VeriSign, Inc.

1350 Charleston Road

Mountain View, CA 94043
Telephone: +1.650.961.7500
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
Error Codes and
Messages
Error Codes and Messages
ii VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
Trademark Notices
VeriSign and OnSite are registered trademarks of VeriSign, Inc. The VeriSign logo, VeriSign
Trust Network, and Go Secure! are trademarks and service marks of VeriSign Inc. Other
trademarks and service marks in this document are the property of their respective owners.
No part of this publication may be reproduced, stored in or introduced into a retrieval system,
or transmitted, in any form or by any means (electronic, mechanical, photographic, audio, or
otherwise) without prior written permission of VeriSign, Inc. Notwithstanding the above,
permission is granted to reproduce and distribute this document on a nonexclusive,
royalty-free basis, provided that (i) the foregoing copyright notice and the beginning
paragraphs are prominently displayed at the beginning of each copy, and (ii) this document is
accurately reproduced in full, complete form with attribution of the document to VeriSign, Inc.
Note This document may describe features and/or functionality that are not
present in your software or your service agreement. Contact your account
representative to learn more about what is available with this VeriSign product.
Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
Copyright 2000 - 2001 VeriSign, Inc. All rights reserved.
Printed in the United States of America.
Revision date: March 27, 2001
Contents
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 iii
Contents
Error Codes List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . v
Summary of Revisions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxi
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/V5 . . . . . . . . . . . . . . . . . . xxi
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/V3 . . . . . . . . . . . . . . . . . . xxi
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/V2 . . . . . . . . . . . . . . . . . . xxii
Chapter 1 Error Codes and Messages . . . . . . . . . . . . . . . . . . . . . . . . 1
Signing Server Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Processing Center 3.0: TIPEM Error Messages . . . . . . . . . . . . . . . . . 3
Processing Center 3.0: Certificate Management Errors . . . . . . . . . . 16
PC 3.0: Frameworks Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Processing Center 3.0: General and Miscellaneous Errors . . . . . . . . 18
PC 3.0: Lifecycle Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Equifax Authority Related Error s . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Product Configuration File Related Errors . . . . . . . . . . . . . . . . . . . . . 21
Product Configuration File Related Errors . . . . . . . . . . . . . . . . . . . . . 24
Web Verification Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
General and Miscellaneous Errors . . . . . . . . . . . . . . . . . . . . . . . . . . 31
LDAP Directory for OnSite Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Send Mail Message Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
OnSite Multiple Administration Errors . . . . . . . . . . . . . . . . . . . . . . . . 32
Signing Server Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
OnSite Multiple Administration Errors . . . . . . . . . . . . . . . . . . . . . . . . 33
Signing Server Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
OnSite Local Hosting Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
PIN (or Token)-Based Enrollment Errors . . . . . . . . . . . . . . . . . . . . . . 36
Enrollment Status Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
PIN (or Token)-Based Enrollment Errors . . . . . . . . . . . . . . . . . . . . . . 38
Client Authentication Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Bootstrapping Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
Class 3 Instant Issue Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
Enrollment Payment Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
Robo Internic Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
E-mail Template Format Error . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
OnSite Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
OnSite (Email Wizard) Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Error Codes and Messages
iv VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
OnSite (Server) Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
OnSite Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
Dual Control within ECAS for LRA Tools . . . . . . . . . . . . . . . . . . . . . . 47
Payflow Pro Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
Utility Classes Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
Query Manager Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
Front End Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
CSR Wizard Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
Form Descriptor Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
I/O and Browser Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
CGI Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
SMIME Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
OCSP Responder Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
Key Recovery Service Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
Key Recovery Manager Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
Roaming Services Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
Roaming Services (Encoding) Errors . . . . . . . . . . . . . . . . . . . . . . . . . 72
Roaming Services (Crypto) Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
Roaming Services (Http Connection) Errors . . . . . . . . . . . . . . . . . . . 76
Roaming Services (Protocol Errors) . . . . . . . . . . . . . . . . . . . . . . . . . . 78
Roaming Services (Server Configuration Error) . . . . . . . . . . . . . . . . . 82
Roaming Services (Flat File DB Errors) . . . . . . . . . . . . . . . . . . . . . . . 85
Roaming Services (QM Client Handler) Errors . . . . . . . . . . . . . . . . . 86
Roaming Services (QM Server) Errors . . . . . . . . . . . . . . . . . . . . . . . 86
Roaming Services (Audit) Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
PKI Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
User Interface Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95
Secure Channel Library Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95
Front End Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
RecordUp Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100
AutoAdministration Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100
Digital Notarization Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
Chapter 2 CA Key Management Tool Error Codes . . . . . . . . . . 119
CASH: TIPEM Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119
CA Key Management Tool (CASH) Errors . . . . . . . . . . . . . . . . . . . . 126
CA Key Management Tool LUNA Errors . . . . . . . . . . . . . . . . . . . . . 133
CA Key Management Tool WAP Errors . . . . . . . . . . . . . . . . . . . . . . 136
Error Codes List
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 v
Error Codes List
This list contains the error codes in this document and the pages on which they are found.
