing Expiry.


588

{} {} is in the grace period after upgrade to {} or later and will become unlicensed when this grace period ends.

M

true

Licensing

Upgrade Grace Period Nearing Expiry.


589

The number of {} {} is over 90% of the licensed limit of {}. Current usage: {}. To avoid loss of service, please purchase additional licenses if needed.

M

true

Licensing

Usage is nearing license limit.


590

Attempt to register a new node, named server "%s" failed -- license check failed. Reason: %s.

L

false

Licensing

Appliance license check failed.


591

Attempt to register a new node, named "%s" failed -- cluster not connected to KeyControl Compliance Manager.

L

false

Licensing

Appliance is not connected to CSP Compliance Manager.


592

Enabled Authentication Inheritance

M

true

Security

Enabled Authentication Inheritance


593

Disabled Authentication Inheritance

M

true

Security

Disabled Authentication Inheritance


594

Successfully fetched Key Encryption Key from HSM. %s

H

false

Security

Successfully fetched Key Encryption Key from HSM.

Successfully fetched Key Encryption Key from HSM

595

OIDC authentication settings updated for Appliance and inheriting vaults

M

true

Security

OIDC authentication settings updated for Appliance and inheriting vaults


596

OIDC authentication settings for inheriting vault updated by System Admin

M

true

Security

OIDC authentication settings for inheriting vault updated by System Admin


597

XKS store for {} ({}) in region {} is unreachable

H

true

Security

XKS service unreachable


598

XKS store {} ({}) in region {} is {}.

H

true

Security

XKS store not connected


599

XKS store {} ({}) in region {} is now CONNECTED.

M

true

Security

XKS store connected


600

%s for Virtual Machine %s. %s. Reauthentication required.

H

true

Security



601

Could not authenticate user. Unknown username {}.

H

false

Security

Could not authenticate user. Unknown username


602

Failed to promote %s as KeyControl Cluster Master Node. Error: %s

H

true

Clusters

Failed to change the KeyControl master node


603

Successfully promoted the node %s as KeyControl Cluster Master

M

false

Clusters

Changed the master node


604

Could not pass CSP vault's appliance info to CSP CM {}

L

false

Security

Failed to send CSP vault's appliance info to CSP CM


605

Import of cloudkey {} in {} {} skipped because it is managed by KeySet: {} (GUID: {}) already.

L

false

Security

Cloudkey import skipped because it is already managed by another keyset on this system.


606

Import of cloudkey {} in {} {} skipped because it is managed by a KeySet on another system already. Owning keyset GUID: {}.

L

false

Security

Cloudkey import skipped because it is already managed by another keyset on another system.


607

Import of SFDC cloudkey {} skipped because it is managed by KeySet: {} (GUID: {}) already.

L

false

Security

SFDC Cloudkey import skipped because it is already managed by another keyset on this system.


608

Import of SFDC cloudkey {} skipped because it is managed by a KeySet on another system already. Owning keyset GUID: {}.

L

false

Security

SFDC Cloudkey import skipped because it is already managed by another keyset on another system.


609

CloudKey {} is managed by multiple keysets. {} and {}

M

true

Security

CloudKey {} is managed by multiple keysets.


610

Created distribution list {} for {}.

M

true

Security

Created distribution list.


611

Updated distribution list {} in {}. {}

M

true

Security

Updated distribution list.


612

Deleted distribution list {} in {}.

M

true

Security

Deleted distribution list.


613

Distribution list {} associated with group {}. It will receive all alerts sent to the group.

M

true

Security

Associated distribution list.


614

Distribution list {} dissociated from group {}. It will no longer receive alerts sent to the group.

M

true

Security

Dissociated distribution list.


615

Two-factor authentication enforced by %s

M

false

Security

Two factor authentication has been enforced for the users


616

Two-factor authentication enforcement removed by %s

M

false

Security

Two factor authentication enforced removed for the users


617

Failed to add owning keyset guid to CloudKey {} during upgrade. Error: {}

M

true

Security

Failed to add owning keyset guid to CloudKey during upgrade.


618

Failed to update failover order, triggerred by %s. Error: %s

M

true

Clusters

Failed to update failover order


619

Failed to set the new primary to %s, please contact support

M

true

Clusters

Failed to set new Postgres primary


621

Import of cloudkey {} in Region {} skipped because it uses on demand rotations with AWS generated key material. Such keys cannot be managed by CSP.

L

false

Security

Cloudkey import skipped because it cannot be managed by CSP.


622

Failed to set keyset ownership tag on key {} in {} {} after import: {}.

