The audit messages in this section are from the Cryptographic Security Platform Vault Management Appliance, the Cryptographic Security Platform Vault for Cloud Keys, the Cryptographic Security Platform Vault for Databases, and the Cryptographic Security Platform Vault for VM Encryption.

There are many audit messages produced by Cryptographic Security Platform Vault. Many of these are informative and require no action. In the tabl below, we list many of the audit messages and show:

  • Whether an Alert is also generated.
  • The severity (L=Low, M=Medium, H=High).
  • What the resolution is if any action should be taken.
  • In the Message column, a %s represents a string value. For example, in the following message:

    Added user %s to group %s

    The actual message will be displayed with the name of the user and group, for example:

    Added user fred to group IT

Msg ID

Message

Severity

Alert?

Description

Resolution

Category

Tags

1

System License installed.

L

false

A new license has been uploaded and installed.


Security

Licensing

2

Begin System Initialization

L

false



Security


3

Created group %s

M

false

The specified admin group has just been created.


Security

Account

4

Created Domain %s

L

false

This message appears during initialization of the first KeyControl node.


Security

Cluster

5

Added user %s to group %s

M

false

The user shown has been added to the specified admin group.


Security

Account

6

Expired password for user %s

H

false

A password has expired for the specified user.

The specified user needs to log into the GUI and change his/her password.

Security

Account

7

User %s logged out from ipaddr %s

L

false

The specified user has just logged out from the IP address shown.


Security

Account

8

Changed following attributes for user Security Administrator :- Password, Password Expiration Date, Password History List

M

false

One or more of the listed attributes has been changed for the user.


Security

Account

9

Changed SMTP Auth Settings

M

false

Email settings have been modified.


Security

Configuration

10

EKS has been removed, not destroying old admin keypair

M

false

Permission to use External Key Store has been removed. The old Admin Key was NOT removed on the EKS to allow restoration of older backups.

Informational only. Restore or add new access if so desired.

Security

EKS,KMIP

11

Regenerated Admin Key. The generation count of this key is %s. Reason: %s

H

true



Security


12

Created Cloud VM Set %s

L

false



Security


13

Could not create Cloud VM Set %s, HTCC server connection not configured

M

false



Security

Boundary Control

14

Masterkey Recovered on node %s

H

true



Security


15

User %s logged in from ipaddr %s

L

false

The specified user has just logged in from the IP address shown.


Security

Account

16

Repeated login failures for %s from ipaddr %s

H

true

There have been a succession of login failures for the specified user.

A security admin should check whether the correct user has been trying to log in or not.

Security

Account

17

Account disabled for %s due to repeated login failures

H

true

The number of failed login attempts has reached the maximum allowed value.

A security admin needs to reset the account to enable access.

Security

Account

18

Server registration failed -- No license Installed

H

true



Security

Licensing

19

Attempt to register a new %s server "%s" failed -- licensed limit reached.

H

true

The number of KeyControl servers is already at the limit imposed by the license. An attempt is being made to another another node.

A new license will be required before the number of nodes in the cluster can be extended. Please contact hytrust.support@entrust.com

Security

Licensing

20

Storage Pool %s Filestore %s on server %s is low on space.

H

true



Clusters


21

Changed following Settings :- %s

M

false



Security


22

Changed following attributes for group %s :- %s

M

false

One or more of the listed attributes has been changed for the group shown.


Security

Account

23

Virtual Machine %s authenticated

L

false

A VM has registered or re-authenticated.

This message is in response to direct admin actions. No action is required.

Security

Reauth

24

Virtual Machine %s created in group %s

L

false



Security


25

Removed Server %s from Cloud %s

L

false



Security


26

Created Cluster Info %s

L

false



Security


27

Removed Cluster Info %s

L

false



Security


28

Activated account for user %s

M

false

A user's account has been activated.


Security

Account

29

Disabled account for user %s

H

false

A user's account has been disabled.

A security admin should check to see if the account should be enabled again.

Security

Account

30

Created user %s

M

false

The specified user has been created.


Security

Account

31

Deleted user %s

M

false

The specified user has been deleted.


Security

Account

32

Renamed user %s to %s

L

false

A username has been modified.


Security

Account

33

Deleted group %s

L

false

The specified groups has been deleted.


Security

Account

34

Renamed group %s to %s

L

false

An admin group has been renamed.


Security

Account

35

Removed user %s from group %s

M

false

The specified user has been removed from the group shown.


Security

Account

36

Using EKS for MasterKey protection

M

false

An External Key Store has been configured to protect the Admin Key.


Security

EKS,KMIP

37

Admin Key regeneration failed. Failed to use external KMIP Server for MasterKey protection

M

true

An External Key Store has been configured to protect the Admin Key but access was not allowed for keypair creation.

EKS denied access to create/retrieve an RSA keypair. Please check KMIP settings and configuration.

Security

EKS,KMIP

38

Could not register to HTCC, htcc server, password and login must be specified

H

false



Security

Boundary Control

39

Could not register to HTCC %s: HTCC login failed

H

false



Security

Boundary Control

40

Could not register to HTCC %s. Please check user privileges and Boundary Control License on HTCC

H

false



Security

Boundary Control

41

Successfully registered with HTCC Server %s

M

false



Security

Boundary Control

42

Keyid %s has %s

H

true

Keyid has expired and/or rotated. Keys only expire if a Cloud Admin has explicitly set them to expire.


Security

KeyID

43

The Key for disk %s Virtual Machine %s has %s

H

true

A key for the specified VM has either expired or been rotated. Keys only expire or rotate if a Cloud Admin has explicitly set them to expire or rotate.


Security

KeyID

44

Key in VMSet %s on VMV %s has %s

M

true



Security

KeyID

45

Changed following KeyControl cluster settings :- %s

M

false

The name of the cluster has been modified.


Clusters

Domain

46

Deleted Domain %s

M

true



Security

Domain

47

Changed following KPS Settings :- %s

M

false



Security

Configuration

48

Changed following VS Appliance Settings :- %s

M

false



Security


49

Unknown pool %s appeared on VMV, destroying...

M

true



Security


50

Changed following Storage Pool Settings :- %s

M

false



Security


51

Changed following attributes of filestore %s :- %s

M

false



Security


52

Changed following settings for Cluster Info %s :- %s

M

false



Security


53

Coretrace Server %s, changed following attributes :- %s

M

false



Security

CoreTrace

54

Changed following settings for Cloud VM Set %s :- %s

M

false



Security


55

Cloud VM Set %s changed group ownership from %s to %s.

H

false



Security


56

Deleted Cloud VM Set %s

M

false



Security


57

Cloud VM Set %s: added keyid %s using %s cipher

H

false

A VM user has explicitly requested creation of a KeyID using the specified cipher.


Security

KeyID

58

Cloud VM Set %s: Virtual Machine %s removed keyid %s

M

false

A VM user has explicitly requested deletion of the specified KeyID. It has been removed from the specified Cloud VM.


Security

KeyID

59

Cloud VM Set %s: updated keyid %s

L

false

The KeyID description was changed.


Security

KeyID

60

Cloud VM Set %s: Virtual Machine %s attempted to fetch inactive keyid %s

M

false

The KeyID shown has been revoked but an attempt was made to fetch it.

The cloud admin who owns the key should determine whether access should be reinstated or not.

Security

KeyID

61

Cloud VM Set %s: Virtual Machine %s attempted to fetch expired keyid %s

M

false

An attempt has been made to fetch an expired KeyID.

The cloud admin who owns the key should determine whether access should be reinstated or not. This is only possible if the KeyID was set to 'No use?' on expiration.

Security

KeyID

62

Cloud VM Set %s: Virtual Machine %s fetched keyid %s

M

false

A request has been made to access the specified KeyID.


Security

KeyID

63

Revoked permission for keyid %s

M

true

KeyID is currently revoked. It must be activated before use.

The cloud admin who owns the key should determine whether access should be reinstated or not.

Security

KeyID

64

Granted permission for keyid %s

H

true

KeyID has been activated after having been previously revoked.


Security

KeyID

65

Cloud VM Set %s keyid %s updated - description %s

L

false

The description field for the specified KeyID has been updated.


Security

KeyID

66

Cloud VM Set %s keyid %s updated - key expires on %s, onexpiry %s

M

false

The expiration date and effect on expiration for the specified KeyID have been updated.


Security

KeyID

67

Cloud VM Set %s Keyid %s has expired

M

true

An expiration date has been hit for the specified KeyID

The owning cloud admin should verify that the KeyID should be no longer used.

Security

KeyID

68

Keyid %s has expired

M

true

A request to access an expired KeyID has been made.

The owning cloud admin should verify that the KeyID should be no longer used.

Security

KeyID

69

The Key for keyid %s in Cloud VM Set %s expires in %d day(s). Please extend the key life.

M

true

A KeyID is about to expire.

The owning cloud admin should verify that the KeyID should be expire and change the date if not.

Security

KeyID

70

Unable to check keyid %s

M

false

An error occurred while attempting to check properties of KeyID.

An internal error occurred while checking expiration/rotation properties for specific keyid. Informational only, keyid will be checked again.

Security

KeyID

71

Cloud VM Set %s: added fsid %s using %s cipher

M

false



Security


72

Cloud VM Set %s: Virtual Machine %s removed fsid %s

M

false



Security


73

Cloud VM Set %s: Virtual Machine %s updated fsid %s

M

false



Security


74

Revoked permission for fsid %s

M

true



Security


75

Granted permission for fsid %s

M

true



Security


76

Cloud VM Set %s fsid %s updated - key expires on %s, onexpiry %s

M

false



Security


77

Cloud VM Set %s Fsid %s has expired

M

true



Security


78

Properties changed for VMSet %s on server %s (%s)

M

false



Security


79

Virtual Machine %s, changed following attributes: %s

M

false



Security


80

Deleted Virtual Machine %s

L

true



Security


81

Deleted Certificate %s

L

false

An unused certificate was deleted


Security


82

The Virtual Machine %s, could not be checked for geo-location boundary. HTCC login failed

H

true



Security

Boundary Control

83

The Virtual Machine %s, is not in the geo-location boundary. Key access is denied

H

true



Security

Boundary Control

84

The Virtual Machine %s, is in the geo-location boundary. Key access is granted

M

true



Security

Boundary Control

85

Added Virtual Machine %s, authentication complete

L

true

A VM has completed registration.

This message is in response to direct admin actions. No action is required.

Security

Reauth

86

Added Virtual Machine %s, authentication pending

M

true

A VM has a registration request pending.

The cloud admin needs to complete authentication in the KeyControl GUI.

Security

Reauth

87

Removed Server %s from Cloud %s

L

false



Security


88

Renamed Server %s to %s

L

false



Security


89

Virtual Machine %s re-connected, authentication pending

H

true

A VM has a re-authorization request pending.

The cloud admin needs to complete re-authorization in the KeyControl GUI.

Security

Reauth

90

Revoked permissions for Virtual Machine %s

M

false



Security


91

Re-authenticated Virtual Machine %s from KPS

M

false

A VM has a re-authorized.