0x0000 . . . . . . . . . . . . . . . . . . . . . . 1
0x0000 . . . . . . . . . . . . . . . . . . . . . . 1
0x0001 . . . . . . . . . . . . . . . . . . . . . . 1
0x0002 . . . . . . . . . . . . . . . . . . . . . . 1
0x0003 . . . . . . . . . . . . . . . . . . . . . . 2
0x0070 . . . . . . . . . . . . . . . . . . . . . . 2
0x00A0 . . . . . . . . . . . . . . . . . . . . . . 2
0x00B2 . . . . . . . . . . . . . . . . . . . . . . 2
0x00B3 . . . . . . . . . . . . . . . . . . . . . . 2
0x00B4 . . . . . . . . . . . . . . . . . . . . . . 2
0x00E0 . . . . . . . . . . . . . . . . . . . . . . 2
0x0102 . . . . . . . . . . . . . . . . . . . . . . 3
0x0000 . . . . . . . . . . . . . . . . . . . . . . 3
0xffffffff . . . . . . . . . . . . . . . . . . . . . . 3
0x0100 . . . . . . . . . . . . . . . . . . . . . . 3
0x0101 . . . . . . . . . . . . . . . . . . . . . . 3
0x0102 . . . . . . . . . . . . . . . . . . . . . . 3
0x0103 . . . . . . . . . . . . . . . . . . . . . . 3
0x0104 . . . . . . . . . . . . . . . . . . . . . . 4
0x0105 . . . . . . . . . . . . . . . . . . . . . . 4
0x0106 . . . . . . . . . . . . . . . . . . . . . . 4
0x0107 . . . . . . . . . . . . . . . . . . . . . . 4
0x0108 . . . . . . . . . . . . . . . . . . . . . . 4
0x0109 . . . . . . . . . . . . . . . . . . . . . . 4
0x010a . . . . . . . . . . . . . . . . . . . . . . 5
0x010b . . . . . . . . . . . . . . . . . . . . . . . 5
0x010c . . . . . . . . . . . . . . . . . . . . . . . 5
0x010d . . . . . . . . . . . . . . . . . . . . . . . 5
0x010e . . . . . . . . . . . . . . . . . . . . . . . 5
0x010 . . . . . . . . . . . . . . . . . . . . . . . . 6
0x0110 . . . . . . . . . . . . . . . . . . . . . . . 6
0x0111 . . . . . . . . . . . . . . . . . . . . . . . 6
0x0112 . . . . . . . . . . . . . . . . . . . . . . . 6
0x0113 . . . . . . . . . . . . . . . . . . . . . . . 6
0x0114 . . . . . . . . . . . . . . . . . . . . . . . 6
0x0115 . . . . . . . . . . . . . . . . . . . . . . . 6
0x0116 . . . . . . . . . . . . . . . . . . . . . . . 7
0x0117 . . . . . . . . . . . . . . . . . . . . . . . 7
0x0118 . . . . . . . . . . . . . . . . . . . . . . . 7
0x0119 . . . . . . . . . . . . . . . . . . . . . . . 7
0x011a . . . . . . . . . . . . . . . . . . . . . . . 7
0x011b . . . . . . . . . . . . . . . . . . . . . . . 7
0x011c . . . . . . . . . . . . . . . . . . . . . . . 7
0x011d . . . . . . . . . . . . . . . . . . . . . . . 7
0x011e . . . . . . . . . . . . . . . . . . . . . . . 8
0x011f . . . . . . . . . . . . . . . . . . . . . . . 8
0x0120 . . . . . . . . . . . . . . . . . . . . . . . 8
0x0121 . . . . . . . . . . . . . . . . . . . . . . . 8
0x0122 . . . . . . . . . . . . . . . . . . . . . . . 8
0x0123 . . . . . . . . . . . . . . . . . . . . . . . 8
Error Codes and Messages
vi VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x0124 . . . . . . . . . . . . . . . . . . . . . . 8
0x0125 . . . . . . . . . . . . . . . . . . . . . . 9
0x0126 . . . . . . . . . . . . . . . . . . . . . . 9
0x0127 . . . . . . . . . . . . . . . . . . . . . . 9
0x0128 . . . . . . . . . . . . . . . . . . . . . . 9
0x0129 . . . . . . . . . . . . . . . . . . . . . . 9
0x012a . . . . . . . . . . . . . . . . . . . . . 10
0x012b . . . . . . . . . . . . . . . . . . . . . 10
0x012c . . . . . . . . . . . . . . . . . . . . . 10
0x012d . . . . . . . . . . . . . . . . . . . . . 10
0x012e . . . . . . . . . . . . . . . . . . . . . 11
0x012f . . . . . . . . . . . . . . . . . . . . . . 11
0x0130 . . . . . . . . . . . . . . . . . . . . . 11
0x0131 . . . . . . . . . . . . . . . . . . . . . 11
0x0132 . . . . . . . . . . . . . . . . . . . . . 11
0x0133 . . . . . . . . . . . . . . . . . . . . . 11
0x0134 . . . . . . . . . . . . . . . . . . . . . 11
0x0135 . . . . . . . . . . . . . . . . . . . . . 12
0x0136 . . . . . . . . . . . . . . . . . . . . . 12
0x0137 . . . . . . . . . . . . . . . . . . . . . 12
0x0138 . . . . . . . . . . . . . . . . . . . . . 12
0x0139 . . . . . . . . . . . . . . . . . . . . . 12
0x013a . . . . . . . . . . . . . . . . . . . . . 12
0x013b . . . . . . . . . . . . . . . . . . . . . 12
0x013c . . . . . . . . . . . . . . . . . . . . . 13
0x013d . . . . . . . . . . . . . . . . . . . . . 13
0x013e . . . . . . . . . . . . . . . . . . . . . 13
0x013f . . . . . . . . . . . . . . . . . . . . . . 13
0x0141 . . . . . . . . . . . . . . . . . . . . . 13
0x0142 . . . . . . . . . . . . . . . . . . . . . . 13
0x0143 . . . . . . . . . . . . . . . . . . . . . . 13
0x0144 . . . . . . . . . . . . . . . . . . . . . . 13
0x0145 . . . . . . . . . . . . . . . . . . . . . . 14
0x0146 . . . . . . . . . . . . . . . . . . . . . . 14
0x147 . . . . . . . . . . . . . . . . . . . . . . . 14
0x148 . . . . . . . . . . . . . . . . . . . . . . . 14
0x149 . . . . . . . . . . . . . . . . . . . . . . . 14
0x14a . . . . . . . . . . . . . . . . . . . . . . . 14
0x14b . . . . . . . . . . . . . . . . . . . . . . . 14
0x14c . . . . . . . . . . . . . . . . . . . . . . . 14
0x14d . . . . . . . . . . . . . . . . . . . . . . . 14
0x14e . . . . . . . . . . . . . . . . . . . . . . . 15
0x14f . . . . . . . . . . . . . . . . . . . . . . . 15
0x150 . . . . . . . . . . . . . . . . . . . . . . . 15
0x151 . . . . . . . . . . . . . . . . . . . . . . . 15
0x152 . . . . . . . . . . . . . . . . . . . . . . . 15