L

false

Security

Failed to set keyset ownership tag on key after import.


623

Failed to set keyset ownership tag on SFDC key {} after import: {}

L

false

Security

Failed to set keyset ownership tag on key after import.


624

Failed to write KeySafeAgent Configuration to Database. Error: %s

H

false

Clusters

Failed to write KeySafeAgent Configuration to Database.


625

Whitelisting database verification test

H

false

Security

Whitelisting database verification test


626

Whitelisting database verification was successfull

H

false

Security

Whitelisting database verification was successfull


627

Whitelisting database verification failed, entering error mode!

H

false

Security

Whitelisting database verification failed, entering error mode!


628

FIPS POST tests

H

false

Security

FIPS POST tests


629

Access credentials for CSP {} are not valid: {}. Please update the credentials to avoid management service disruption.

H

true

Security

Access credentials for CSP account are invalid.


630

HYOK Key {} ({}) in keyset {} used to perform {} operation from remote address {}. {}

L

false

Security

HYOK key used to perform crypto operation.


631

Failed to sync root CA cert for MHSM {} in KeySet {}: {}.

H

true

Security

Failed to sync root CA cert for EKM enabled MHSM


632

Root CA certificate for MHSM {} in KeySet {} is expiring on {}. Please update the root CA certificate to avoid disruption to EKM crypto operations.

H

true

Security

EKM enabled MHSM Root CA certificate is nearing expiry


633

Upgrade failed: not enough space in %s on host %s, %ld%% free, need min %ld%%

H

true

Clusters

Not enough space

Consult support for freeing disk space or create/join a node with more space and upgrade that

634

Upgrade failed: not enough space in %s on host %s, need %lldMB more free space

H

true

Clusters

Not enough space

Consult support for freeing disk space or create/join a node with more space and upgrade that

635

Upgrade failed: initiator argument missing from do_chkspace

H

true

Clusters

Initiator argument missing from do_chkspace


636

Upgrade failed: could not find space usage on host %s

H

true

Clusters

Could not determine space

contact support or replace the node

637

Upgrade failed: could not find available space on host %s

H

true

Clusters

could not determine space

contact support or replace the node

638

Upgrade failed: not enough space on host %s

H

true

Clusters

Not enough space on host

contact support or replace the node

639

Cleaning upgrade on %s

H

true

Clusters

Cleaning upgrade


640

Upgrade failed: could not scrub prior upgrade %s

H

true

Clusters

Could not scrub prior upgrade


641

Upgrade failed: could not find existing cipher of the {$prodname} nodes

H

true

Clusters

Could not find existing cipher of the KeyControl nodes


642

Upgrade failed: could not find kit staging area usage

H

true

Clusters

Could not find kit staging area usage


643

Upgrade failed: could not find {$prodname} nodes

H

true

Clusters

Could not find KeyControl nodes


644

Upgrade failed: could not find encryption status of volumes of the {$prodname} node

H

true

Clusters

Could not find encryption status of volumes of the KeyControl node


645

Upgrade failed: rekey in progress on {$prodname} nodes

H

true

Clusters

Rekey in progress on KeyControl nodes


646

CloudKey {} in KeySet {} key material exported.

M

true

Security

CloudKey key material exported.


647

Upgrade bundle upload rejected: %s

H

true

Clusters

Upgrade precondition check failed

Resolve the reported precondition and retry the upgrade

648

Started key caching {} operation for KeySet {}

H

true

Security

Started key caching operation for KeySet


649

Failed to refresh key cache for KeySet {}. Error: {}.

H

true

Security

Failed to refresh key cache for KeySet


650

Multi-tenant KMIP migration in progress. Retry after migration is complete

H

true

Clusters

KMIP migration in progress blocks upgrade

Wait for KMIP migration to complete before attempting upgrade

651

No upgrade image found in the upload request

H

true

Clusters

No upgrade image found in the upload request

Ensure the upgrade bundle file is included in the upload request

652

Failed to save upgrade bundle: %s

H

true

Clusters

Failed to save the uploaded upgrade bundle to disk

Check available disk space and file permissions, then retry

653

Issue with bundle version. Bundle not valid for upgrade

H

true

Clusters

Upgrade bundle has invalid version information

Obtain a valid upgrade bundle and retry

654

Failed to properly fetch and decode upgrade bundle

H

true

Clusters

Failed to mount or decode the upgrade bundle

Verify the upgrade bundle is not corrupted and retry

655

Support license expired. Upgrade not allowed

H

true

Clusters

Support license has expired preventing upgrade

Renew the support license before attempting upgrade

656

The upgrade can not be started: %s

H

true

Clusters

Pre-upgrade script failed

Check the pre-upgrade script output and resolve the issue

657

Upgrade initiation failed: %s

H

true

Clusters

Upgrade initiation failed

Check if another upgrade is already in progress. Contact support if the issue persists

658

Unexpected error upgrading: %s

H

true

Clusters

An unexpected error occurred during upgrade bundle upload

Contact support

659

TLS configuration changed from %s to %s on node %s

H

true

Security

TLS/SSL protocol or cipher configuration changed


660

[SCIM] Added user %s to group %s

L

false

Security

SCIM provisioning added a user to a group.


