Using the Message Log Window
During a rekey operation, the key manager logs both the current encryption key and the new encryption key. Transformed files are listed four times because multiple operations occur during a rekey operation (the logging level is set to INFO
and audit
is enabled). This can result in an extremely large number of log entries. In the example below, a GuardPoint is opened with the clear_key
key and saved with the aes128
key.
Ensure that there are no errors in the key manager log that have to do with dataxform or DXF
. Look for errors that contain strings like “denied” and “failed”. For example,
[DXF4376E] Data transform in guard point /opt/apps/dx9 failed for 6 files
[DXF4271E] Number of files in error due to a signal stopping the dataxform: 6
The example errors indicate that dataxform had been interrupted as it was actively transforming six files.
The dataxform messages indicate that dataxform is supported, dataxform detected a number of files, it transformed that same number of files, and then completed successfully.
If errors are generated, check the dataxform_status_skip-_gp
file for a list of the files that were in the process of being transformed, but are now in an unknown state.