0x153 . . . . . . . . . . . . . . . . . . . . . . . 15
0x154 . . . . . . . . . . . . . . . . . . . . . . . 15
0x155 . . . . . . . . . . . . . . . . . . . . . . . 15
0x156 . . . . . . . . . . . . . . . . . . . . . . . 15
0x157 . . . . . . . . . . . . . . . . . . . . . . . 16
0x158 . . . . . . . . . . . . . . . . . . . . . . . 16
0x159 . . . . . . . . . . . . . . . . . . . . . . . 16
0x160 . . . . . . . . . . . . . . . . . . . . . . . 16
0x161 . . . . . . . . . . . . . . . . . . . . . . . 16
0x1005 . . . . . . . . . . . . . . . . . . . . . . 16
0x1013 . . . . . . . . . . . . . . . . . . . . . . 17
0x1100 . . . . . . . . . . . . . . . . . . . . . . 17
Error Codes List
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 vii
0x1102 . . . . . . . . . . . . . . . . . . . . . 17
0x1103 . . . . . . . . . . . . . . . . . . . . . 17
0x1104 . . . . . . . . . . . . . . . . . . . . . 17
0x1105 . . . . . . . . . . . . . . . . . . . . . 17
0x1106 . . . . . . . . . . . . . . . . . . . . . 17
0x1107 . . . . . . . . . . . . . . . . . . . . . 18
0x1108 . . . . . . . . . . . . . . . . . . . . . 18
0x1109 . . . . . . . . . . . . . . . . . . . . . 18
0x110a . . . . . . . . . . . . . . . . . . . . . 18
0x1b58 . . . . . . . . . . . . . . . . . . . . . 18
0x1b59 . . . . . . . . . . . . . . . . . . . . . 18
0x3000 . . . . . . . . . . . . . . . . . . . . . 18
0x3001 . . . . . . . . . . . . . . . . . . . . . 19
0x3002 . . . . . . . . . . . . . . . . . . . . . 19
0x300 . . . . . . . . . . . . . . . . . . . . . . 19
0x3022 . . . . . . . . . . . . . . . . . . . . . 19
0x3033 . . . . . . . . . . . . . . . . . . . . . 19
0x3034 . . . . . . . . . . . . . . . . . . . . . 19
0x3037 . . . . . . . . . . . . . . . . . . . . . 19
0x3300 . . . . . . . . . . . . . . . . . . . . . 20
0x3301 . . . . . . . . . . . . . . . . . . . . . 20
0x3302 . . . . . . . . . . . . . . . . . . . . . 20
0x3303 . . . . . . . . . . . . . . . . . . . . . 20
0x3304 . . . . . . . . . . . . . . . . . . . . . 20
0x3305 . . . . . . . . . . . . . . . . . . . . . 20
0x3041 . . . . . . . . . . . . . . . . . . . . . 21
0x3042 . . . . . . . . . . . . . . . . . . . . . 21
0x3043 . . . . . . . . . . . . . . . . . . . . . 21
0x3044 . . . . . . . . . . . . . . . . . . . . . 21
0x3045 . . . . . . . . . . . . . . . . . . . . . . 21
0x3046 . . . . . . . . . . . . . . . . . . . . . . 21
0x3047 . . . . . . . . . . . . . . . . . . . . . . 21
0x3048 . . . . . . . . . . . . . . . . . . . . . . 22
0x3049 . . . . . . . . . . . . . . . . . . . . . . 22
0x304a . . . . . . . . . . . . . . . . . . . . . . 22
0x304b . . . . . . . . . . . . . . . . . . . . . . 22
0x304c . . . . . . . . . . . . . . . . . . . . . . 22
0x304d . . . . . . . . . . . . . . . . . . . . . . 22
0x304e . . . . . . . . . . . . . . . . . . . . . . 22
0x3050 . . . . . . . . . . . . . . . . . . . . . . 23
0x3060 . . . . . . . . . . . . . . . . . . . . . . 23
0x3061 . . . . . . . . . . . . . . . . . . . . . . 23
0x3062 . . . . . . . . . . . . . . . . . . . . . . 23
0x3063 . . . . . . . . . . . . . . . . . . . . . . 23
0x3069 . . . . . . . . . . . . . . . . . . . . . . 23
0x306c . . . . . . . . . . . . . . . . . . . . . . 23
0x306d . . . . . . . . . . . . . . . . . . . . . . 24
0x3073 . . . . . . . . . . . . . . . . . . . . . . 24
0x3074 . . . . . . . . . . . . . . . . . . . . . . 24
0x3075 . . . . . . . . . . . . . . . . . . . . . . 24
0x3076 . . . . . . . . . . . . . . . . . . . . . . 24
0x3077 . . . . . . . . . . . . . . . . . . . . . . 24
0x3078 . . . . . . . . . . . . . . . . . . . . . . 24
0x3079 . . . . . . . . . . . . . . . . . . . . . . 25
0x307a . . . . . . . . . . . . . . . . . . . . . . 25
0x307b . . . . . . . . . . . . . . . . . . . . . . 25
0x307c . . . . . . . . . . . . . . . . . . . . . . 25
0x307d . . . . . . . . . . . . . . . . . . . . . . 25
Error Codes and Messages
viii VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x307e . . . . . . . . . . . . . . . . . . . . . 25
0x307f . . . . . . . . . . . . . . . . . . . . . . 25
0x3080 . . . . . . . . . . . . . . . . . . . . . 25
0x3081 . . . . . . . . . . . . . . . . . . . . . 26
0x3082 . . . . . . . . . . . . . . . . . . . . . 26
0x3083 . . . . . . . . . . . . . . . . . . . . . 26
0x3084 . . . . . . . . . . . . . . . . . . . . . 26
0x3085 . . . . . . . . . . . . . . . . . . . . . 26
0x3086 . . . . . . . . . . . . . . . . . . . . . 26
0x3087 . . . . . . . . . . . . . . . . . . . . . 26
0x3088 . . . . . . . . . . . . . . . . . . . . . 27
0x308a . . . . . . . . . . . . . . . . . . . . . 27
0x308b . . . . . . . . . . . . . . . . . . . . . 27
0x3090 . . . . . . . . . . . . . . . . . . . . . 27
0x3096 . . . . . . . . . . . . . . . . . . . . . 27
0x3097 . . . . . . . . . . . . . . . . . . . . . 27
0x3098 . . . . . . . . . . . . . . . . . . . . . 27
0x3099 . . . . . . . . . . . . . . . . . . . . . 27
0x309a . . . . . . . . . . . . . . . . . . . . . 28
0x309b . . . . . . . . . . . . . . . . . . . . . 28
0x309c . . . . . . . . . . . . . . . . . . . . . 28
0x30a2 . . . . . . . . . . . . . . . . . . . . . 28
0x30a3 . . . . . . . . . . . . . . . . . . . . . 28
0x30a4 . . . . . . . . . . . . . . . . . . . . . 28
0x30a5 . . . . . . . . . . . . . . . . . . . . . 29
0x30a7 . . . . . . . . . . . . . . . . . . . . . 29
