Using the system event log
ProtectToolkit-C maintains a system event log as a means of tracking serious hardware or operational faults, tamper events, and self-test error information.
Viewing and interpreting the event log
Each time a self-test fails, an unexpected event occurs at run-time, or a tamper occurs, information about the event is recorded to the event log.
The total number of events that can be recorded by the event log is limited. Under normal usage, approximately 2500 events can be recorded.
Event records are written sequentially and labeled chronologically. If the date and time of a later entry is stating earlier than the entry preceding it, the real-time clock or audit information has likely been altered.
To view the event log
From a command prompt, type:
Purging the event log
When the event log is full, the HSM will no longer store new event records and must be purged. The event log cannot be purged until it is full.
To purge the event log
From a command prompt, enter the following:
Event log error types
The following table lists the error entries that may be generated by the ProtectServer 3 HSM firmware and written to the HSM’s event log.
Event records are written sequentially and chronologically. If the date and time of a later entry in the log is stating an earlier time than an entry preceding it, it indicates that the real-time clock or audit information has been altered.
| Error code | Description |
|---|---|
| CPROV_BL_UPGRADED | Boot loader upgrade performed. Parameter 1: Mod Parameter 2: Version |
| CPROV_OS_UPGRADE_FAILED | OS upgrade failed. |
| CPROV_OS_UPGRADED | OS upgrade performed. Parameter 1: Mod Parameter 2: Version |
| ERR_HOT_TAMPER | Hot tamper detected. |
| ERR_HSM_HALT_ON_EXT_TAMPER | HSM was previously halted on external tamper. |
| ERR_HSM_HALT_ON_GENERAL_ERROR | HSM was previously halted on unrecoverable general error. |
| ERR_HSM_HALT_ON_INT_TAMPER | HSM was previously halted on internal tamper. |
| ERR_HSM_HALT_ON_LO_BAT | HSM was previously halted on low battery. |
| ERR_HSM_HALT_ON_OVER_TEMP | HSM was previously halted on over temperature. |
| ERR_HSM_HALT_ON_OVER_VOLTAGE | HSM was previously halted on over voltage. |
| ERR_HSM_HALT_ON_UNDER_TEMP | HSM was previously halted on under temperature. |
| ERR_HSM_HALT_ON_UNDER_VOLTAGE | HSM was previously halted on under voltage. |
| ERR_RTC_BATTERY_LOW | RTC: battery low. |
| FM_MODULE_FAIL | FM Module failed to load. Parameter 1: Mod Parameter 2: Version |
| FM_OP_DISABLE | FM disabled. Parameter 1: Mod Parameter 2: Version |
| FM_OP_DOWNLOAD | FM download performed. Parameter 1: Mod Parameter 2: Version |
| KEYGEN_ERR_PAIRWISE | Key generation: pairwise consistency check failed. |
| LOG_DANGLING_DIR_FOUND | Flash SMFS has detected a dangling DIR entry. |
| LOG_EVENT_LOG_PURGED | Event log has been purged. |
| LOG_FACTORY_RESET | Factory reset performed on HSM. |
| LOG_INIT_SRAM_COMMAND | Soft tamper command executed. |
| LOG_INITIALIZING_SRAM | Initializing the SRAM after a tamper. |
| POST_ERR_CODE | Code checksum check failed. |
| POST_ERR_FDS | Flash data storage error. |
| POST_ERR_FW | FW integrity check failed. |
| POST_ERR_KAT | Known answer test failed. |
| POST_ERR_RNG | RNG self test failed. |
| POST_ERR_SMFS | SMFS error. |
| PROT_CIPHER_DUPLICATE | Protection: duplicate initial value provided for SMS cipher. |
| PROT_NO_SMPR | Protection: adapter SMPR not found. |
| PTKC_CFG_CHNG | ProtectToolkit-C configuration change. Parameter 1: New value Parameter 2: Old value |
| SMFS_ERR_ERROR | Unable to read/write/access SMFS. |
| SMFS_ERR_NOT_INITED | Flash storage uninitialized. |
