The audit messages in this section are from the Cryptographic Security Platform Vault for Cryptographic APIs.

In the table below, we list many of the audit messages and show:

  • Whether an Alert is also generated.
  • The severity (L=Low, M=Medium, H=High).
  • What the resolution is if any action should be taken.

  • In the Message column, a value in braces, such as {user_name}, represents a placeholder that is replaced with an actual value. For example, in the following message:

    '{user_name}' created the policy '{policy_name}'

    The actual message will be displayed with the name of the user and policy, for example:

    'Fred' created the policy 'Default_Policy'


Msg ID

Message

Severity

Alert?

Category

Description

Resolution

300

'{user_name}' created the policy '{policy_name}'

M

false

Tokenization



301

'{user_name}' updated the policy '{policy_name}'. New policy version is {policy_version}.

M

false

Tokenization



302

'{user_name}' deleted the policy '{policy_name}'

M

false

Tokenization



303

'{user_name}' changed the current version of the policy '{policy_name}'. Current policy version is {policy_version}.

M

false

Tokenization



400

Cryptographic APIs Client Certificate '{name}' created

M

false

Tokenization



401

Cryptographic APIs Client Certificate '{name}' created using Certificate Signing Request

M

false

Tokenization



402

Cryptographic APIs Client Certificate '{name}' deleted

M

false

Tokenization



500

User '{user_name}' logged in successfully.

H

false

Tokenization



501

Active Directory login for '{username}' succeeded but failed to get information about user. The user might not belong to the Active Directory Domain {domain_name} or user/group Base DN in Active Directory configuration might be wrong. Please contact Token Administrator to validate the Active Directory setup.

H

false

Tokenization



502

Login failure for Active Directory user '{username}' from {client_ip}. Reason: {reason}

H

false

Tokenization



503

User '{user_name}' logged in successfully using Personal Access Token {token_name}.

H

false

Tokenization



504

'{user_name}' enabled authentication inheritance

M

false

Tokenization



505

Authentication settings for inheriting vault '{vault_name}' were '{action}' by the System Administrator.

M

false

Tokenization



600

'{user_name}' updated AD Setting '{ad_setting_name}'

M

false

Tokenization



601

'{user_name}' changed AD Domain from '{old_ad_setting_name}' to '{ad_setting_name}'

M

false

Tokenization



602

'{user_name}' added AD Setting '{ad_setting_name}'

M

false

Tokenization



800

'{user_name}' updated token '{token_name}' settings. 'degraded mode availability' {degraded_mode}. 'OIDC authentication' {oidc}. 'mTLS state' {mTLS}. 'audit alert distribution list' {audit_alert_dl}. 'alert read count' {alert_read_count}. 'email notify alerts' {email_notify_alerts}.

M

false

Tokenization



801

'{user_name}' renamed token '{old_name}' to '{token_name}'.

M

false

Tokenization



802

'{user_name}' updated tokenization '{token_name}' settings of authentication method to AD based authentication

M

false

Tokenization



803

'{user_name}' updated the CSP Compliance Manager settings for the CSP Vault for Cryptographic APIs '{token_name}' with CSP Compliance Manager IP '{kcm_ip}'.

M

false

Tokenization



804

'{user_name}' updated tokenization '{vault_name}' settings of authentication method to OIDC based authentication

M

false

Tokenization



805

'{user_name}' deleted Cryptographic APIs vault '{vault_name}'

M

true

Tokenization



900

'{user_name}' created the user '{name}'

M

false

Tokenization



901

'{user_name}' deleted the user '{name}'

M

false

Tokenization



902

'{user_name}' updated the user '{name}'

M

false

Tokenization



903

Account '{user_name}' locked for 5 minutes due to repeated login failures

M

false

Tokenization



904

Account '{user_name}' was disabled due to repeated login failures

M

false

Tokenization



905

Login failure for Local user '{username}' from {client_ip}. Reason: {reason}

H

false

Tokenization



906

Password successfully updated for user: '{username}'