0x30a8 . . . . . . . . . . . . . . . . . . . . . 29
0x30aa . . . . . . . . . . . . . . . . . . . . . 29
0x30ab . . . . . . . . . . . . . . . . . . . . . 29
0x30ac . . . . . . . . . . . . . . . . . . . . . . 29
0x30ad . . . . . . . . . . . . . . . . . . . . . . 30
0x30ae . . . . . . . . . . . . . . . . . . . . . . 30
0x30af . . . . . . . . . . . . . . . . . . . . . . 30
0x30b0 . . . . . . . . . . . . . . . . . . . . . . 30
0x30b1 . . . . . . . . . . . . . . . . . . . . . . 30
0x30b2 . . . . . . . . . . . . . . . . . . . . . . 30
0x30b3 . . . . . . . . . . . . . . . . . . . . . . 30
0x30b4 . . . . . . . . . . . . . . . . . . . . . . 31
0x30b5 . . . . . . . . . . . . . . . . . . . . . . 31
0x30b8 . . . . . . . . . . . . . . . . . . . . . . 31
0x30b9 . . . . . . . . . . . . . . . . . . . . . . 31
0x30ba . . . . . . . . . . . . . . . . . . . . . . 31
0x30bb . . . . . . . . . . . . . . . . . . . . . . 31
0x30bc . . . . . . . . . . . . . . . . . . . . . . 32
0x30bd . . . . . . . . . . . . . . . . . . . . . . 32
0x30be . . . . . . . . . . . . . . . . . . . . . . 32
0x30bf . . . . . . . . . . . . . . . . . . . . . . 32
0x30c0 . . . . . . . . . . . . . . . . . . . . . . 33
0x30c1 . . . . . . . . . . . . . . . . . . . . . . 33
0x30c2 . . . . . . . . . . . . . . . . . . . . . . 33
0x30c3 . . . . . . . . . . . . . . . . . . . . . . 33
0x30c4 . . . . . . . . . . . . . . . . . . . . . . 34
0x30c5 . . . . . . . . . . . . . . . . . . . . . . 34
0x30c6 . . . . . . . . . . . . . . . . . . . . . . 34
0x30c7 . . . . . . . . . . . . . . . . . . . . . . 34
0x30c8 . . . . . . . . . . . . . . . . . . . . . . 34
0x30c9 . . . . . . . . . . . . . . . . . . . . . . 36
0x30ca . . . . . . . . . . . . . . . . . . . . . . 36
Error Codes List
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 ix
0x30cb . . . . . . . . . . . . . . . . . . . . . 36
0x30cc . . . . . . . . . . . . . . . . . . . . . 37
0x30cd . . . . . . . . . . . . . . . . . . . . . 37
0x30ce . . . . . . . . . . . . . . . . . . . . . 37
0x30cf . . . . . . . . . . . . . . . . . . . . . . 37
0x30d0 . . . . . . . . . . . . . . . . . . . . . 37
0x30d1 . . . . . . . . . . . . . . . . . . . . . 37
0x30d2 . . . . . . . . . . . . . . . . . . . . . 37
0x30d3 . . . . . . . . . . . . . . . . . . . . . 38
0x30d4 . . . . . . . . . . . . . . . . . . . . . 38
0x30d5 . . . . . . . . . . . . . . . . . . . . . 38
0x30d6 . . . . . . . . . . . . . . . . . . . . . 38
0x30d7 . . . . . . . . . . . . . . . . . . . . . 38
0x30d8 . . . . . . . . . . . . . . . . . . . . . 39
0x30df . . . . . . . . . . . . . . . . . . . . . . 39
0x30e0 . . . . . . . . . . . . . . . . . . . . . 39
0x30e1 . . . . . . . . . . . . . . . . . . . . . 39
0x30e2 . . . . . . . . . . . . . . . . . . . . . 39
0x30e3 . . . . . . . . . . . . . . . . . . . . . 40
0x30e4 . . . . . . . . . . . . . . . . . . . . . 40
0x30e5 . . . . . . . . . . . . . . . . . . . . . 40
0x30e6 . . . . . . . . . . . . . . . . . . . . . 40
0x30e7 . . . . . . . . . . . . . . . . . . . . . 40
0x30e8 . . . . . . . . . . . . . . . . . . . . . 40
0x30e9 . . . . . . . . . . . . . . . . . . . . . 40
0x30ea . . . . . . . . . . . . . . . . . . . . . 40
0x30eb . . . . . . . . . . . . . . . . . . . . . 41
0x30ed . . . . . . . . . . . . . . . . . . . . . 41
0x30f0 . . . . . . . . . . . . . . . . . . . . . . 41
0x30f1 . . . . . . . . . . . . . . . . . . . . . . 41
0x30f2 . . . . . . . . . . . . . . . . . . . . . . 41
0x30f3 . . . . . . . . . . . . . . . . . . . . . . 42
0x30f4 . . . . . . . . . . . . . . . . . . . . . . 42
0x30f5 . . . . . . . . . . . . . . . . . . . . . . 42
0x3100 . . . . . . . . . . . . . . . . . . . . . . 42
0x3101 . . . . . . . . . . . . . . . . . . . . . . 43
0x3102 . . . . . . . . . . . . . . . . . . . . . . 43
0x3103 . . . . . . . . . . . . . . . . . . . . . . 43
0x3104 . . . . . . . . . . . . . . . . . . . . . . 43
0x3105 . . . . . . . . . . . . . . . . . . . . . . 44
0x3106 . . . . . . . . . . . . . . . . . . . . . . 44
0x3107 . . . . . . . . . . . . . . . . . . . . . . 44
0x3108 . . . . . . . . . . . . . . . . . . . . . . 44
0x3109 . . . . . . . . . . . . . . . . . . . . . . 44
0x310a . . . . . . . . . . . . . . . . . . . . . . 45
0x310b . . . . . . . . . . . . . . . . . . . . . . 45
0x3112 . . . . . . . . . . . . . . . . . . . . . . 45
0x3113 . . . . . . . . . . . . . . . . . . . . . . 45
0x3114 . . . . . . . . . . . . . . . . . . . . . . 45
0x3115 . . . . . . . . . . . . . . . . . . . . . . 45
0x3117 . . . . . . . . . . . . . . . . . . . . . . 46
0x3118 . . . . . . . . . . . . . . . . . . . . . . 46
0x3119 . . . . . . . . . . . . . . . . . . . . . . 46
0x311b . . . . . . . . . . . . . . . . . . . . . . 46
0x311c . . . . . . . . . . . . . . . . . . . . . . 46
0x3200 . . . . . . . . . . . . . . . . . . . . . . 47
0x3201 . . . . . . . . . . . . . . . . . . . . . . 47
0x3202 . . . . . . . . . . . . . . . . . . . . . . 47
Error Codes and Messages
x VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x3203 . . . . . . . . . . . . . . . . . . . . . 47
0x3204 . . . . . . . . . . . . . . . . . . . . . 47
0x3340 . . . . . . . . . . . . . . . . . . . . . 48
0x3341 . . . . . . . . . . . . . . . . . . . . . 48
0x3342 . . . . . . . . . . . . . . . . . . . . . 48
0x3343 . . . . . . . . . . . . . . . . . . . . . 48