This message is in response to direct admin actions. No action is required.

Security

Reauth

92

Virtual Machine %s added disk %s

L

false

A new disk has been added to the specified VM.


Security

Key

93

Virtual Machine %s removed disk %s

L

true

A disk has been removed from the specified VM.


Security

Key

94

Virtual Machine %s : disk %s renamed to %s

L

false



Security

Key

95

Virtual Machine %s attempted to fetch key for inactive disk %s. %s

L

false

If a disk is not active, no keys will be delivered.


Security

Key

96

Virtual Machine %s attempted to fetch expired key for disk %s. %s

H

false

If a key has expired an attempt by a VM to fetch the key will fail.

The cloud admin should determine whether the expiration date should be extended. This does not apply to shredded keys.

Security

Key

97

Virtual Machine %s fetched key for disk %s. %s

L

false

A key for the specified disk has been requested by the VM shown.


Security

Key

98

Virtual Machine %s created key for disk %s using %s cipher

L

false

A disk has been encrypted. The type of cipher is shown.


Security

Key

99

Virtual Machine %s revoked permission for disk %s

M

true



Security

Key

100

Virtual Machine %s granted permission for disk %s

M

true



Security

Key

101

Virtual Machine %s added mount point %s

L

false

An encrypted folder has been mounted.


Security

Key

102

Virtual Machine %s removed fs %s

L

true

An encrypted folder has been removed.


Security

Key

103

Virtual Machine %s attempted to fetch key for inactive fsid %s

M

false

A virtual machine attempted to access an inactive FSID.

The cloud admin should determine whether the FSID should be made accessible.

Security

Key

104

Virtual Machine %s attempted to fetch expired key for fsid %s

H

false

The FSID has expired and therefore the filesystem cannot be mounted.

The cloud admin should determine whether the FSID should be made accessible. This is only possible if the FSID has not been shredded.

Security

Key

105

Virtual Machine %s fetched key for fsid %s

L

false

A filesystem was mounted using the specified FSID.


Security

Key

106

The Key for disk %s Virtual Machine %s has expired

H

true

An attempt is being made to change properties for an already expired key.

The cloud admin should determine whether the key of the disk should be made accessible. This is only possible if the disk's key has not been shredded.

Security

Key

107

Virtual Machine %s set key expiry to %s, onexpiry to %s for disk %s

H

false

An expiration date has been set on a key for the specified disk. The effect taken on expiration is shown.

The cloud admin should determine whether the expiration date should be extended.

Security

Key

108

The Certificate for Virtual Machine %s expire%s %d days%s. Please renew the certificate.

M

true



Security


109

The Key for disk %s Virtual Machine %s has expired

H

true

The key shown for the specified VM has expired.

The cloud admin should determine whether the expiration date should be extended.

Security

Key

110

The Key for disk %s Virtual Machine %s expires in %d day(s). Please extend the key life.

H

true

The encryption key shown is about to expire.

The cloud admin should determine whether the expiration date should be extended.

Security

Key

111

Unable to check key for disk %s Virtual Machine %s

M

false

An error occurred while attempting to check properties of key for the given disk and VM.

An internal error occurred while checking expiration/rotation properties for specified key. Informational only, key will be checked again.

Security

Key

112

Virtual Machine %s rebooted, reauthentication required

H

true

A VM has rebooted and the reboot setting requires that the VM is re-authenticated.

The cloud admin needs to complete re-authorization in the KeyControl GUI.

Security

Reauth

113

Virtual Machine %s has new alerts, please check

M

true



Security


114

Added Coretrace policy "%s" to Virtual Machine %s

L

true



Security

CoreTrace

115

Activated Coretrace policy "%s" for Virtual Machine %s

M

false



Security

CoreTrace

116

De-activated Coretrace policy "%s" for Virtual Machine %s

M

false



Security

CoreTrace

117

Modified Coretrace policy "%s" for Virtual Machine %s

M

false



Security

CoreTrace

118

Removed Coretrace policy "%s" for Virtual Machine %s

M

false



Security

CoreTrace

119

Deleted CAStore %s

M

false



Security


120

Removed Server %s from Domain %s

L

false



Clusters

Domain

121

Storage pool %s created on server %s (%s)

L

false



Security


122

Storage pool %s extended on server %s (%s)

L

false



Security


123

Log added to Storage pool %s on server %s (%s)

L

false



Security


124

Log removed from Storage pool %s on server %s (%s)

L

false



Security


125

Storage pool %s deleted from server %s (%s)

L

false



Security


126

Disk added to hot spare list on server %s (%s)

L

false



Security


127

Disk removed from hot spare list on server %s (%s)

L

false



Security


128

Filestore %s created on server %s (%s)

L

false



Security


129

Filestore %s deleted from server %s (%s)

L

false



Security


130

Removed server %s (%s) from domain %s

L

true



Clusters


131

KMIP Server restarted on %s

M

false

The KMIP server has been restarted on the specified host.


Security

KMIPServer

132

KMIP Server started on %s

L

true

The KMIP server has been started on the specified host.


Security

KMIPServer

133

KMIP Server halted on %s

H

true

The KMIP server has been halted on the specified host.


Security

KMIPServer

134

KMIP Server: All client certificates removed

H

true

All client certificates have been removed from the KMIP server.


Security

KMIPServer

135

KMIP Server: Client certificate %s removed

H

true

The specified client certificate has been removed from the KMIP server.


Security

KMIPServer

136

KMIP Server: Client certificate %s updated

M

false

The specified client certificate has been updated on the KMIP server.


Security

KMIPServer

137

KMIP Server: Client certificate %s created

M

true

The specified client certificate has been created on the KMIP server.


Security

KMIPServer

138

Could not store oskey on %s/%s. Needs recovery

H

true

Could not store object store key on joining KC node

KC join did not succeed, node should be removed from cluster. If problem persists contact support.

Clusters

HCAuth

139

Reconnect not allowed for %s/%s. Please follow reauthenication steps

H

true

KC has attempted to reauthenticate with cluster that does not recognize it

KC node likely was in the cluster and removed. Should be re-joined

Clusters

HCAuth

140

Cluster join failed for %s/%s.

H

true

KC has failed to join cluster

KC node join can be attempted again. If problem persists contact support

Clusters

HCAuth

141

Reconnect info does NOT match. Follow reauthentication steps for node %s/%s

H

true

KC has attempted to reauthenticate with cluster but its info has changed

KC node likely needs MasterKey recovery or kicked out of cluster and re-joined

Clusters

HCAuth

142

Could not store connection info for %s/%s

H

true

KC cannot store info to reconnect to cluster on restart

Condition could be transitory, node could be restarted. Also could indicate that KC disk is full

Clusters

HCAuth

143

Problem with auth/secd communication

H

true

Communication stack on KC is not working


Clusters

HCAuth

144

System utilities NOT functioning. Authentication will not happen

H

true

Auth daemon unable to query system information


Clusters

HCAuth

145

Attempt to add node %s/%s which has valid data but no clusterid. Please reauthenticate if this is a valid action.

M

true

KC was formerly in a cluster that has no identifying cluster ID

If action is a valid one, proceed with join. Note that the KC data on joining node will be destroyed

Clusters

HCAuth

146

Attempt to add node %s/%s which has a different clusterid. Please reauthenticate if this is a valid action.

M

true

KC was formerly in a different cluster than the one it is attempting to join

If action is a valid one, proceed with join. Note that the KC data on joining node will be destroyed

Clusters

HCAuth

147

Could not restore cluster to normal operating mode after adding new node, error $rc

M

true

KC cluster state could not be restored to normal operating state

Can indicate cluster join issues

Clusters

HCAuth

148

KeyControl Server system `hostname` ($myip) $act.

L

false



Clusters


149

Restricted support login enabled on `hostname`

M

true

Restricted support login was enabled on KC


Security


150

%s support login enabled on `hostname`

M

true

Full or Restricted support login was enabled on KC


Security


151

%s support login disabled on `hostname`

M

true

Full or Restricted support login were disabled on KC


Security


152

KeyControl node {$myip[0]}/{$myhost[0]} has failed upgrade to version {$curver}

H

true

KC upgrade to new version has failed

KC will revert to prior install. Upgrade can be attempted again if valid or contact support

Clusters

Upgrade

153

KeyControl node {$myip[0]}/{$myhost[0]} reverted from {$str[1]} to {$str[2]}

M

true

User initiated revert to previous version has succeeded.


Clusters

Upgrade

154

KeyControl node {$myip[0]}/{$myhost[0]} has successfully upgraded to version {$curver}

M

true

KC upgrade to new version has succeeded.


Clusters

Upgrade

155

KeyControl node {$myip[0]}/{$myhost[0]} has failed upgrade finalization to version {$curver}

H

true

KC upgrade to new version has failed

KC will revert to prior install. Upgrade can be attempted again if valid or contact support

Clusters

Upgrade

156

Hostname %s, Management IP %s, Current Version %s, New Version %s. Upgrade from version {$oldver} (b{$oldrevision}) to version {$curver} (b{$newrevision}) not allowed. Consult product documentation for upgrade procedure

H

true

KC upgrade to this version is not supported from current version

Upgrade to a supported version and/or contact support

Clusters

Upgrade

157

Upgrade from version {$oldver} to version {$curver} not officially supported but allowed for development

L

true

KC upgrade to this version is not officially supported but allowed for development build


Clusters

Upgrade

158

Internal error $ret checking upgrade from {$oldver} to {$curver}

H

true

An error has occurred attempting to valid upgrade

Contact support

Clusters

Upgrade

159

Multiple KeyControl nodes still in cluster. All excess KeyControl nodes must be removed before upgrade.

H

true

Upgrade should be attempted on only a single node cluster

Remove all nodes from cluster except the node to be upgraded

Clusters

Upgrade

160

Insufficient free space to perform upgrade. Consult product documentation for procedure to add another disk

H

true

Disk does not have enough space for upgrade

Consult support for freeing disk space or create/join a node with more space and upgrade that

Clusters

Upgrade

161

System has reverted to prior installation.

L

true

System has successfully reverted to prior version


Clusters

Upgrade

162

Failed revert to prior installation.

H

true

System failed to revert to prior version

Contact support. Current version is still in place

Clusters

Upgrade

163

System utilities NOT functioning.

H

true

Unable to query system info


Clusters


164

Error resizing partition

H

true

An error occurred while resizing the KeyControl storage. Please contact support.


Clusters


165

Error resizing storage pool

H

true

An error occurred while resizing the KeyControl storage. Please contact support.


Clusters


166

Successfully resized KeyControl storage pool

M

false

The storage pool on the KeyControl node was successfully resized.


Clusters


167

KMIP Server operation failed - internal error

M

true

KMIP server operation failed with an internal error.

Consult support or retry operation

Security

KMIPServer

168

%s operation %s for %s on %s, TaskId: %s.