H

false

Tokenization



907

Account '{user_name}' enabled Two-Factor Authentication

M

false

Tokenization



908

Account '{user_name}' disabled Two-Factor Authentication

M

false

Tokenization



909

'{user_name}' updated the Local user password policy

M

false

Tokenization



910

'{user_name}' enforced Two-Factor Authentication

M

false

Tokenization



911

'{user_name}' removed enforcement of Two-Factor Authentication

M

false

Tokenization



1000

'{user_name}' created keyset '{keyset}'

M

false

Tokenization



1001

'{user_name}' failed to create keyset: '{message}'

M

false

Tokenization



1002

'{user_name}' enabled HSM support for keyset '{keyset}'

M

false

Tokenization



1003

'{user_name}' failed to enable HSM support. Reason: '{message}'

M

false

Tokenization



1004

'{user_name}' disabled HSM support for keyset '{keyset}'

M

false

Tokenization



1005

'{user_name}' failed to disable HSM support. Reason: '{message}'

M

false

Tokenization



1100

'{user_name}' tokenized data using policy '{policy}'

M

false

Tokenization



1101

'{user_name}' detokenized data using policy '{policy}'

M

false

Tokenization



1102

'{user_name}' masked data using policy '{policy}'

M

false

Tokenization



1103

'{user_name}' detokenized and masked data using policy '{policy}'

M

false

Tokenization



1104

'{user_name}' encrypted data using key '{key}'

M

false

Tokenization



1105

'{user_name}' decrypted data using key '{key}'

M

false

Tokenization



1106

'{user_name}' failed to tokenize data: '{message}'

M

false

Tokenization



1107

'{user_name}' failed to detokenize data: '{message}'

M

false

Tokenization



1108

'{user_name}' failed to mask data: '{message}'

M

false

Tokenization



1109

'{user_name}' failed to detokenize and mask data: '{message}'

M

false

Tokenization



1110

'{user_name}' failed to encrypt data: '{message}'

M

false

Tokenization



1111

'{user_name}' failed to decrypt data: '{message}'

M

false

Tokenization



1112

'{user_name}' rekeyed data using policy '{policy}'

M

false

Tokenization



1113

'{user_name}' batch tokenized data using policy '{policy}'

M

false

Tokenization



1114

'{user_name}' batch detokenized data using policy '{policy}'

M

false

Tokenization



1115

'{user_name}' batch masked data using policy '{policy}'

M

false

Tokenization



1116

'{user_name}' batch rekeyed data using policy '{policy}'

M

false

Tokenization



1117

'{user_name}' failed to rekey data using policy '{policy}'

M

false

Tokenization



1118

'{user_name}' failed to batch tokenize data using policy '{policy}'

M

false

Tokenization



1119

'{user_name}' failed to batch detokenize data using policy '{policy}'

M

false

Tokenization



1120

'{user_name}' failed to batch mask data using policy '{policy}'

M

false

Tokenization



1121

'{user_name}' failed to batch rekey data using policy '{policy}'

M

false

Tokenization



1122

'{user_name}' signed data using key '{key}'

M

false

Tokenization



1123

'{user_name}' verified signature using key '{key}'

M

false

Tokenization



1124

'{user_name}' failed to sign data: '{message}'

M

false

Tokenization



1125

'{user_name}' failed to verify signature: '{message}'

M

false

Tokenization



1126

'{user_name}' wrapped key using key '{key}'

M

false

Tokenization



1127

'{user_name}' unwrapped key using key '{key}'

M

false

Tokenization



1128

'{user_name}' failed to wrap key: '{message}'

M

false

Tokenization



1129

'{user_name}' failed to unwrap key: '{message}'

M

false

Tokenization



1130

'{user_name}' generated MAC using key '{key}'

M

false

Tokenization



1131

'{user_name}' verified MAC using key '{key}'

M

false

Tokenization



1132

'{user_name}' failed to generate MAC: '{message}'

M

false

Tokenization



1133

'{user_name}' failed to verify MAC: '{message}'

M

false

Tokenization



1134

'{user_name}' generated message digest

M

false

Tokenization



1135

'{user_name}' failed to generate message digest: '{message}'

M

false

Tokenization



1200

'{user_name}' created tokenization policy: '{policy}'