0x3344 . . . . . . . . . . . . . . . . . . . . . 48
0x3345 . . . . . . . . . . . . . . . . . . . . . 48
0x3a00 . . . . . . . . . . . . . . . . . . . . . 49
0x3a01 . . . . . . . . . . . . . . . . . . . . . 49
0x3a02 . . . . . . . . . . . . . . . . . . . . . 49
0x3a03 . . . . . . . . . . . . . . . . . . . . . 49
0x3a04 . . . . . . . . . . . . . . . . . . . . . 49
0x3a05 . . . . . . . . . . . . . . . . . . . . . 49
0x3a06 . . . . . . . . . . . . . . . . . . . . . 49
0x3a07 . . . . . . . . . . . . . . . . . . . . . 49
0x3a08 . . . . . . . . . . . . . . . . . . . . . 50
0x3a09 . . . . . . . . . . . . . . . . . . . . . 50
0x3a0a . . . . . . . . . . . . . . . . . . . . . 50
0x3a0b . . . . . . . . . . . . . . . . . . . . . 50
0x3a0e . . . . . . . . . . . . . . . . . . . . . 50
0x3a0f . . . . . . . . . . . . . . . . . . . . . . 50
0x3a10 . . . . . . . . . . . . . . . . . . . . . 50
0x3a12 . . . . . . . . . . . . . . . . . . . . . 50
0x4000 . . . . . . . . . . . . . . . . . . . . . 51
0x4001 . . . . . . . . . . . . . . . . . . . . . 51
0x4002 . . . . . . . . . . . . . . . . . . . . . 51
0x4020 . . . . . . . . . . . . . . . . . . . . . 51
0x4022 . . . . . . . . . . . . . . . . . . . . . 51
0x4023 . . . . . . . . . . . . . . . . . . . . . . 51
0x4024 . . . . . . . . . . . . . . . . . . . . . . 51
0x4025 . . . . . . . . . . . . . . . . . . . . . . 52
0x4026 . . . . . . . . . . . . . . . . . . . . . . 52
0x4027 . . . . . . . . . . . . . . . . . . . . . . 52
0x6000 . . . . . . . . . . . . . . . . . . . . . . 52
0x6001 . . . . . . . . . . . . . . . . . . . . . . 52
0x6003 . . . . . . . . . . . . . . . . . . . . . . 53
0x6005 . . . . . . . . . . . . . . . . . . . . . . 53
0x6006 . . . . . . . . . . . . . . . . . . . . . . 53
0x6007 . . . . . . . . . . . . . . . . . . . . . . 53
0x6200 . . . . . . . . . . . . . . . . . . . . . . 53
0x6201 . . . . . . . . . . . . . . . . . . . . . . 54
0x6202 . . . . . . . . . . . . . . . . . . . . . . 54
0x6203 . . . . . . . . . . . . . . . . . . . . . . 54
0x6204 . . . . . . . . . . . . . . . . . . . . . . 54
0x6205 . . . . . . . . . . . . . . . . . . . . . . 54
0x6206 . . . . . . . . . . . . . . . . . . . . . . 54
0x6207 . . . . . . . . . . . . . . . . . . . . . . 54
0x6208 . . . . . . . . . . . . . . . . . . . . . . 54
0x6209 . . . . . . . . . . . . . . . . . . . . . . 54
0x620A . . . . . . . . . . . . . . . . . . . . . 55
0x620B . . . . . . . . . . . . . . . . . . . . . 55
0x6301 . . . . . . . . . . . . . . . . . . . . . . 55
0x6302 . . . . . . . . . . . . . . . . . . . . . . 55
0x6303 . . . . . . . . . . . . . . . . . . . . . . 55
0x6304 . . . . . . . . . . . . . . . . . . . . . . 55
0x6305 . . . . . . . . . . . . . . . . . . . . . . 56
0x6308 . . . . . . . . . . . . . . . . . . . . . . 56
Error Codes List
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 xi
0x6309 . . . . . . . . . . . . . . . . . . . . . 56
0x6400 . . . . . . . . . . . . . . . . . . . . . 56
0x6400 . . . . . . . . . . . . . . . . . . . . . 56
0x6450 . . . . . . . . . . . . . . . . . . . . . 56
0x6451 . . . . . . . . . . . . . . . . . . . . . 57
0x6452 . . . . . . . . . . . . . . . . . . . . . 57
0x6FFF . . . . . . . . . . . . . . . . . . . . . 57
0x9006 . . . . . . . . . . . . . . . . . . . . . 57
0x9008 . . . . . . . . . . . . . . . . . . . . . 57
0x900a . . . . . . . . . . . . . . . . . . . . . 57
0x900b . . . . . . . . . . . . . . . . . . . . . 57
0x900c . . . . . . . . . . . . . . . . . . . . . 57
0x9200 . . . . . . . . . . . . . . . . . . . . . 58
0x9201 . . . . . . . . . . . . . . . . . . . . . 58
0x9202 . . . . . . . . . . . . . . . . . . . . . 58
0x9203 . . . . . . . . . . . . . . . . . . . . . 58
0x9204 . . . . . . . . . . . . . . . . . . . . . 58
0x9205 . . . . . . . . . . . . . . . . . . . . . 58
0x9206 . . . . . . . . . . . . . . . . . . . . . 58
0x9207 . . . . . . . . . . . . . . . . . . . . . 59
0x9208 . . . . . . . . . . . . . . . . . . . . . 59
0x9209 . . . . . . . . . . . . . . . . . . . . . 59
0x920a . . . . . . . . . . . . . . . . . . . . . 59
0x920b . . . . . . . . . . . . . . . . . . . . . 59
0x920c . . . . . . . . . . . . . . . . . . . . . 59
0x920d . . . . . . . . . . . . . . . . . . . . . 59
0x920e . . . . . . . . . . . . . . . . . . . . . 59
0x920f . . . . . . . . . . . . . . . . . . . . . . 60
0x9210 . . . . . . . . . . . . . . . . . . . . . 60
0x9211 . . . . . . . . . . . . . . . . . . . . . . 60
0x9212 . . . . . . . . . . . . . . . . . . . . . . 60
0x9213 . . . . . . . . . . . . . . . . . . . . . . 60
0x9214 . . . . . . . . . . . . . . . . . . . . . . 60
0x9215 . . . . . . . . . . . . . . . . . . . . . . 60
0x9216 . . . . . . . . . . . . . . . . . . . . . . 61
0x9217 . . . . . . . . . . . . . . . . . . . . . . 61
0x9218 . . . . . . . . . . . . . . . . . . . . . . 61
0x9219 . . . . . . . . . . . . . . . . . . . . . . 61
0x921a . . . . . . . . . . . . . . . . . . . . . . 61
0x921b . . . . . . . . . . . . . . . . . . . . . . 61
0x921c . . . . . . . . . . . . . . . . . . . . . . 61
0x921d . . . . . . . . . . . . . . . . . . . . . . 62
0x921e . . . . . . . . . . . . . . . . . . . . . . 62
0x921f . . . . . . . . . . . . . . . . . . . . . . 62
0x9220 . . . . . . . . . . . . . . . . . . . . . . 62