661

[SCIM] Created user %s, name %s

L

false

Security

SCIM provisioning created a user.


662

[SCIM] Removed user %s from group %s

L

false

Security

SCIM provisioning removed a user from a group.


663

[SCIM] Deleted user %s

L

false

Security

SCIM provisioning deleted a user.


664

[SCIM] Updated user %s name from %s to %s

L

false

Security

SCIM provisioning updated a user's name.


665

{$prodname} upgrade not allowed on a multinode cluster in passphrase based startup authentication mode

H

true

Clusters

Passphrase based auth mode blocks multinode upgrade

Disable Passphrase based startup authentication or reduce to single node for upgrade

666

Cluster must be in normal mode for upgrade

H

true

Clusters

Cluster not in normal mode for upgrade

Wait for cluster to return to normal mode before attempting upgrade

667

Failed to update trusted client root certificates on cluster {}.

M

true

Security

Failed to update trusted client root certificates on cluster.


668

KMIP server custom certificate has expired. KMIP clients will not be able to connect to the KMIP server. Please install a new certificate.

H

true

Security

KMIP server custom certificate has expired. KMIP clients will not be able to connect to the KMIP server.

Install a new custom certificate for the KMIP server.

669

KMIP server custom certificate will expire in %s days, %s hours and %s minutes. If a new certificate is not installed before the current one expires, KMIP clients will not be able to connect to the KMIP server.

M

true

Security

KMIP server custom certificate will expire soon. Upon expiry, KMIP clients will not be able to connect to the KMIP server.

Install a new custom certificate for the KMIP server before it expires.

670

Imported Key name {} version {} to KeySet {}

M

false

Security

Cloud Key imported in KeySet


671

Failed to import key {} version {} into KeySet {}

M

false

Security

Failed to import Cloud Key to KeySet


672

Upgrade failed: Unable to delete boot backup for extra space in /boot on {}.

L

true

Clusters

Could not free extra disk space


673

An updated Policy Agent version %s is available for guest %s (current version: %s). Please upgrade to ensure optimal security and features.

M

true

Cloud

A newer version of the Policy Agent is available for installation

Upgrade the Policy Agent on the affected guest to the latest version

674

SNMP has been disabled during upgrade because the configured trap version is no longer supported. Only SNMPv3 is allowed. Configured SNMP agent users were also removed when settings were reset. Please reconfigure SNMP after upgrade.

H

false

Security



675

SNMP has been disabled during upgrade because all configured agent users were non-v3 and have been removed. Please reconfigure SNMP after upgrade.

H

false

Security



676

{} non-v3 SNMP agent user(s) were removed during upgrade because only SNMPv3 is supported.

H

false

Security



677

Syslog client certificate for vault '%s' has expired.

H

true

Security

The vault syslog client certificate has expired.

Create a new syslog client certificate for the vault.

678

Syslog client certificate for vault '%s' will expire in %d days.

H

true

Security

The vault syslog client certificate is expiring soon.

Create a new syslog client certificate for the vault before it expires.

679

Appliance syslog client certificate has expired.

H

true

Security

The appliance syslog client certificate has expired.

Create a new syslog client certificate for the appliance.

680

Appliance syslog client certificate will expire in {} days.

H

true

Security

The appliance syslog client certificate is expiring soon.

Create a new syslog client certificate for the appliance before it expires.

681

%s created SCIM Token %s expiring on %s

M

false

Security

SCIM token was created for the vault.


682

%s deleted SCIM Token

M

false

Security

SCIM token was deleted for the vault.


683

Import of cloudkey {} in {} {} skipped because the service account does not have permissions to list tags for this key.

L

false

Security

Skipping key import due to insufficient permissions.


684

Multi-region CloudKey {} in {} {} has been promoted to the primary key

L

false

Security

Multi-region key primary region changed.


685

Multi-region CloudKey {} in {} {} has become the primary key on sync with the cloud

L

false

Security

Multi-region key primary region changed on sync with cloud.