KMIP Errors
KMIP (Key Management Interoperability Protocol) is one of the interfaces that can be used to interact with the CipherTrust Manager. This section lists errors related to the KMIP interface.
| Action | Error Information | Possible Cause | Remediation |
|---|---|---|---|
| Terminating KMIP Connection | Panic while handling NAE KMIP request | High CPU utilization or memory crunch due to large number of memory intensive operations. | Restart the appliance. If the issue persists, contact Thales Customer Support, and provide them a copy of Syslog for analysis. |
| RegisterKmipClient | Unable to create KMIP Client | A KMIP client with same name or properties already exists. | Check if there is an existing client with the same name. If not, contact Thales Customer Support, and provide them a copy of Syslog for analysis. |
| RegisterKmipClient | Unable to fetch username from certificate | Data field specified by cert_user_field does not exist. Also, the CN does not exist in the certificate. | Validate the certificate. Refer to the KMIP Reference Guide for details. |
| RegisterKmipClient | No profile mapped with | RegToken Registration token was not created using the same profile. | Create a registration token using the current profile. Refer to the KMIP Reference Guide for details. |
| RegisterKmipClient | failed to register client with auth service. | Client Certificate is not in proper format. | Check the format of KMIP certificate. If the issue persists, contact Thales Customer Support, and provide them a copy of Syslog for analysis. |
| CreateKmipClient RegistrationToken | record not found | KMIP profile that was used to create the registration token does not exist. | Create a KMIP client profile. Use this newly created profile to create the registration token. |
| CreateKmipClient Profile | kmip profile properties not provided | One or more of the mandatoy properties were not specified while creating the KMIP profile. | Refer to the KMIP Reference Guide for details. |
| CreateKmip ClientProfile | Invalid Certificate user field | The cert_user_field must contain one of the following values: CN, OU, SN, E, UID, E_ND | Refer to the KMIP Reference Guide for details. |