0x9221 . . . . . . . . . . . . . . . . . . . . . . 62
0xd000 . . . . . . . . . . . . . . . . . . . . . . 63
0xd001 . . . . . . . . . . . . . . . . . . . . . . 63
0xd002 . . . . . . . . . . . . . . . . . . . . . . 63
0xd003 . . . . . . . . . . . . . . . . . . . . . . 63
0xd004 . . . . . . . . . . . . . . . . . . . . . . 63
0xd005 . . . . . . . . . . . . . . . . . . . . . . 63
0xd006 . . . . . . . . . . . . . . . . . . . . . . 63
0xd007 . . . . . . . . . . . . . . . . . . . . . . 64
0xd008 . . . . . . . . . . . . . . . . . . . . . . 64
0xd009 . . . . . . . . . . . . . . . . . . . . . . 64
0xd00a . . . . . . . . . . . . . . . . . . . . . . 64
0xd00b . . . . . . . . . . . . . . . . . . . . . . 64
Error Codes and Messages
xii VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0xd00c . . . . . . . . . . . . . . . . . . . . . 64
0xd00d . . . . . . . . . . . . . . . . . . . . . 64
0xd065 . . . . . . . . . . . . . . . . . . . . . 65
0xd0c9 . . . . . . . . . . . . . . . . . . . . . 65
0xd0ca . . . . . . . . . . . . . . . . . . . . . 65
0xd0cb . . . . . . . . . . . . . . . . . . . . . 65
0xd0cc . . . . . . . . . . . . . . . . . . . . . 65
0xd0dc . . . . . . . . . . . . . . . . . . . . . 65
0xd0ec . . . . . . . . . . . . . . . . . . . . . 65
0xd0f0 . . . . . . . . . . . . . . . . . . . . . . 65
0xd0fa . . . . . . . . . . . . . . . . . . . . . . 66
0xd104 . . . . . . . . . . . . . . . . . . . . . 66
0xd10e . . . . . . . . . . . . . . . . . . . . . 66
0xd12b . . . . . . . . . . . . . . . . . . . . . 66
0xd300 . . . . . . . . . . . . . . . . . . . . . 66
0xd301 . . . . . . . . . . . . . . . . . . . . . 66
0xd302 . . . . . . . . . . . . . . . . . . . . . 66
0xd303 . . . . . . . . . . . . . . . . . . . . . 66
0xd304 . . . . . . . . . . . . . . . . . . . . . 67
0xd305 . . . . . . . . . . . . . . . . . . . . . 67
0xd307 . . . . . . . . . . . . . . . . . . . . . 67
0x310c . . . . . . . . . . . . . . . . . . . . . 67
0x310d . . . . . . . . . . . . . . . . . . . . . 67
0x310e . . . . . . . . . . . . . . . . . . . . . 67
0x310f . . . . . . . . . . . . . . . . . . . . . . 68
0x3110 . . . . . . . . . . . . . . . . . . . . . 68
0x3111 . . . . . . . . . . . . . . . . . . . . . 68
0x3112 . . . . . . . . . . . . . . . . . . . . . 68
0x3114 . . . . . . . . . . . . . . . . . . . . . 68
0x3115 . . . . . . . . . . . . . . . . . . . . . . 68
0x30d3 . . . . . . . . . . . . . . . . . . . . . . 69
0x4101 . . . . . . . . . . . . . . . . . . . . . . 69
0x4102 . . . . . . . . . . . . . . . . . . . . . . 69
0x4103 . . . . . . . . . . . . . . . . . . . . . . 69
0x4104 . . . . . . . . . . . . . . . . . . . . . . 69
0x4105 . . . . . . . . . . . . . . . . . . . . . . 69
0x4106 . . . . . . . . . . . . . . . . . . . . . . 70
0x4107 . . . . . . . . . . . . . . . . . . . . . . 70
0x4108 . . . . . . . . . . . . . . . . . . . . . . 70
0x4109 . . . . . . . . . . . . . . . . . . . . . . 70
0x410A . . . . . . . . . . . . . . . . . . . . . 70
0x410B . . . . . . . . . . . . . . . . . . . . . 70
0x410C . . . . . . . . . . . . . . . . . . . . . 71
0x410D . . . . . . . . . . . . . . . . . . . . . 71
0x410E . . . . . . . . . . . . . . . . . . . . . 71
0x410F . . . . . . . . . . . . . . . . . . . . . . 71
0x4110 . . . . . . . . . . . . . . . . . . . . . . 71
0x4111 . . . . . . . . . . . . . . . . . . . . . . 71
0x4150 . . . . . . . . . . . . . . . . . . . . . . 72
0x4151 . . . . . . . . . . . . . . . . . . . . . . 72
0x4152 . . . . . . . . . . . . . . . . . . . . . . 72
0x4153 . . . . . . . . . . . . . . . . . . . . . . 72
0x4154 . . . . . . . . . . . . . . . . . . . . . . 72
0x4155 . . . . . . . . . . . . . . . . . . . . . . 72
0x4156 . . . . . . . . . . . . . . . . . . . . . . 72
0x4157 . . . . . . . . . . . . . . . . . . . . . . 73
0x4158 . . . . . . . . . . . . . . . . . . . . . . 73
0x4159 . . . . . . . . . . . . . . . . . . . . . . 73
Error Codes List
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 xiii
0x4170 . . . . . . . . . . . . . . . . . . . . . 73
0x4171 . . . . . . . . . . . . . . . . . . . . . 73
0x4172 . . . . . . . . . . . . . . . . . . . . . 74
0x4173 . . . . . . . . . . . . . . . . . . . . . 74
0x4174 . . . . . . . . . . . . . . . . . . . . . 74
0x4175 . . . . . . . . . . . . . . . . . . . . . 74
0x4176 . . . . . . . . . . . . . . . . . . . . . 74
0x4177 . . . . . . . . . . . . . . . . . . . . . 74
0x4178 . . . . . . . . . . . . . . . . . . . . . 74
0x4179 . . . . . . . . . . . . . . . . . . . . . 75
0x417A . . . . . . . . . . . . . . . . . . . . . 75
0x417B . . . . . . . . . . . . . . . . . . . . . 75
0x417C . . . . . . . . . . . . . . . . . . . . . 75
0x417D . . . . . . . . . . . . . . . . . . . . . 75
0x417E . . . . . . . . . . . . . . . . . . . . . 75
0x417E . . . . . . . . . . . . . . . . . . . . . 76
0x4190 . . . . . . . . . . . . . . . . . . . . . 76
0x4191 . . . . . . . . . . . . . . . . . . . . . 76
0x4192 . . . . . . . . . . . . . . . . . . . . . 76
0x4193 . . . . . . . . . . . . . . . . . . . . . 76
0x4194 . . . . . . . . . . . . . . . . . . . . . 77
0x4195 . . . . . . . . . . . . . . . . . . . . . 77
0x4196 . . . . . . . . . . . . . . . . . . . . . 77
0x4197 . . . . . . . . . . . . . . . . . . . . . 77
0x4198 . . . . . . . . . . . . . . . . . . . . . 77
0x4199 . . . . . . . . . . . . . . . . . . . . . 78