L

false

A task has changed state


Security


169

Virtual Machine %s : disk %s resized to %s

L

false

Virtual Machine disk is resized


Security


170

Virtual Machine %s : KC mapping %s attached

L

false

A KC Mapping is attached to a VM


Security


172

Passwd changed for htadmin

M

true

An admin reset console/htadmin passwd


Security


173

User %s failed to change %s passwd

M

true

An admin attempted a reset console/htadmin passwd that failed


Security


174

A support event has occurred on KeyControl node %s. Please create a Support Bundle as described in the online help, then contact support.

H

true

Please contact support for more information


Security


175

New certificate created with guid %s in group %s

L

false

A new certificate has been create for use with policy agent or KMIP server


Security


176

Backup created successfully for %s (%s)

L

false

A new backup image has been created on the KeyControl appliance


Clusters


177

Failed to create backup for %s (%s)

M

false

Creation of the backup image failed.

Backup will be retried automatically or can be triggered manually via the WebGUI

Clusters


178

KeyControl Cluster is in normal mode

L

false

The KeyControl cluster state has returned to normal operating mode


Clusters


179

KeyControl Cluster is in degraded mode

H

false

The KeyControl cluster has gone into degraded mode. This occurs when the KeyControl nodes in the cluster are not able to communicate successfully

Check the availability and connectivity of the KeyControl nodes in the cluster

Clusters


180

KeyControl Cluster is in standby mode

L

false

The KeyControl cluster is in a standby state. This is a temporary state which occurs when a node is joining the cluster


Clusters


181

Freespace available on %s has fallen below 2G. An upgrade to the storage for this system should be considered.

H

true

The amount of free disk space available to the KeyControl appliance has dropped below our recommended threshold. Please increase the size of the disk or contact support for more assistance

Increase the size of the disk and reboot the KeyControl appliance to resize

Security


182

Login failure for %s from %s

L

false

User unsuccessfully attempted to login to the KeyControl instance


Security


183

Reboot of %s initiated by %s

M

true

Domain administrator initiated reboot of KeyControl node


Clusters


184

KeyControl node reboot initiated from console

M

true

The KeyControl node was rebooted from the console


Security


185

KeyControl node shutdown initiated from console

M

true

The KeyControl node was shutdown from the console


Security


186

Azure agent: illegal attempt to install plugin

M

true

Azure "extensions" (a.k.a. "plugins") to a KeyControl VM are not allowed


Security


187

Azure agent: illegal attempt to disable or uninstall a plugin

M

true

Azure "extensions" (a.k.a. "plugins") to a KeyControl VM are not allowed


Security


188

%d inactive tasks found on Cloud VM Set %s. %s task for %s on %s not updated since %s, TaskId: %s.

L

true

List of tasks that have not been updated for a long time


Security


189

Updated LDAP configuration: %s

M

false

The values for the given LDAP fields have been updated


Security


190

Virtual Machine %s synchronized devices. Following devices were not found - %s

M

false

The Policy Agent synchronized the registered device list; some devices not found


Security


191

Virtual Machine %s synchronized devices. Reason for sync: %s

M

true

The Policy Agent synchronized the registered device list


Security


192

Virtual Machine %s state for disk %s changed to %s. %s

L

false

Disk state on policy agent changed


Security


193

HyTrust bootloader ssh key updated for %s

L

false

Private key required for ssh login to hytrust bootloader updated on KC


Security


194

Two-factor authentication enabled for %s

L

false

Two factor authentication has been enabled for the user


Security


195

Two-factor authentication disabled for %s

M

true

Two factor authentication has been disabled for the user


Security


196

KeyControl Cluster is in degraded mode during node-join

L

false

The KeyControl cluster has gone into degraded mode while a new node is joining the cluster. This occurs as KeyControl restarts communication protocols after a new node has joined the cluster.


Clusters


197

KeyControl Cluster is in degraded mode during node-join

L

false

The KeyControl cluster has gone into normal mode while a new node is joining the cluster. This occurs as KeyControl restarts communication protocols after a new node has joined the cluster.


Clusters


198

New AppLink created to %s

M

true

A new Application Link has been created. This link will allow secure communication between the Entrust products.


Clusters


199

Application link removed for Product (%s) Version (%s) IP List (%s)

L

false

Application link has been removed for the external product.


Clusters


200

admin user logged in successfully

M

false

htadmin account login successful in one of the KeyControl nodes


Security

Support

201

%s account logged in from IP

M

false

Full support account login successful in one of the KeyControl nodes


Security

Support

202

htadmin account login failure

M

false

Failed attempt to login to htadmin account


Security

Support

203

%s account login failure from IP - Reason

M

false

Failed attempt to login to full support account


Security

Support

204

Full support account user logged in from IP and executed command

M

false

Full support account login successful and executed a command


Security

Support

205

%s account login failure from IP attempting command

M

false

Failed attempt to login to full support account and execute command


Security

Support

206

Created new log bundle - %s with options - %s

L

false

New log bundle creation has been initiated by some user


Security


207

Downloaded log bundle - %s

L

false

Latest log bundle has been downloaded by some user


Security


208

Exported Cloud VM Set %s

M

false

A Cloud VM Set has been exported


Security


209

Imported Cloud VM Set %s

M

false

A Cloud VM Set has been imported


Security


210

Following guests have unsupported policy agent installed in Cloud VM Set %s: %s(%s)

M

true

A Cloud VM Set has guests with unsupported agent version

Upgrade policy agent on reported guests

Security


211

Unsupported Policy Agent (version %s ) detected on guest %s.

M

false

A guests has unsupported agent version installed

Upgrade policy agent on reported guest

Security


212

Download of admin key generation %s initiated by %s

M

false

Download of admin key initiated via admin_key GET call


Security


213

Reset of KMIP server initiated

M

false

Reset of KMIP server initiated


Security


214

KMIP Response/Request: < op> <obj> <result>

M

false

Create, destroy or revoke of KMIP object initiated


Security


215

KMIP Response/Request: < op> <obj> <result>

M

false

Operation on some KMIP object initiated


Security


216

The Certificate for Virtual Machine %s will auto-renew in %d days

L

true



Security


217

The Certificate for Virtual Machine %s failed to auto-renew. Certificate expires %d days. Please renew the certificate.

H

true



Security


218

Set Key Encryption Key expiry to %s on expiry to %s, for Cloud VM Set %s. %s Cloud VMs affected.

H

false

An expiration date has been set for Key Encryption Key for the specified Cloud VM Set. The effect taken on expiration is shown.

The cloud admin should determine whether the expiration date should be extended.

Security

Key Encryption Key

219

The Key Encryption Key for Cloud VM Set %s expire%s in %d days%s.

H

true


The cloud admin should determine whether the expiration date should be extended.

Security

Key Encryption Key

220

The Key Encryption Key for Cloud VM Set %s has expired. %s Cloud VMs affected.

H

true

The Key Encryption Key for specified Cloud VM Set has expired.

The cloud admin should determine whether the expiration date should be extended.

Security

Key Encryption Key

221

Access to Key Encryption Key of Cloud VM Set %s has been revoked. %s Cloud VMs affected.

H

true

Access to specified Cloud VM Set has been revoked.


Security

Key Encryption Key

222

Access to Key Encryption Key of Cloud VM Set %s has been granted. %s Cloud VMs affected.

H

true

Access to specified Cloud VM Set has been granted.


Security

Key Encryption Key

223

The Key Encryption Key for Cloud VM Set %s has expired. %s Cloud VMs deleted. Deleted CVM Set %s.

H

true

The Key Encryption Key for specified Cloud VM Set has expired.


Security

Key Encryption Key

224

The Certificate for Virtual Machine %s failed to auto-renew as the Virtual Machine is unreachable.

H

true

The Certificate Auto Renewal of a VM fails if the VM is in auto renewal period and is unreachable.


Security


225

Authentication of Server %s (%s) failed due to incorrect passphrase


false

Authentication of KeyControl node failed due to incorrect passphrase.


Security


226

Cloud VM Set creation failed. Error: Failed to store key in HSM. %s

H

true

Cloud VM Set creation failed. Failed to store key in HSM.

A security admin should check whether the HSM connection is configured properly

Security

Key Encryption Key

227

Key Encryption Key import failed. Error: Failed to store key in HSM. %s

H

true

Key Encryption Key import failed. Failed to store key in HSM.

A security admin should check whether the HSM connection is configured properly

Security

Key Encryption Key

228

Failed to fetch Key Encryption Key from HSM. Error: %s

H

true

Failed to fetch Key Encryption Key from HSM.

A security admin should check whether the HSM connection is configured properly

Security

Key Encryption Key

229

Successfully imported Key Encryption Key for Cloud VM Set %s.


false

Successfully imported Key Encryption Key


Security

Key Encryption Key

230

Removed Domain %s from group %s


false

Removed Domain from group


Security


231

Authenticated Server %s (%s)


false

New Key Control has been successfully authenticated and added to the cluster


Clusters


232

Added Server %s (%s) to Domain %s


false

Server has been successfully added to a domain


Clusters


233

Invalid Key Encryption Key size specified for Cloud VM Set %s.

H

true

Invalid Key Encryption Key size

Verify that the Key Encryption Key size is 128 bits or 256 bits

Security

Key Encryption Key

234

Retention period has expired for Cloud VM Set %s. %s Cloud VMs deleted. Deleted Cloud VM Set %s.

L

true

Retention period has expired for Cloud VM Set


Security

Key Encryption Key

235

Retention period for Cloud VM Set %s will expire in %d days.

H

true

Retention period expiration for Cloud VM Set

The cloud admin should determine whether the retention date should be extended.

Security

Key Encryption Key

236

Set Retention Date to %s for Cloud VM Set %s.


false

Changed Retention period for Cloud VM Set


Security

Key Encryption Key

237

Failed to delete Key Encryption Key from HSM for Cloud VM Set %s. Error: %s.

M

true

Failed to delete Key Encryption Key from HSM


Security

Key Encryption Key

238

New CA Certificate added to Certificate Store for verifying %s


false

New CA certficate has been added to verify some subsystem


Clusters


239

CA Certificate for %s removed from Certificate Store


false

CA Certificate for some subsystem has been removed from Certificate Store


Clusters


240

Authentication for LDAP user %s failed. Reason :- %s


false

Reason for LDAP login failures


Security


241

Cannot register Cloud VM until Key Encryption Key for Cloud VM Set %s is imported

L

true

Cannot register Cloud VM


Security

Key Encryption Key

242

Virtual Machine %s HTcrypt driver update -- %s

L

false

HTcrypt driver state on policy agent changed


Security


243

New self-signed certificates generated for %s

L

false

New self-signed certificates generated for server


Clusters

Certificate

244

New SSL certificate installed for %s

L

false

New SSL certificate installed for server


Clusters

Certificate

245

CSR generated with common name - %s

L

false

New CSR generated


Clusters

Certificate

246

Web server for %s restarted

L

false

Webserver/Apache restarted for server


Clusters

Certificate

247

Certificate installation task got timed out. There are VMs that did not receive the new CA certificate. Please contact Cloud Administrators to login to the VM and execute hcl heartbeat before restarting the webserver

H

true

One (or more) policy agents did not receive the new CA certificate uploaded. Cloud administrator has to login to the policy agent and execute hcl heartbeat


Clusters

Certificate

248

Cannot update CA as part of SSL certificate installation for %s. Please login to the VM and execute hcl heartbeat

H

true

Domain Administrator has attempted to install a new SSL certificate for the webserver. Unfortunately one of the policy agents did not receive a copy of the new CA certificate that can verify the SSL certificate of the webserver. Cloud administrator has to login to the policy agent and execute hcl heartbeat


Clusters

Certificate

249

External web server certificate of %s has expired. A new certificate must be installed before the associated VMs can communicate with %s. After the new certificate has been installed, the certificate information on the associated VMs must be manually updated if the new certificate is from a different Certificate Authority. For more information, search for certificates in the WebGUI online help.

