Using the Message Log Window
During a rekey operation, the key manager logs both the current encryption key and the new encryption key. Transformed files are listed four times because multiple operations occur during a rekey operation (the logging level is set to INFO
and audit
is enabled). This can result in an extremely large number of log entries. In the example below, a GuardPoint is opened with the clear_key
key and saved with the aes128
key.
Ensure that there are no errors in the key manager log that have to do with dataxform or DXF
. Look for errors that contain strings like “denied” and “failed”. For example,
The example errors indicate that dataxform had been interrupted as it was actively transforming six files.
The dataxform messages indicate that dataxform is supported, dataxform detected a number of files, it transformed that same number of files, and then completed successfully.
If errors are generated, check the dataxform_status_skip-_gp
file for a list of the files that were in the process of being transformed, but are now in an unknown state.