0x419A . . . . . . . . . . . . . . . . . . . . . 78
0x419B . . . . . . . . . . . . . . . . . . . . . 78
0x419C . . . . . . . . . . . . . . . . . . . . . 78
0x419D . . . . . . . . . . . . . . . . . . . . . 78
0x4210 . . . . . . . . . . . . . . . . . . . . . . 79
0x4211 . . . . . . . . . . . . . . . . . . . . . . 79
0x4212 . . . . . . . . . . . . . . . . . . . . . . 79
0x4213 . . . . . . . . . . . . . . . . . . . . . . 79
0x4214 . . . . . . . . . . . . . . . . . . . . . . 79
0x4215 . . . . . . . . . . . . . . . . . . . . . . 79
0x4216 . . . . . . . . . . . . . . . . . . . . . . 80
0x4217 . . . . . . . . . . . . . . . . . . . . . . 80
0x4218 . . . . . . . . . . . . . . . . . . . . . . 80
0x4219 . . . . . . . . . . . . . . . . . . . . . . 80
0x421A . . . . . . . . . . . . . . . . . . . . . 80
0x421B . . . . . . . . . . . . . . . . . . . . . 80
0x421C . . . . . . . . . . . . . . . . . . . . . 81
0x421D . . . . . . . . . . . . . . . . . . . . . 81
0x421E . . . . . . . . . . . . . . . . . . . . . 81
0x421F . . . . . . . . . . . . . . . . . . . . . . 81
0x4220 . . . . . . . . . . . . . . . . . . . . . . 81
0x4221 . . . . . . . . . . . . . . . . . . . . . . 81
0x4222 . . . . . . . . . . . . . . . . . . . . . . 82
0x4223 . . . . . . . . . . . . . . . . . . . . . . 82
0x4224 . . . . . . . . . . . . . . . . . . . . . . 82
0x4225 . . . . . . . . . . . . . . . . . . . . . . 82
0x4226 . . . . . . . . . . . . . . . . . . . . . . 82
0x4300 . . . . . . . . . . . . . . . . . . . . . . 82
0x4301 . . . . . . . . . . . . . . . . . . . . . . 83
0x4302 . . . . . . . . . . . . . . . . . . . . . . 83
0x4303 . . . . . . . . . . . . . . . . . . . . . . 83
0x4304 . . . . . . . . . . . . . . . . . . . . . . 83
Error Codes and Messages
xiv VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x4305 . . . . . . . . . . . . . . . . . . . . . 83
0x4306 . . . . . . . . . . . . . . . . . . . . . 83
0x4307 . . . . . . . . . . . . . . . . . . . . . 83
0x4308 . . . . . . . . . . . . . . . . . . . . . 84
0x4309 . . . . . . . . . . . . . . . . . . . . . 84
0x430A . . . . . . . . . . . . . . . . . . . . . 84
0x430B . . . . . . . . . . . . . . . . . . . . . 84
0x430C . . . . . . . . . . . . . . . . . . . . . 84
0x430D . . . . . . . . . . . . . . . . . . . . . 85
0x430E . . . . . . . . . . . . . . . . . . . . . 85
0x430F . . . . . . . . . . . . . . . . . . . . . 85
0x4360 . . . . . . . . . . . . . . . . . . . . . 85
0x4361 . . . . . . . . . . . . . . . . . . . . . 85
0x4380 . . . . . . . . . . . . . . . . . . . . . 86
0x4381 . . . . . . . . . . . . . . . . . . . . . 86
0x4382 . . . . . . . . . . . . . . . . . . . . . 86
0x4384 . . . . . . . . . . . . . . . . . . . . . 86
0x4385 . . . . . . . . . . . . . . . . . . . . . 86
0x4386 . . . . . . . . . . . . . . . . . . . . . 87
0x4387 . . . . . . . . . . . . . . . . . . . . . 87
0x4388 . . . . . . . . . . . . . . . . . . . . . 87
0x4389 . . . . . . . . . . . . . . . . . . . . . 87
0x438A . . . . . . . . . . . . . . . . . . . . . 87
0x438B . . . . . . . . . . . . . . . . . . . . . 87
0x438C . . . . . . . . . . . . . . . . . . . . . 87
0x4500 . . . . . . . . . . . . . . . . . . . . . 88
0x4501 . . . . . . . . . . . . . . . . . . . . . 88
0x3900 . . . . . . . . . . . . . . . . . . . . . 88
0x3901 . . . . . . . . . . . . . . . . . . . . . 88
0x3902 . . . . . . . . . . . . . . . . . . . . . . 89
0x3903 . . . . . . . . . . . . . . . . . . . . . . 89
0x3904 . . . . . . . . . . . . . . . . . . . . . . 89
0x3905 . . . . . . . . . . . . . . . . . . . . . . 89
0x3906 . . . . . . . . . . . . . . . . . . . . . . 89
0x3907 . . . . . . . . . . . . . . . . . . . . . . 89
0x3908 . . . . . . . . . . . . . . . . . . . . . . 89
0x3909 . . . . . . . . . . . . . . . . . . . . . . 89
0x390A . . . . . . . . . . . . . . . . . . . . . 90
0x390B . . . . . . . . . . . . . . . . . . . . . 90
0x390C . . . . . . . . . . . . . . . . . . . . . 90
0x390D . . . . . . . . . . . . . . . . . . . . . 90
0x390E . . . . . . . . . . . . . . . . . . . . . 90
0x390F . . . . . . . . . . . . . . . . . . . . . . 90
0x3910 . . . . . . . . . . . . . . . . . . . . . . 90
0x3911 . . . . . . . . . . . . . . . . . . . . . . 90
0x3912 . . . . . . . . . . . . . . . . . . . . . . 91
0x3913 . . . . . . . . . . . . . . . . . . . . . . 91
0x3914 . . . . . . . . . . . . . . . . . . . . . . 91
0x3915 . . . . . . . . . . . . . . . . . . . . . . 91
0x3916 . . . . . . . . . . . . . . . . . . . . . . 91
0x3917 . . . . . . . . . . . . . . . . . . . . . . 91
0x3918 . . . . . . . . . . . . . . . . . . . . . . 91
0x3919 . . . . . . . . . . . . . . . . . . . . . . 91
0x391A . . . . . . . . . . . . . . . . . . . . . 92
0x391B . . . . . . . . . . . . . . . . . . . . . 92
0x391C . . . . . . . . . . . . . . . . . . . . . 92
0x391F . . . . . . . . . . . . . . . . . . . . . . 92
0x3920 . . . . . . . . . . . . . . . . . . . . . . 92
Error Codes List
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 xv
0x3921 . . . . . . . . . . . . . . . . . . . . . 92
0x3922 . . . . . . . . . . . . . . . . . . . . . 92
0x3923 . . . . . . . . . . . . . . . . . . . . . 93
0x3924 . . . . . . . . . . . . . . . . . . . . . 93
0x3925 . . . . . . . . . . . . . . . . . . . . . 93
0x3926 . . . . . . . . . . . . . . . . . . . . . 93