H

true

Certificate used by the external webserver of one of the nodes has expired. Domain administrator has to install a new certificate. If the newly installed certificate is generated by a new CA, cloud administrators will have to login to policy agent and update the CA certificate file. The latest CA certificate file can be found in the cloud tab in webGUI


Clusters

Certificate

250

External web server certificate of %s will expire in %s days, %s hours and %s minutes. If another certificate is not installed before the current one expires, the VMs will not be able to communicate with %s after %s and all VMs may need to be manually updated after the new certificate is installed. For more information, search for certificates in the WebGUI online help.

H

true

Certificate used by the external webserver of one of the nodes is about to get expired. Domain administrator has to install a new certificate before it gets expired. Otherwise policy agents will not be able to communicate with the KC after expiry


Clusters

Certificate

251

CA certificate used for verifying %s:%s on %s has already expired. Please upload a new CA certificate to verify the %s server certificate. Otherwise %s users will not be able to login to the WebGUI.

H

true

CA certificate used by the LDAP server has already expired. Security Administrator has to install a new certificate to verify the LDAP server certificate. Otherwise LDAP users will not be able to login to the WebGUI.


Clusters

Certificate

252

CA certificate used for verifying %s:%s on %s will expire in %s days, %s hours and %s minute. If another CA certificate is not installed before the current one expires, %s users will not be able to login to the WebGUI after %s.

M

true

CA certificate used for evaluating LDAP server certificate is about to get expired. Security Administrator has to install a new certificate before the current one expires. Otherwise LDAP users will not be able to login to the WebGUI after the CA certificate expiry date.


Clusters

Certificate

253

Certificate for %s:%s has already expired. Please re-configure %s after updating the certificate in %s.

H

true

Certificate for APPLINK has already expired. APPLINK should be reconfigured after uploading a new certificate.


Clusters

Certificate

254

Certificate for %s:%s will expire in %s days, %s hours and %s minutes. Once the certificate of %s is updated, please re-configure the %s:%s

M

true

Certificate for APPLINK is about to get expired. Security Administrator has to install a new certificate and re-configure the APPLINK before the current one expires.


Clusters

Certificate

255

KeyControl Cluster is in maintenance mode

L

false

The KeyControl cluster is in maintenance state. This is a temporary state which occurs during upgrade process


Clusters


256

Virtual Machine with IP %s is a possible clone of %s (%s) and hardware signature verification is turned off.

H

true

A possible clone of a Virtual Machine that is already registered has been detected. Verify that the VM is valid and register it as a new VM using 'hcl register -c' command.


Security


257

KeyControl cluster has been successfully upgraded from KC %s to version KC %s

M

true

KeyControl cluster upgrade to new version has succeeded.


Clusters

Upgrade

258

KeyControl cluster has been successfully reverted from KC %s to version KC %s

M

true

KeyControl cluster revert to old version has succeeded


Clusters

Upgrade

259

Access Control Policy: %s, at version: %s applied to disk: %s on VM: %s

H

true

Access Controls Policy version update to disk.


Security

Access Control

260

Access Control Policy removed from disk: %s on VM: %s

H

true

Access Controls Policy removed.


Security

Access Control

261

New Access Control Policy: %s created.

L

false

New Access Control Policy Created.


Security

Access Control

262

Access Control Policy: %s updated. Policy now available as: %s.

H

false

Access Control Policy Updated.


Security

Access Control

263

Access Control Policy: %s deleted.

L

false

Access Control Policy Deleted.


Security

Access Control

264

Access Control Rule: %s added to Policy: %s.

H

false

New Access Control Rule added to Policy.


Security

Access Control

265

Access Control Rule: %s updated for Policy: %s.

H

false

Access Control Rule updated for Policy.


Security

Access Control

266

Access Control Rule: %s deleted from Policy: %s.

H

false

Access Control Rule deleted from Policy.


Security

Access Control

267

hytrust_accesscontrols rpm state changed to: %s on VM: %s

M

false

HyTrust Access Controls rpm state changed


Security

Access Control

268

Initiated application of Access Control Policy: %s to disk: %s on VM: %s.

H

false

Access Control Policy application initiated by Admin.


Security

Access Control

269

Initiated removal of Access Control Policy: %s from disk: %s on VM: %s.

H

false

Access Control Policy removal initiated by Admin.


Security

Access Control

270

Created Cloud VM Set %s with Single Encryption Key

L

true

CVMSet created with Single Encryption Key for dedup


Security


271

Failed to upgrade KeyControl nodes: %s. Reverting upgraded nodes: %s.

L

true

Failed to upgrade KeyControl nodes.


Clusters

Upgrade

272

Failed to revert KeyControl nodes: %s. Remove nodes from KeyControl after reboot.

L

true

Failed to revert KeyControl nodes.


Clusters

Upgrade

273

Upgrade Cancelled. Error: %s

L

true

Failed to finalize upgrade.


Clusters

Upgrade

274

%s got reverted during upgrade. Reverting other nodes in the cluster to revision %s

L

false

Failed to upgrade KeyControl node.


Clusters

Upgrade

275

Successfully cancelled KeyControl Upgrade.

M

false

Cancelled KeyControl Upgrade.


Clusters

Upgrade

276

IP conflict detected for %ipaddr with MAC %this_mac on %this_month %this_day %this_time

H

true

Another VM is/was using this KeyControl IP address.


Security


277

Access Controls removed successfully on VM %s

H

true

Successful Access Controls removal on VM


Security

Access Control

278

Applying Policy %s, version %s failed on VM %s. %s

H

true

Policy application failure on VM with reason.


Security

Access Control

279

Applying Policy %s, version %s failed on disk %s of VM %s

H

true

Failure in Policy application on a specific disk of a VM.


Security

Access Control

280

Error removing Access Control Policy on disk %s of VM %s

H

true

Error removing Access Control Policy on a disk.


Security

Access Control

281

%s doesn't allow local user creation. Cannot support Access Controls

H

true

VM doesn't support Access Controls due to inability to create local users


Security

Access Control

282

%s doesn't allow ssh for localhost. Cannot support Access Controls

H

true

Cannot setup Access Controls on VM since it doesn't allow ssh for localhost


Security

Access Control

283

%s doesn't allow password-based ssh login. Cannot support Access Controls

H

true

Cannot setup Access Controls on VM since it doesn't allow password-based ssh login.


Security

Access Control

284

Access Control setup failed on VM %s. Please check /var/log/htac.log on VM for more details

H

true

Failure in initial Access Controls setup


Security

Access Control

285

Insufficient free space on %s to perform upgrade. Consult product documentation for procedure to add another disk

H

true

Disk does not have enough space for upgrade

Consult support for freeing disk space or create/join a node with more space and upgrade that

Clusters

Upgrade

286

Access Control tampering detected on VM %s

H

true

Access Control Tampering


Security

Access Control

287

Error enforcing policy %s, version %s on VM %s. %s

H

true

Access Control Policy application failure due to htadmin error


Security

Access Control

288

New AD Server: %s created.

L

false

Create AD Server


Security

Active Directory

289

Updated AD Server config: %s.

L

false

Updated AD Server config


Security

Active Directory

290

Deleted AD Server: %s.

L

false

Deleted AD server


Security

Active Directory

291

User account htadmin already exists on VM %s. Please delete htadmin, before enforcing Access Control Policy

L

true

Local user account htadmin detected before Access Control pre-setup tests


Security

Access Control

292

VM - %s cannot verify communications from KeyControl because the KeyControl SSL certificate has changed but the CA certificate on the VM was not updated when the new SSL certificate was installed for KeyControl. To update the CA certificate on the VM and restore connectivity, log into the webGUI, download the latest CA certificate from Cloud tab > Actions > Download CA Certificate, copy the CA certificate to the VM, and execute "hcl update_ca -f pathtocert"

H

true

SSL certificate of KeyControl has changed and webserver has been restarted. One of the VMs did not receive the latest copy of the CA certificate to verify KeyControl. To restore communication, download the latest CA certificate from webgui cloud tab, copy it to the VM and execute hcl update_ca command


Security

Certificate

293

KMIP user certificate for %s has expired. KMIP client(s) that is/are using the expired certificate will not be authenticated to perform KMIP operations. Please extend the user certificate or create new user certificate, and update the KMIP clients with the new certificate bundle

H

true

KMIP user certificate for one of the users has expired. KMIP client(s) using the expired certificate will not be authenticated to perform KMIP operations. Please create new KMIP certificate for the KMIP client(s) to use


Security

Certificate,KMIP

294

KMIP user certificate for %s will expire in %s days, %s hours and %s minutes. Upon expiry, client(s) that is/are using the expired certificate will not be authenticated to perform KMIP operations. Please extend the user certificate or create new user certificate, and update the KMIP clients with the new certificate bundle

H

true

KMIP user certificate for one of the users will expire soon. Upon expiry, KMIP client(s) using the expired certificate will not be authenticated to perform KMIP operations. Please create new KMIP certificate for the KMIP client(s) to use


Security

Certificate,KMIP

295

VM %s is using an older Hardware Signature format. Please run "hcl auth" cmd on the VM for a more secure signature.

H

true

VM is using an older Hardware Signature format. Please run "hcl auth" cmd on the VM for a more secure signature.


Security

Client

296


L

true

Alert email sent to Security Admins on upgrade.


Security


297

Abandoning %d inactive tasks on %s. Abandoning %s task %s on %s not updated since %s, TaskId: %s

L

true

List of tasks that have been abandoned due to inactivity


Security


298

Error!!! Could not enable support login. Please make sure there is enough space in the filesystem

H

true

Cannot enable support login. Please make sure there is enough space in the file-system

Increase the size of the disk and reboot the KeyControl appliance to resize

Security

Support

299

Error!!! Could not disable support login. Please make sure there is enough space in the filesystem

H

true

Cannot disable support login. Please make sure there is enough space in the file-system

Increase the size of the disk and reboot the KeyControl appliance to resize

Security

Support

300

%s attempting %s account login when object store is not readable

M

false

Attempt to login to support login in one of the KeyControl nodes when object store is down


Security

Support

301

Decryption is not allowed for device %s on VM %s. To decrypt: Access Control Policy : %s Version: %d must be removed from device. Auto Encryption Policy should be changed so as to exclude the device.