M

false

Tokenization



1201

'{user_name}' deleted tokenization policy: '{policy}'

M

false

Tokenization



1202

'{user_name}' updated tokenization policy: '{policy}'

M

false

Tokenization



1203

'{user_name}' created masking policy: '{policy}'

M

false

Tokenization



1204

'{user_name}' deleted masking policy: '{policy}'

M

false

Tokenization



1205

'{user_name}' updated masking policy: '{policy}'

M

false

Tokenization



1207

'{user_name}' deleted encryption policy: '{policy}'

M

false

Tokenization



1209

'{user_name}' failed to create tokenization policy. Reason: '{message}'

M

false

Tokenization



1210

'{user_name}' failed to delete tokenization policy. Reason: '{message}'

M

false

Tokenization



1211

'{user_name}' failed to update tokenization policy. Reason: '{message}'

M

false

Tokenization



1212

'{user_name}' failed to create masking policy. Reason: '{message}'

M

false

Tokenization



1213

'{user_name}' failed to delete masking policy. Reason: '{message}'

M

false

Tokenization



1214

'{user_name}' failed to update masking policy. Reason: '{message}'

M

false

Tokenization



1216

'{user_name}' failed to delete encryption policy. Reason: '{message}'

M

false

Tokenization



1300

'{user_name}' created the key: '{key_name}'

M

false

Tokenization



1301

'{user_name}' failed to create key: '{key_name}'. Reason: '{message}'

M

false

Tokenization



1302

'{user_name}' updated details of key: '{key_name}'

M

false

Tokenization



1303

'{user_name}' changed state of the key: '{key_name}' to '{state}'

M

false

Tokenization



1304

'{user_name}' scheduled deletion of key: '{key_name}'

M

false

Tokenization



1305

'{user_name}' cancelled scheduled deletion of key: '{key_name}'

M

false

Tokenization



1306

'{user_name}' failed to schedule or cancel scheduled deletion of key: '{key_name}'. Reason: '{message}'

M

false

Tokenization



1307

'{user_name}' purged key: '{key_name}'

M

false

Tokenization



1308

'{user_name}' failed to purge key: '{key_name}'. Reason: '{message}'

M

false

Tokenization



1309

'{user_name}' rotated key: '{key_name}'

M

false

Tokenization



1310

'{user_name}' failed to rotate key: '{key_name}'. Reason: '{message}'

M

false

Tokenization



1311

'{user_name}' retrieved clear value of key: '{key_name}'

M

false

Tokenization



1312

'{user_name}' failed to retrieve the clear value of key: '{key_name}'. Reason: '{message}'

M

false

Tokenization



1313

'{user_name}' exported key: '{key_name}'

M

false

Tokenization



1314

'{user_name}' failed to export key: '{key_name}'. Reason: '{message}'

M

false

Tokenization



1315

'{user_name}' generated a key and CSR for '{key_name}'

M

false

Tokenization



1316

'{user_name}' failed to generate a key and CSR for '{key_name}'. Reason: '{message}'

M

false

Tokenization



1317

'{user_name}' exported public key: '{key_name}'

M

false

Tokenization



1318

'{user_name}' failed to export public key: '{key_name}'. Reason: '{message}'

M

false

Tokenization



1319

'{user_name}' imported key: '{key_name}'

M

false

Tokenization



1320

'{user_name}' failed to import key: '{key_name}'. Reason: '{message}'

M

false

Tokenization



1321

'{user_name}' successfully rebuilt keys database

M

false

Tokenization



1322

'{user_name}' failed to rebuild keys database. Reason: '{message}'

M

false

Tokenization



1323

'{user_name}' imported clear key: '{key_name}'

M

false

Tokenization



1324

'{user_name}' failed to import clear key: '{key_name}'. Reason: '{message}'

M

false

Tokenization



1400

'{user_name}' created Personal Access Token {token_name}

M

false

Tokenization



1401

'{user_name}' {update_info} Personal Access Token {token_name}

M

false

Tokenization



1402

'{user_name}' deleted Personal Access Token {token_name}

M

false

Tokenization



1500

'{user_name}' created OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Tokenization



