Using the Message Log Window
During a rekey operation, the key manager logs both the current encryption key and the new encryption key. Transformed files are listed four times because multiple operations occur during a rekey operation (the logging level is set to INFO and audit is enabled). This can result in an extremely large number of log entries. In the example below, a GuardPoint is opened with the clear_key key and saved with the aes128 key.
Ensure that there are no errors in the key manager log that have to do with dataxform or DXF. Look for errors that contain strings like “denied” and “failed”. For example,
[DXF4376E] Data transform in guard point /opt/apps/dx9 failed for 6 files
[DXF4271E] Number of files in error due to a signal stopping the dataxform: 6
The example errors indicate that dataxform had been interrupted as it was actively transforming six files.
The dataxform messages indicate that dataxform is supported, dataxform detected a number of files, it transformed that same number of files, and then completed successfully.
If errors are generated, check the dataxform_status_skip-_gp file for a list of the files that were in the process of being transformed, but are now in an unknown state.