L

true

Device decryption refused due to applied policies.

Change policies as suggested in error message.

Security


302

Space on HyTrust Bootloader partition %s is running low (%lld bytes free). Often times USN journal is the culprit. You can check USN journal size using the command: "fsutil usn queryjournal %s". To delete USN journal, use the command: "fsutil usn deletejournal /N %s "

H

true

Device decryption refused due to applied policies.

Change policies as suggested in error message.

Security


303

Login failure for %s from %s because %s is in lock out period.

M

false

Attempt to login to secroot in the lock out period after repeated unsuccessful login attempts


Security

Account

304

Changed AD group members for group %s. %s

L

false

List of AD Group members has been changed for a KeyControl Group


Security

Group

305

The current number of KeyControl nodes (%d) exceeds the maximum number of nodes allowed by your license (%d). You cannot add any more KeyControl nodes to this cluster until you upgrade your license.

M

true

KeyControl nodes in use exceeds license limit of installed license


Security

Licensing

306

The current number of VMs registered with this KeyControl cluster (%d) exceeds the maximum number of VMs allowed by your license (%d). You cannot register any additional VMs until you upgrade your license.

M

true

Registered VM count exceeds license limit of installed license


Security

Licensing

307

Service %s is up

L

false

KeyControl system service is up


Security

SystemService

308

Service %s is down

H

true

KeyControl system service is down


Security

SystemService

309

Using AD group membership for %s - %s

M

false

ADgroup membership of the AD user that was returned by the LDAP server during first time login. The ADgroup membership will be used to determine the KeyControl Group membership of the AD user.


Security

Licensing

310

Updating AD group membership for %s - %s

M

false

ADgroup membership of the AD user that was returned by the LDAP server. The new ADgroup membership will be used to determine the KeyControl Group membership of the AD user who has already logged into KeyControl previously.


Security

Licensing

311

Added KMIP client configuration. Server: %s

L

false

Added KMIP client configuration


Security

KMIP Client

312

Updated KMIP client configuration. Server: %s

L

false

Updated KMIP client configuration


Security

KMIP Client

313

Deleted KMIP client configuration. Server: %s

H

true

Deleted KMIP client configuration


Security

KMIP Client

314

Deleted all KMIP client configurations.

H

true

Deleted KMIP client configuration


Security

KMIP Client

315

Failed to delete key:%s on external KMIP server

M

false

Failed to delete key on KMIP server


Security

KMIP Client

316

Added AD Domain: %s

L

false

Added a new AD Domain


Security

LDAP

317

Updated AD Domain %s. Changed Attributes - %s

L

false

Updated the AD Domain


Security

LDAP

318

Remomved AD Domain %s

L

false

Removed AD Domain from KeyControl


Security

LDAP

319

Added new Domain Controller %s for AD Domain %s

L

false

Added a new AD Domain Controller


Security

LDAP

320

Updated Domain Controller %s for AD Domain %s. Changed Attributes - %s

L

false

Updated Domain Controller


Security

LDAP

321

Removed Domain Controller %s for AD Domain %s

L

false

Removed Domain Controller from KeyControl


Security

LDAP

322

encrypt failed for device %s on VM %s, error %d

M

true

Encrypt operation failed on VM


Security

Client

323

decrypt failed for device %s on VM %s, error %d

M

true

Decrypt operation failed on VM


Security

Client

324

rekey failed for device %s on VM %s, error %d

M

true

Rekey operation failed on VM


Security

Client

325

Successfully deleted admin key on EKS: %s

M

false

Successfully deleted admin key on KMIP server


Security

KMIP Client

326

Successfully generated admin key on EKS: %s

M

false

Successfully generated admin key on KMIP server


Security

KMIP Client

327

Failed to generate admin key on EKS: %s

H

true

Failed to generate admin key on KMIP server


Security

KMIP Client

328

Failed to store admin key on EKS: %s

H

true

Failed to store admin key on KMIP server


Security

KMIP Client

329

Successfully stored admin key on EKS: %s

M

false

Successfully stored admin key on KMIP server


Security

KMIP Client

330

Failed to fetch admin key from EKS: %s

M

true

Failed to fetch admin key from KMIP server


Security

KMIP Client

331

KeyControl Upgrade failed. Please contact Support

H

true

Post upgrade failed


Clusters

Rolling Upgrade

332

Domain Controllers re-ordered for %s

L

false

Order of Domain Controllers has been changed for an AD domain configured


Security

LDAP

333

Failed to set backup hosts to %s on %s

H

true

Failed to update backup hosts


Security


334

Virtual Machine %s is in BoundaryControl grace period

M

true

VM in Boundary Control grace period


Security

Boundary Control

335

Virtual Machine %s, BoundaryControl grace period expired

M

true

VM Boundary Control grace period expired


Security

Boundary Control

336

Application Link created from Product (%s) Version (%s) IP List (%s)

L

false

A new Application Link has been created from an external product. This link will allow the external product to make API calls to KeyControl.


Clusters

AppLink

337

Application Link renewed for Product (%s) Version (%s) IP List (%s)

L

false

An Application Link has been renewed for the external product.


Clusters

AppLink

338

Failed to upgrade LDAP Settings. Please reconfigure LDAP settings manually

H

true

Failed to upgrade LDAP Settings.


Security

LDAP

339

Failed to store adminkey on HSM

H

true

Failed to store adminkey on HSM


Security

HSM

340

Removed Server(s) %s from Domain %s

L

true



Clusters


341

Grace period will expire on %s for Virtual Machine %s, please check connectivity

H

true



Security


342

Grace period expired for Virtual Machine %s, please authenticate again

H

true



Security


343

Virtual Machine %s, failed to update following attributes: %s

H

false

Failed to update Virtual Machine settings


Security


344

Finished propagating changed attributes: %s to all Virtual Machines in Cloud VMSet: %s

H

false

Propagation of changed attributes completed for CVMSet


Security


345

Invalid software was discovered on KeyControl system %s. This is a possible trojan horse attack. Contact Support for assistance

H

true

Whitelisting violation detected on production build


Security

Whitelisting

346

Entrust Whitelist validation on KeyControl system %s has discovered modified files. These changes are allowed for development systems, but please review Whitelist logs for correctness.

L

true

Whitelisting violation detected on development build


Security

Whitelisting

347

Could not set password for %s: %s

H

true

Failed to set password


Security


348

Password changed for %s

H

true

Password changed


Security


349

Enabled %s user

H

true

Enabled user


Security


350

Failed to enable %s user

H

true

Failure in enabling user


Security


351

Disabled %s account

H

true

Disable account


Security


352

%s user logged out successfully

L

false

User logout


Security


353

Could not download the certificate: %s

M

true

Download certificate failure


Security


354

Downloaded a new CA certificate

M

true

Downloaded CA certificate


Security


355

ssh %sd for %s

M

false

SSH enabled/disabled for user


Security


356

Failed to %s ssh for %s

M

false

Failure in enabling/disabling SSH for user


Security


357

KeyControl restored from version %s backup file

M

false

KeyControl restored from backup successfully


Security


358

License auto-update: %s

M

true

License change during auto-update


Security


359

Failed to %s syslog on %s

H

true

Failed to enable/disable syslog on KeyControl node(s)


Security

syslog

360

Generated Syslog Certificate Signing Request with common name %s

L

false

Generated Syslog Certificate Signing Request with common name


Security

syslog

361

Changed following Syslog settings attributes: %s

L

false

Changed some Syslog settings attributes.


Security

syslog

362

Exporting audit log succeeded for %s (%s). Audit log is available to download.

M

true

Finish exporting audit log


Security


363

Exporting audit log failed for %s (%s).

M

true

Exporting audit log failed


Security


364

CVM Certificate %s, associated with CVM %s, CVMSet %s, revoked successfully

H

true



Security

Certificate

365

Cloud VM Set creation failed. Error: Failed to create root key in HSM. %s.

H

true

Root key creation failure on HSM during Cloud VM Set creation.

Security Admin should determine whether HSM is properly configured.

Security

Key Encryption Key

366

Cloud VM Set creation failed. Error: Failed to generate wrapped Key Encryption Key in HSM. %s.

H

true

Wrapped Key Encryption Key generation failed on HSM during Cloud VM Set creation

Security Admin should determine whether HSM is properly configured..

Security

Key Encryption Key

367

Virtual Machine %s moved from Cloud VM Set - %s (in KeyControl Group - %s) to Cloud VM Set - %s in (KeyControl Group - %s)

M

true

Virtual Machine has been moved from Cloud VM Set to another one (might be in another KeyControl Group


Security


368

Successfully enabled passphrase based startup authentication

M

false

Set startup authentication type


Clusters

Startup Authentication

369

Successfully changed passphrase for startup authentication

M

false

Changed passphrase for startup authentication


Clusters

Startup Authentication

370

Recovered access to KeyControl node %s using passphrase

M

true

Recovered Masterkey using passphrase


Clusters

Startup Authentication

371

Successfully disabled passphrase based startup authentication

M

false

Set startup authentication type


Clusters

Startup Authentication

372

Successfully reset nShield HSM configuration

M

false

nShield HSM configuration reset


Security

HSM

373

Cloud VM Set %s: Asymmetric KeyID %s created.

M

false

Asymmetric KeyID created


Security

Asymmetric KeyID

374

Cloud VM Set %s: Asymmetric KeyID %s revoked/unrevoked.

M

false

Asymmetric KeyID revoked/unrevoked


Security

Asymmetric KeyID

375

Cloud VM Set %s: Asymmetric KeyID %s updated - expires %s, onexpiry %s.

M

false

Asymmetric KeyID expiration attributes updated


Security

Asymmetric KeyID

376

Cloud VM Set %s: Asymmetric KeyID %s description updated.

M

false

Asymmetric KeyID description updated


Security

Asymmetric KeyID

377

Cloud VM Set %s: Asymmetric KeyID %s deleted.

M

false

Asymmetric KeyID deleted


Security

Asymmetric KeyID

378

Successfully encrypted plaintext using KeyID: %s

M

false

Encrypted plaintext using keyid key


Security

KeyID

379

Successfully decrypted ciphertext using KeyID: %s

M

false

Decrypted ciphertext using keyid key


Security

KeyID

380

Cloud VM Set %s: Asymmetric KeyID %s has expired

M

true

Asymmetric KeyID expired


Security

Asymmetric KeyID

381

Fatal error on KeyControl nodes: %s. Please contact Support

H

true

KeyControl Upgrade Failure

Reinstall specified nodes to secure KeyControl Cluster

Security

Rolling Upgrade

382

CRL regenerated and applied successfully on %s

M

false

CRL regeneration


Security

Certificate

383

Attempt to register a new KeyControl node (%s) with revision %s failed. Error: %s

M

true

Attempt to register a new KeyControl node failed


Clusters

Cluster Node Join

384

Successfully reset %s

M

true

The KeyControl node has been reset.