1501

'{user_name}' failed to create OIDC user {oidc_user_email}

M

false

Tokenization



1502

'{user_name}' updated OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Tokenization



1503

'{user_name}' failed to update OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Tokenization



1504

'{user_name}' deleted OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Tokenization



1505

'{user_name}' failed to delete OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Tokenization



1506

'{user_name}' created registration link for OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Tokenization



1507

'{user_name}' failed to create registration link for OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Tokenization



1508

Login failure for OIDC user '{username}' from {client_ip}. Reason: {reason}

M

false

Tokenization



1600

'{user_name}' cleared cache

M

false

Tokenization



1601

'{user_name}' failed to clear cache. Reason: '{message}'

M

false

Tokenization



1602

'{user_name}' changed caching state

M

false

Tokenization



1603

'{user_name}' failed to change caching state. Reason: '{message}'

M

false

Tokenization



1604

'{user_name}' fetched caching status

M

false

Tokenization



1605

'{user_name}' failed to get caching status. Reason: '{message}'

M

false

Tokenization



1606

'{user_name}' fetched caching settings

M

false

Tokenization



1607

'{user_name}' failed to get caching settings. Reason: '{message}'

M

false

Tokenization



1608

'{user_name}' set caching settings

M

false

Tokenization



1609

'{user_name}' failed to set caching settings. Reason: '{message}'

M

false

Tokenization



1136

'{user_name}' batch encrypted data using keys '{keys}'

M

false

Tokenization



1137

'{user_name}' batch decrypted data using keys '{keys}'

M

false

Tokenization



1138

'{user_name}' failed to batch encrypt data using keys '{keys}' with error: '{message}'

M

false

Tokenization



1139

'{user_name}' failed to batch decrypt data using keys '{keys}' with error: '{message}'

M

false

Tokenization



1140

'{user_name}' batch encrypted-decrypted data using keys '{keys}'

M

false

Tokenization



1141

'{user_name}' failed to batch encrypt-decrypt data using keys '{keys}' with error: '{message}'

M

false

Tokenization



1700

'{user_name}' created SCIM Token {token_id} expiring on {expiry_date}

M

false

Tokenization



1701

User {oidc_user_name} ({oidc_user_email}: {oidc_user_guid}) deleted by SCIM

M

false

Tokenization



1702

User {oidc_user_name} ({oidc_user_email}: {oidc_user_guid}) created by SCIM and added to policy {policy_name}

M

false

Tokenization



1703

User ({oidc_user_email}: {oidc_user_guid}) updated by SCIM from '{old_name}' to '{new_name}'

M

false

Tokenization



1704

'{user_name}' deleted SCIM Token

M

false

Tokenization



1800

'{user_name}' updated OIDC configuration on vault '{vault_name}'

H

true

Tokenization

Updated OIDC configuration on Tokenization vault


1801

'{user_name}' updated OIDC CA certificate for vault '{vault_name}'

H

true

Tokenization

Updated OIDC CA certificate on Tokenization vault


1802

{user_name} updated Syslog settings for vault '{vault_name}'

M

false

Tokenization

Syslog Settings Updated on Tokenization vault


1803

{user_name} reset Syslog settings for vault '{vault_name}'

M

false

Tokenization

Syslog Settings Reset on Tokenization vault


1804

{user_name} generated Syslog Certificate Signing Request for vault '{vault_name}'

M

false

Tokenization

Syslog CSR Created on Tokenization vault


1900

Client certificate '{cert_name}' has expired. Clients using this certificate will no longer be able to access the vault. Please create a new certificate.

H

true

Tokenization



1901

Client certificate '{cert_name}' will expire in {days} days, {hours} hours and {minutes} minutes. Please create a new certificate before it expires.

H

true

Tokenization



1902

Syslog client certificate for Cryptographic APIs Vault: {namespace_name} ({namespace_id}) expired. Remote syslogging will not work until a new certificate is created. Please create a new certificate.

H

true

Tokenization



1903

Syslog client certificate for Cryptographic APIs Vault: {namespace_name} ({namespace_id}) will expire in {days} days. Please create a new certificate before it expires to ensure uninterrupted syslogging.

H

true

Tokenization