Clusters

Cluster Node Join

385

%s. Please contact HyTrust to buy/renew the license. If you do not plan to use this feature, you should delete your existing vault(s) to stop this message. For more information, see the Administration Guide.

M

true

Vault license not enabled or expired


Security

Licensing

386

Created Secrets Vault %s

M

false

The specified vault has just been created.


Security

Secrets Vault

387

Successfully removed pre-upgrade snapshots.

M

true

KC pre-upgrade snapshots were removed.


Clusters

Upgrade

388

KeyControl node {$myip[0]}/{$myhost[0]} removed pre-upgrade snapshots.

M

true

KC pre-upgrade snapshots were removed from a node.


Clusters

Upgrade

389

KeyControl configuration has been successfully updated. New node %s needs to be added to nShield HSM server configuration

M

true

Update nShield HSM server configuration


Security

HSM

390

Failed to configure newly joined node %s for nShield HSM server

H

true

Failed to configure node for nShield HSM


Security

HSM

391

Successfully completed decryption of KMIP objects

H

true

Decrypt operation completed for KMIP objects


Security

KMIP

392

Successfully completed rekey of KMIP objects

H

true

Rekey operation completed for KMIP objects


Security

KMIP

393

Successfully enabled encryption of KMIP objects

H

true

Enabled encryption of KMIP objects


Security

KMIP

394

Successfully disabled encryption of KMIP objects

H

true

Disabled encryption of KMIP objects


Security

KMIP

395

Failed to generate Key Encryption Key on HSM. Error: %s

H

true

Failed to generate Key Encryption Key on HSM


Security

KMIP

396

Successfully generated Key Encrytion Key on HSM

M

false

Generated Key Encryption Key on HSM


Security

KMIP

397

Successfully cancelled node-join

M

false

Cancelled KeyControl Node-Join


Clusters

Cluster Node Join

398

Failed to join %s to KeyControl Cluster. Error: %s

M

true

Failed to join KeyControl node


Clusters

Cluster Node Join

399

Successfully joined %s to KeyControl Cluster

M

false

Added new node to KeyControl Cluster


Clusters

Cluster Node Join

400

CSR generated with common-name %s for node-join

M

false

Certificate Signing Request generated for node-join


Clusters

Cluster Node Join

401

Certificate bundle generated for node-join

M

false

Certificate bundle generated for node-join


Clusters

Cluster Node Join

402

Returning keys to VM %s running on ESXi Host %s. VM UUID is %s.

M

false

Returning keys to VM on successful authorization with HTCC with additional VM info


Security

GET-KEY Container

403

Returning keys to VM %s

M

false

Returning keys to VM on successful authorization with HTCC


Security

GET-KEY Container

404

NTP servers not found on KeyControl %s

H

true

NTP servers not found on KeyControl

Configure NTP servers using KeyControl TUI

Clusters

NTP

405

NTP synchronization failed on KeyControl %s

M

true

NTP synchronization failed on KeyControl

Check if NTP servers are reachable from KeyControl

Clusters

NTP

406

Freespace available on %s has fallen below %s%% for the /boot volume. Please contact support.

H


The amount of free disk space on the KeyControl appliance /boot filesystem has dropped below our recommended threshold. Please contact support for assistance.

Contact support.

Clusters


407

Set Key Encryption Key expiry to %s, onexpiry to %s for Cloud VMSet %s. Initiated rekey process to encrypt all Data Encryption Keys.

M

false

Added Key Encryption Key to Cloud VMSet


Security

Key Encryption Key

408

Successfully encrypted Data Encryption Keys of all CVMs in CVMSet: %s with a Key Encryption Key: %s. %s VMs, %s KeyIDs %s Asymmetric KeyIDs affected

M

false

Successfully encrypted Data Encryption Keys with Key Encryption Key


Security

Key Encryption Key

409

Successfully reset Luna HSM configuration

M

false

Luna HSM configuration reset


Security

HSM

410

Successfully tested nShield HSM configuration

M

false

nShield HSM configuration was successfully tested


Security

HSM

411

Luna HSM configuration changed:-

M

false

Luna HSM configuration changed


Security

HSM

412

Successfully tested Luna HSM configuration

M

false

Luna HSM configuration was successfully tested


Security

HSM

413

Luna Cloud HSM configuration changed:-

M

false

Luna Cloud HSM configuration changed


Security

HSM

414

Successfully reset Luna Cloud HSM configuration

M

false

Luna Cloud HSM configuration was reset


Security

HSM

415

Successfully tested Luna Cloud HSM configuration

M

false

Luna Cloud HSM configuration was successfully tested


Security

HSM

416

Failed to create /bootext filesystem. Please contact support for more assistance

H

true

Failed to create /bootext filesystem. Please contact support for more assistance


Security


417

Failed to join %s/%s to KeyControl Cluster. Please contact Support

H

true

Failed to join KeyControl node to cluster


Clusters

Cluster Node Join

418

CloudKey: {} in KeySet {} modified

M

true

CloudKey: {} in KeySet {} modified


Security

BYOK

419

CloudKey: {} in KeySet {} migrated to HSM

M

false

CloudKey: {} in KeySet {} migrated to HSM


Security

BYOK

420

Cloud Key {} deleted from KMS

H

true

Cloud Key {} deleted from KMS


Security

BYOK

421

Cloud Key {} restored to KMS

M

true

Cloud Key {} restored to KMS


Security

BYOK

422

Cloud Key {} state changed to {} on KMS

H

true

Cloud Key {} state changed to {} on KMS


Security

BYOK

423

Tag {} (value {}) set on Cloud Key {}

M

false

Tag {} (value {}) set on Cloud Key {}


Security

BYOK

424

Removed Tag {} on Cloud Key {}

M

false

Removed Tag {} on Cloud Key {}


Security

BYOK

425

Set users ({}) and administrators ({}) to Cloud Key {}

M

true

Set users ({}) and administrators ({}) to Cloud Key {}


Security

BYOK

426

Removed {} ({}) from Cloud Key {}

M

true

Removed {} ({}) from Cloud Key {}


Security

BYOK

427

New Cloud Key {} created in KeySet {}

M

true

New Cloud Key {} created in KeySet {}


Security

BYOK

428

New Cloud Key {} created in KeySet {} {} {}

M

true

New Cloud Key {} created in KeySet {} Region/Vault {}


Security

BYOK

429

Cloud Key {} in KeySet {} uploaded to {} {}

M

true

Cloud Key {} in KeySet {} uploaded to {} {}


Security

BYOK

430

Cloud Key {} in KeySet {} rotated

M

true

Cloud Key {} in KeySet {} rotated


Security

BYOK

431

Cloud Key {} in KeySet {} scheduled for deletion in {} days

H

true

Cloud Key {} in KeySet {} scheduled for deletion in {} days


Security

BYOK

432

Deletion schedule canceled on Cloud Key {} in KeySet {}

M

true

Deletion schedule canceled on Cloud Key {} in KeySet {}


Security

BYOK

433

Cloud Key {} in KeySet {} deletion complete

M

false

Cloud Key {} in KeySet {} deletion complete


Security

BYOK

434

Processed Expiry Action {} on Cloud Key {} in KeySet {}

H

true

Processed Expiry Action {} on Cloud Key {} in KeySet {}


Security

BYOK

435

Cloud Key {} region {} imported in KeySet {}

M

false

Cloud Key {} region {} imported in KeySet {}


Security

BYOK

436

Started Key Import from {} {} from KMS to KeySet {}

M

true

Started Key Import from region/keyvault/keyring {} from KMS to KeySet {}


Security

BYOK

437

Keys imported from {} {} from KMS to KeySet {}

M

true

Keys imported from region/keyvault/keyring {} from KMS to KeySet {}


Security

BYOK

438

Keys imported from AWS KMS to KeySet {}

M

true

Keys imported from AWS KMS to KeySet {}


Security

BYOK

439

Keys migrated to HSM from KEYCONTROL for KeySet {}

H

true

Keys migrated to HSM from KEYCONTROL for KeySet {}


Security

BYOK

440

KeySet: {} modified

M

true

KeySet: {} modified


Security

BYOK

441

Started key migration, from KEYCONTROL to HSM, for KeySet {}

H

true

Started key migration, from KEYCONTROL to HSM, for KeySet {}


Security

BYOK

442

New KeySet: {} created

M

true

New KeySet: {} created


Security

BYOK

443

Key Set {} deleted

H

true

Key Set {} deleted


Security

BYOK

444

CSP Account: {} modified

M

true

CSP Account: {} modified


Security

BYOK

445

CSP Account {} access keys rotated

H

true

CSP Account {} access keys rotated


Security

BYOK

446

New CSP Account: {} created

M

true

New CSP Account: {} created


Security

BYOK

447

CSP Account {} deleted

H

true

CSP Account {} deleted


Security

BYOK

448

Access key rotation failed

H

true

Access key rotation failed


Security

BYOK

449

CloudKey rotation failed

M

true

CloudKey rotation failed


Security

BYOK

450

CloudKey expiry processing failed

M

true

CloudKey expiry processing failed


Security

BYOK

451

CloudKey import failed

M

true

CloudKey import failed


Security

BYOK

452

CloudKey auto import failed

M

true

CloudKey auto import failed


Security

BYOK

453

Set Key Policy for Cloud Key {}

M

true

Set Key Policy for Cloud Key


Security

BYOK

454



false



Security

Upgrade

455

Encryption finished on system volumes of KeyControl {}

M

false

Encryption finished on system volumes of KeyControl


Clusters

BYOK

456

Successfully installed managed Secret Vault Plugin: {} (version {})

M

false

Managed Secret Vault Plugin install success


Security

Secrets Vault

457

Cloud Key {} in KeySet {} deleted as upload failed

L

false

Cloud Key object deleted as upload failed


Security

BYOK

458

Enabled Root-of-Trust in password mode

M

false

Enabled Root-of-Trust in password mode


Security

HSMROT

459

Failed to enable Root-of-Trust

M

false

Failed to enable Root-of-Trust


Security

HSMROT

460

Enabled Root-of-Trust in hwsig mode

M

false

Enabled Root-of-Trust in hwsig mode


Security

HSMROT

461

Failed to enable Root-of-Trust

M

false

Failed to enable Root-of-Trust


Security

HSMROT

462

Disabled Root-of-Trust

M

false

Disabled Root-of-Trust


Security

HSMROT

463

Failed to disable Root-of-Trust: %s

M

false

Failed to disable Root-of-Trust: %s


Security

HSMROT

464

A differenet Cloud Key with name {} for KeyVault {} is already present in KeySet {}.If you want to overwrite the key in Key Control, delete the existing key from key control and import again

M

true

Could not import cloudkey as a different key with the same keyname already present in Key Control


Security

BYOK

465

Created new KMIP tenant {} with Active Directory domain {} and Active Directory user/group {} as initial KMIP administrator

M

true

Created new KMIP tenant with its own Active Directory config and an Active Directory user/group for initial access


Security

KMIP

466

Deleted KMIP tenant {}

M

true

Deleted KMIP tenant


Security

KMIP

467

Internal web server certificate of %s has expired. A new certificate must be installed for KeyControl Cluster to be healthy

H

true

Certificate used by the internal web server of one of the nodes has expired. Domain administrator has to install a new certificate for the KeyControl cluster to be healthy.


Clusters

Certificate

468

Internal web server certificate of %s will expire in %s days, %s hours and %s minutes. A new certificate must be installed before the current one expires for the KeyControl Cluster to be healthy.

H

true

Certificate used by the internal web server of one of the nodes is about to get expired. Domain administrator has to install a new certificate before it gets expired. Otherwise cluster will be degraded


Clusters

Certificate

469

Cloud Key {} KeyVault {} in KeySet {} synced from KMS

M

false

Cloud Key {} KeyVault {} in KeySet {} synced from KMS


Security

BYOK

470

Cloud Key {} operations changed to {} on Azure KMS

M

true

Cloud Key {} operations changed to {} on Azure KMS


Security

BYOK

471

Cloud Key {} KeyVault {} imported in KeySet {}

M

false

Cloud Key {} KeyVault {} imported in KeySet {}


Security

BYOK

472

CloudKey import failed in KeyVault {} KeySet {} Error {}

M

false

CloudKey import failed in KeyVault {} KeySet {} Error {}


Security

BYOK

473

Client Secret for Service application {} (CSP {}) will expire on {}. Please update it now to avoid BYOK management service disruption

H

true



Security


474

Client Secret for Service application {} (CSP {}) has expired on {}. Please update it now to resume BYOK management service

H

true



Security


475

Successfully started migration of KMIP objects to multi-tenant KMIP server

M

false

Started migration of KMIP objects to multi-tenant KMIP server


Security

KMIP

476

Successfully completed migration of KMIP objects to multi-tenant KMIP server

M

false

Completed migration of KMIP objects to multi-tenant KMIP server


Security

KMIP

477

Successfully cancelled migration of KMIP objects to multi-tenant KMIP server

M

false

Cancelled migration of KMIP objects to multi-tenant KMIP server


Security

KMIP

478

Successfully sent KMIP tenant account verification email to %s

M

false

Sent KMIP tenant account verification email


Security

KMIP

479

Successfully reset administrator account password of KMIP vault %s

M

false

Reset KMIP vault administrator account password


Security

KMIP

480

Successfully reset administrator account password of Secrets vault %s

M

false

Reset Secrets vault administrator account password


Security

Secrets Vault

481

Failed to initialize Authentication database

M

true



Security

oidc

482

Cloud Key {} KeyRing {} imported in KeySet {}

M

false

Cloud Key {} KeyRing {} imported in KeySet {}


Security

BYOK

483

Cloud Key {} KeyRing {} in KeySet {} synced from KMS

M

false

Cloud Key {} KeyRing {} in KeySet {} synced from KMS


Security

BYOK

484

CloudKey import failed in KeyRing {} KeySet {} Error {}

M

false

CloudKey import failed in KeyRing {} KeySet {} Error {}


Security

BYOK

485

Label {} (value {}) set on Cloud Key {}

M

false

Label {} (value {}) set on Cloud Key {}


Security

BYOK

486

Removed Label {} on Cloud Key {}

M

false

Removed Label {} on Cloud Key {}


Security

BYOK

487

Failed to delete old access keys for CSP Account '{}'. Error - '{}'

M

false

Failed to delete old access keys for CSP Account '{}'. Error - '{}'


Security

BYOK

488

EKM Key Access Justification policy violation while accessing Cloud Key {} in KeySet {} : error {}

M

false

EKM Key Access Justification policy violation


Security

BYOK

489

TDE Connector {} state changed to {} on Keyset {}

M

true

TDE Connector state changed


Security

BYOK

490

TDE Connector {} expiry date changed to {} on Keyset {}

M

true

TDE Connector expiry date changed


Security

BYOK

491

Added TDE Connector {} for CVM {} in KeySet {}

M

true

Add TDE connector


Security

BYOK

492

Removed TDE Connector {} from CVM {} in KeySet {}

M

true

Remove TDE connector


Security

BYOK

493

Successfully registered with KCM (KeyControl Compliance Manager) (id: {}) from {}

M

true

KCM (KeyControl Compliance Manager) register


Security

KCM

494

Successfully unregistered with KCM (KeyControl Compliance Manager) (id: {}) from {}

M

true

KCM (KeyControl Compliance Manager) unregister


Security

KCM

495

Successfully reset KCM (KeyControl Compliance Manager) registration configuration from {}

M

true

KCM (KeyControl Compliance Manager) configuration reset


Security

KCM

496

User %s reset syslog settings

M

false

Reset Syslog settings


Security

syslog

497

Attempt to register a new node, named server "%s" failed -- maximum node limit reached.

M

true

Maximum allowed cluster node count reached


Security

Licensing

498

Backup failed due to insufficent space on root device. Please contact support.

H

true

Backup failed due to insufficent space on root device


Security

Backup

499

Backup was not started due to heavy load on %s

M

true

Backup was not started due to heavy load on KeyControl


Security

Backup

500

'%s can be downloaded from the Settings page (https://%s/appliance/#!/account). Reason for regeneration: %s

H

true

Regenerated Admin Key


Security

Appliance

501

Rescued %s vault: %s

L

true

Rescued Vault


Security

Account

502

%s logged in from ipaddr %s using Personal Access Token %s

L

false

The specified user has just logged in from the IP address shown with Personal Access Token.


Security

Personal Access Token

503

AD authorization(Personal Access Token login) for user %s failed. Reason :- %s


false

Reason for AD/LDAP login failure for Personal Access Token login


Security

Personal Access Token

504

%s %s Personal Access Token %s from ipaddr %s


false

Create/Update/Delete Actions on Personal Access Token


Security

Personal Access Token

505

Keys migrated from HSM to KEYCONTROL for KeySet {}

H

true

Keys migrated from HSM to KEYCONTROL for KeySet {}


Security

BYOK

506

CloudKey: {} in KeySet {} migrated to KEYCONTROL

M

false

CloudKey: {} in KeySet {} migrated to KEYCONTROL


Security

BYOK

507

Keys migrated from KEYCONTROL to HSM for KeySet {}

H

true

Keys migrated from KEYCONTROL to HSM for KeySet {}


Security

BYOK

508

Updated %s Vault %s with KCM %s

M

false

The specified vault has just been updated with KCM.


Security

KCM

509

Configured OIDC without AD with client id %s

M

false

Configured OIDC without AD


Security

AUTHENTICATION

510

OIDC without AD configuration removed

M

false

OIDC without AD configuration removed


Security

AUTHENTICATION

511

Changed Password Settings :- %s from %s to %s

M

false

One or more of the listed password settings has been changed.


Security

Configuration

512

Keys cached from HSM to KEYCONTROL for KeySet {}

H

true

Keys cached from HSM to KEYCONTROL for KeySet {}


Security

BYOK

513

Keys uncached from KEYCONTROL for KeySet {}

H

true

Keys uncached from KEYCONTROL for KeySet {}


Security

BYOK

514

CloudKey: {} in KeySet {} cached to KeyControl

M

false

CloudKey: {} in KeySet {} cached to KeyControl


Security

BYOK

515

CloudKey: {} in KeySet {} uncached from KeyControl

M

false

CloudKey: {} in KeySet {} uncached from KeyControl


Security

BYOK

516

OIDC authorization failed. Reason :- %s

M

false

Reason for OIDC login failure


Security

AUTHENTICATION

517

Connection from node %s to HSM %s has failed

H

true

The node is unable to communicate with the HSM

Security Admin should check the HSM configuration.

Security

HSM

518

Connection from node %s to HSM %s is restored

L

true

The node is able to communiucate with the HSM again


Security

HSM

519

Connection from node %s to HSM %s still failed after HSMROT timeout, locking down

H

true

The node is shutting down because it has lost contact with the HSM

Fix the issue preventing the node from contacting the HSM and restart the node.

Security

HSM

520

HSM issue on node %s: %s

M

true

Some HSM issues have been detected on the node that do not prevent communication with the HSM

Security Admin should check the HSM configuration.

Security

HSM

521

HSM issues resolved on node %s

L

true

The HSM issues previously reported on the node have been resolved


Security

HSM

522

Failed to install self-signed certificate cluster-wide

M

true

Install self signed certificate cluster-wide


Clusters


523

Failed to clean cacert list.

M

false

Clean cacert list guid from system setting


Clusters


524

Successfully moved the cluster to self-signed certificate.

M

false

Install self signed certificate cluster-wide


Clusters


525

Successfully changed the EMS Enforcement crypto policy.

M

false

Change EMS Enforced Configuration


Clusters


526

The license for this system expired %s days ago. Please renew or upgrade the license. Start that process from the licensing page in the webgui at https://%s/appliance/#!/license

H

true

License expired


Security

Licensing

527

The license for this system expires in %s days. Please renew or upgrade the license. Start that process from the licensing page in the webgui at https://%s/appliance/#!/license

H

true

License will expire after some days.


Security

Licensing

528

The license for this system expires today. Please renew or upgrade the license. Start that process from the licensing page in the webgui at https://%s/appliance/#!/license

H

true

License is expiring today.


Security

Licensing

529

This system has exceeded the licensed limit of %s Virtual Machines. Further Virtual Machine creation is disabled. Please renew or upgrade the license. Start that process from the licensing page in the webgui at https://%s/appliance/#!/license

H

true

This system has exceeded the licensed limit of virtual machines count. Further Virtual Machine creation is disabled.


Security

Licensing

530

This system has exceeded the licensed limit of %s Virtual Machines. Please renew or upgrade the license. Start that process from the licensing page in the webgui at https://%s/appliance/#!/license

H

true

This system has exceeded the licensed limit of virtual machines count.


Security

Licensing

531

System Initialization Complete

L

false

System Initialization Complete


Security


532

System Autoconfiguration Complete

L

false

System Autoconfiguration Complete


Security


533

Cloud Key {} in KeySet {} replicated to {}

M

true

Cloud Key {} in KeySet {} replicated to {}


Security

BYOK

534

The Cloud Key {} from KeySet {} will be rotated on {}.

H

true

Send notification before cloudkey rotation.


Security

BYOK

535

The Cloud Key {} from KeySet {} is expiring on {} with the Action {}.

H

true

Send notification before cloudkey expiration.


Security

BYOK

536

System has completed automatic renewal of self-signed certificates.

L

false

Automatic renewal of self-signed certificates.


Clusters


537

System has completed automatic renewal of CA certificates.

L

false

Automatic renewal of CA certificates.


Clusters


538

Probable LOW DISK SPACE: refreshing KMIP database is failing. Most probably the disk is low on space. Please consider increasing disk space.

H

true



Security


539

Generated Access Token for TDE Connector {} in KeySet {}

M

true

Add TDE connector


Security

BYOK

540

Internal CA signed certificate with common name and SANs - '%s', '%s' is generated and installed.

L

false

New internal CA signed certificate generated and installed.


Clusters

Certificate

541

KeyControl upgrade failed. Failed to revert nodes. Please contact Support

H

true

Post upgrade failed


Clusters

Rolling Upgrade

542

Failure to change the EMS Enforcement crypto policy. Reverting to %s

M

false

Change EMS Enforced Configuration


Clusters


543

NTP synchronization succeeded on KeyControl %s

M

true

NTP synchronization succeeded on KeyControl

Check if NTP servers are reachable from KeyControl

Clusters

NTP

544

Backup of Cloud Key {} failed: {}

M

true

Backup of Cloud Key {} failed: {}


Security

BYOK

545

Cloud Key {} backup {} is not available in remote storage

M

true

Cloud Key {} backup {} is not available in remote storage


Security

BYOK

546

Unsupported ciphers found in KMIP server configuration: %s

L

true

Unsupported ciphers found in KMIP server configuration


Security


547

Updated default cipher list to %s in KMIP server configuration

L

true

Updated default cipher list to %s in KMIP server configuration


Security


548

Cloud Key {} with key id {} is the active key version and cannot be deleted. The scheduled deletion has been cancelled

M

true

Cloud Key {} with key id {} is the active key version and cannot be deleted. The scheduled deletion has been cancelled


Security

BYOK

549

Cloud Key {} with key id {} is the active key version and cannot be deleted. The scheduled expiry has been cancelled

M

true

Cloud Key {} with key id {} is the active key version and cannot be deleted. The scheduled expiry has been cancelled


Security

BYOK

550

CSP Account: {} access credentials are due rotation. Please rotate through the Salesforce UI.

M

true

CSP Account: {} access credentials are due rotation.


Security

BYOK

551

Started HSM key caching for KeySet {}

M

true

Started HSM key caching for KeySet {}


Security

TDE

552

Keys cached to HSM for KeySet {}

M

true

Keys cached to HSM for KeySet {}


Security

TDE

553

CSP Account {} failed to access AWS global infra API with the default region. The key management capabilty is unaffected, but some region's full names may not be displayed.

L

true

Unable to access AWS global infra API


Security

BYOK

554

Certificate based authentication enabled on CSP Account {}

M

true

Certificate based authentication enabled on CSP Account {}


Security

BYOK

555

Certificate based authentication disabled on CSP Account {}

M

true

Certificate based authentication disabled on CSP Account {}


Security

BYOK

556

Failed to create new client secret for CSP Account {}. Error {}

M

true

Failed to create new client secret for CSP Account {}. Error {}


Security

BYOK

557

CloudKey {} status changed from {} to {} on synchronization with Cloud

M

true

CloudKey {} status changed from {} to {} on synchronization with Cloud"


Security

BYOK

558

Cache only key replay attack detected on csp {}

H

true

Cache only key replay attack detected


Security

BYOK

559

"To comply with certificate validity of KCV's CA signed server certificate, we will auto renew it on %s for %s. If you have VME-vault, please ensure the re-authentication of all VMs after that renewal.

H

true

"To comply with certificate validity of KCV's CA signed server certificate, we will auto renew it on %s for %s. If you have VME-vault, please ensure the re-authentication of all VMs after that renewal.


Security

Certificate

560

CloudKey {} KeySet {} cannot be migrated to FIPS level 3 HSM because it uses cipher {}.

M

false

CloudKey {} KeySet {} cannot be migrated to FIPS level 3 HSM because it uses cipher {}.


Security

BYOK

561

Unknown error in check_ncipher_data - %s

H

true

Unknown error in HSM files


Security

HSM


562

Failed to clear error in check_ncipher_data - %s

H

true

Failed to clear error in HSM files


Security

HSM


563

KCV has renewed the CA certificate that is being used by KCV's external web server.

M

false

KCV has renewed the CA certificate that is being used by KCV's external web server.


Security

Certificate


564

KCV has renewed the CA certificate that is being used by KCV's internal web server.

M

false

KCV has renewed the CA certificate that is being used by KCV's internal web server.


Security

Certificate


565

KCV's internal CA certificate, used for external communication (external webserver) will expire on %s. KCV will renew the CA certificate on %s before the expiry. The system will reboot at the time of renewal and will be in read only mode. We recommend to re-authenticate all vms connected to VME-vault using the commands 'hcl updatecert -a' and 'hcl auth -a' after the renewal. If your vault uses client certificate, then please generate new client certificate and use it at client application after the renewal.

M

true

KCV's internal CA certificate, used for external communication (external webserver) will expire on %s. KCV will renew the CA certificate on %s before the expiry. The system will reboot at the time of renewal and will be in read only mode. We recommend to re-authenticate all vms connected to VME-vault using the commands 'hcl updatecert -a' and 'hcl auth -a' after the renewal. If your vault uses client certificate, then please generate new client certificate and use it at client application after the renewal.


Security

Certificate


566

KCV's internal CA certificate, used for internal communication (internal webserver) will expire on %s. KCV will renew the CA certificate on %s before the expiry. The system will reboot at the time of renewal and will be in read only mode. If your cluster is in a degraded state following the renewal, reboot each node individually, making sure to reboot the master node last.

M

true

KCV's internal CA certificate, used for internal communication (internal webserver) will expire on %s. KCV will renew the CA certificate on %s before the expiry. The system will reboot at the time of renewal and will be in read only mode. If your cluster is in a degraded state following the renewal, reboot each node individually, making sure to reboot the master node last.


Security

Certificate


567

OIDC CA Certificate Uploaded Successfully

M

false

OIDC CA Certificate Uploaded Successfully


Security

OIDC


568

{} purged KeyVault {}.

M

true

{} purged KeyVault {}.


Security

BYOK


569

KC self-signed certificate for {server.hostname} (use for external webserver) is renewed.

L

false

KC self-signed certificate for {server.hostname} (use for external webserver) is renewed.


Security

Certificate


570

KC self-signed certificate for {server.hostname} (use for internal webserver) is renewed.

L

false

KC self-signed certificate for {server.hostname} (use for internal webserver) is renewed.


Security

Certificate


571

Failed to migrate Azure Keyvaults to target keyset {}. Error: {}.

M

true

Failed to migrate Azure Keyvaults to target keyset {}. Error: {}.


Security

BYOK


572

{} started migration of Azure keyvaults from source KeySets {} to target KeySet {}

M

true

Azure Keyvault migration between KeySets started


Security

BYOK


573

Migration of Azure Keyvaults to {} did not complete successfully. Expected {} cloud keys and {} key versionss but found {} cloud keys and {} key versions.

M

true

Azure Keyvault migration between KeySets partially completed


Security

BYOK


574

Migration of Azure Keyvaults to {} completed successfully

M

true

Azure Keyvault migration between KeySets completed


Security

BYOK


575

Warning: CSP Account {} manages keys in overlapping subscriptions with existing Azure CSP accounts: {}. Subscription IDs: {}

M

true

Azure CSP created with overlapping subscriptions with existing Azure CSP accounts


Security

BYOK


576

Could not process {} on AWS Cloud Key {}. {}. The key has been disabled instead.

M

true

AWS Cloudkey expiry action failed.


Security

BYOK


577

Changed AD group members for group Appliance. %s

L

false

List of AD Group members has been changed for a KCV Appliance


Security

Group


578

CSR generated for CSP Account {}

M

true

CSR generated for CSP Account


Security

BYOK


579

Azure keyvault {} containing replica keys has purge protection enabled. Rotation operations will fail.

M

true

A vault containing replica keys has purge protection enabled.


Security

BYOK


580

Replication of the key rotation for key {} to vault {} failed. The key must be manually restored to {} and synced in KeyControl to restore redundancy. Review other replica vaults in case replication has not occurred in them either.

H

true

Replication of a key rotation in Azure failed.


Security

BYOK


581

Trial period for vault {} has expired. This vault is now read only. Please connect to CSP Compliance Manager to retrieve a valid license.

H

true

Vault trial period has expired.


Licensing



582

{} {} has not been able to connect to CSP Compliance Manager for {} days. This is required for licensing checks. This vault is now read only. Please check the network connectivity and CSP Compliance Manager status.

H

true

Vault grace period has expired.


Licensing



583

{} {} is unlicensed. No license information is available for {}. This vault is now read only. Check that the vault type is covered by your license.

H

true

No license available for vault.


Licensing



584

The number of {} {} has exceeded the licensed limit of {}. Current usage: {}. This {} is now read only. Please purchase additional licenses.

H

true

License limit exceeded.


Licensing



585

The license for {} expired on {}. This vault is now read only. Please renew your license.

H

true

License Expired.


Licensing



586

Trial period for {} {} is nearing expiration. To avoid loss of service, please connect to CSP Compliance Manager to retrieve a valid license.

M

true

Vault trial period is nearing expiration.


Licensing



587

The license for {} will expire on {}. Please renew your license to avoid loss of service.

M

true

License Nearing Expiry.


Licensing



588

{} {} is in the grace period after upgrade to {} and will become unlicensed when this grace period ends.

M

true

Upgrade Grace Period Nearing Expiry.


Licensing



589

The number of {} {} is over 90% of the licensed limit of {}. Current usage: {}. To avoid loss of service, please purchase additional licenses if needed.

M

true

Usage is nearing license limit.


Licensing



590

Attempt to register a new node, named server "%s" failed -- license check failed. Reason: %s.

L

false

Appliance license check failed.


Licensing



591

Attempt to register a new node, named "%s" failed -- cluster not connected to KeyControl Compliance Manager.

L

false

Appliance is not connected to KCM.


Licensing



592

Enabled Authentication Inheritance

M

true

Enabled Authentication Inheritance


Security

AUTHENTICATION


593

Disabled Authentication Inheritance

M

true

Disabled Authentication Inheritance


Security

AUTHENTICATION


594

Successfully fetched Key Encryption Key from HSM.

H

false

Successfully fetched Key Encryption Key from HSM.


Security

Key Encryption Key


595

OIDC authentication settings updated for Appliance and inheriting vaults

M

true

OIDC authentication settings updated for Appliance and inheriting vaults


Security

AUTHENTICATION


596

OIDC authentication settings for inheriting vault updated by System Admin

M

true

OIDC authentication settings for inheriting vault updated by System Admin


Security

AUTHENTICATION


597

XKS store for {} ({}) in region {} is unreachable

H

true

XKS service unreachable


Security

BYOK


598

XKS store {} ({}) in region {} is {}.

H

true

XKS store not connected


Security

BYOK


599

XKS store {} ({}) in region {} is now CONNECTED.

M

true

XKS store connected


Security

BYOK


600

%s for Virtual Machine %s. %s, reauthentication required.

H

true

%s for Virtual Machine %s. %s, reauthentication required.


Security



604

Could not pass CSP vault's appliance info to CSP CM {}

L

false

Failed to send CSP vault's appliance info to CSP CM


Security



615

Two-factor authentication enforced by %s

M

false

Two factor authentication has been enforced for the users


Security



616

Two-factor authentication enforcement removed by %s

M

false

Two factor authentication enforced removed for the users


Security