0x3927 . . . . . . . . . . . . . . . . . . . . . 93
0x3928 . . . . . . . . . . . . . . . . . . . . . 93
0x3929 . . . . . . . . . . . . . . . . . . . . . 93
0x392A . . . . . . . . . . . . . . . . . . . . . 94
0x392B . . . . . . . . . . . . . . . . . . . . . 94
0x392C . . . . . . . . . . . . . . . . . . . . . 94
0x392D . . . . . . . . . . . . . . . . . . . . . 94
0x392E . . . . . . . . . . . . . . . . . . . . . 94
0x392F . . . . . . . . . . . . . . . . . . . . . 94
0x3930 . . . . . . . . . . . . . . . . . . . . . 94
0x3931 . . . . . . . . . . . . . . . . . . . . . 94
0x3932 . . . . . . . . . . . . . . . . . . . . . 95
0x9002 . . . . . . . . . . . . . . . . . . . . . 95
0x9005 . . . . . . . . . . . . . . . . . . . . . 95
0x9006 . . . . . . . . . . . . . . . . . . . . . 95
0x9007 . . . . . . . . . . . . . . . . . . . . . 95
0x9008 . . . . . . . . . . . . . . . . . . . . . 96
0x900c . . . . . . . . . . . . . . . . . . . . . 96
0x900d . . . . . . . . . . . . . . . . . . . . . 96
0x900e . . . . . . . . . . . . . . . . . . . . . 96
0x9011 . . . . . . . . . . . . . . . . . . . . . 96
0x9013 . . . . . . . . . . . . . . . . . . . . . 97
0x9500 . . . . . . . . . . . . . . . . . . . . . 97
0x9501 . . . . . . . . . . . . . . . . . . . . . . 97
0x9502 . . . . . . . . . . . . . . . . . . . . . . 97
0x9503 . . . . . . . . . . . . . . . . . . . . . . 97
0x9504 . . . . . . . . . . . . . . . . . . . . . . 97
0x9505 . . . . . . . . . . . . . . . . . . . . . . 98
0x9506 . . . . . . . . . . . . . . . . . . . . . . 98
0x9507 . . . . . . . . . . . . . . . . . . . . . . 98
0x9508 . . . . . . . . . . . . . . . . . . . . . . 98
0x9509 . . . . . . . . . . . . . . . . . . . . . . 98
0x950a . . . . . . . . . . . . . . . . . . . . . . 98
0x950b . . . . . . . . . . . . . . . . . . . . . . 98
0x950c . . . . . . . . . . . . . . . . . . . . . . 98
0x950d . . . . . . . . . . . . . . . . . . . . . . 99
0x950e . . . . . . . . . . . . . . . . . . . . . . 99
0x950f . . . . . . . . . . . . . . . . . . . . . . 99
0x9510 . . . . . . . . . . . . . . . . . . . . . . 99
0x9511 . . . . . . . . . . . . . . . . . . . . . . 99
0x9512 . . . . . . . . . . . . . . . . . . . . . . 99
0x9999 . . . . . . . . . . . . . . . . . . . . . . 99
0xb000 . . . . . . . . . . . . . . . . . . . . . 100
0xA000 . . . . . . . . . . . . . . . . . . . . 100
0xA001 . . . . . . . . . . . . . . . . . . . . 100
0xA003 . . . . . . . . . . . . . . . . . . . . 100
0xA004 . . . . . . . . . . . . . . . . . . . . 100
0xA005 . . . . . . . . . . . . . . . . . . . . 100
0xA006 . . . . . . . . . . . . . . . . . . . . 101
0xA007 . . . . . . . . . . . . . . . . . . . . 101
0xA008 . . . . . . . . . . . . . . . . . . . . 101
0xA009 . . . . . . . . . . . . . . . . . . . . 102
Error Codes and Messages
xvi VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0xA00A . . . . . . . . . . . . . . . . . . . . 102
0xA00B . . . . . . . . . . . . . . . . . . . . 103
0xA00C . . . . . . . . . . . . . . . . . . . . 103
0xA00D . . . . . . . . . . . . . . . . . . . . 103
0xA00D . . . . . . . . . . . . . . . . . . . . 103
0xA00E . . . . . . . . . . . . . . . . . . . . 103
0xA00fF . . . . . . . . . . . . . . . . . . . 104
0xA010 . . . . . . . . . . . . . . . . . . . . 104
0xA010 . . . . . . . . . . . . . . . . . . . . 104
0xA011 . . . . . . . . . . . . . . . . . . . . 104
0xA011 . . . . . . . . . . . . . . . . . . . . 104
0xA012 . . . . . . . . . . . . . . . . . . . . 104
0xA012 . . . . . . . . . . . . . . . . . . . . 104
0xA013 . . . . . . . . . . . . . . . . . . . . 105
0xA014 . . . . . . . . . . . . . . . . . . . . 105
0xA015 . . . . . . . . . . . . . . . . . . . . 105
0xA016 . . . . . . . . . . . . . . . . . . . . 105
0xA017 . . . . . . . . . . . . . . . . . . . . 105
0xA018 . . . . . . . . . . . . . . . . . . . . 105
0xA019 . . . . . . . . . . . . . . . . . . . . 105
0xA01a . . . . . . . . . . . . . . . . . . . . 105
0xA01b . . . . . . . . . . . . . . . . . . . . 106
0xA01e . . . . . . . . . . . . . . . . . . . . 106
0xA01f . . . . . . . . . . . . . . . . . . . . 106
0xA020 . . . . . . . . . . . . . . . . . . . . 106
0xA021 . . . . . . . . . . . . . . . . . . . . 106
0xA022 . . . . . . . . . . . . . . . . . . . . 106
0xA023 . . . . . . . . . . . . . . . . . . . . 106
0xA024 . . . . . . . . . . . . . . . . . . . . 107
0xA025 . . . . . . . . . . . . . . . . . . . . 107
0xA026 . . . . . . . . . . . . . . . . . . . . 107
0xA027 . . . . . . . . . . . . . . . . . . . . 107
0xA028 . . . . . . . . . . . . . . . . . . . . 107
0xA028 . . . . . . . . . . . . . . . . . . . . 107
0xA064 . . . . . . . . . . . . . . . . . . . . 108
0xA065 . . . . . . . . . . . . . . . . . . . . 108
0xA066 . . . . . . . . . . . . . . . . . . . . 108
0xA067 . . . . . . . . . . . . . . . . . . . . 108
0xA068 . . . . . . . . . . . . . . . . . . . . 108
0xA069 . . . . . . . . . . . . . . . . . . . . 108
0xA06a . . . . . . . . . . . . . . . . . . . . 109
0xA06b . . . . . . . . . . . . . . . . . . . . 109
0xA06c . . . . . . . . . . . . . . . . . . . . . 109
0xA06d . . . . . . . . . . . . . . . . . . . . 109
0xA06e . . . . . . . . . . . . . . . . . . . . 109
0xA06f . . . . . . . . . . . . . . . . . . . . . 109
0xA0c8 . . . . . . . . . . . . . . . . . . . . . 109
0xA0c9 . . . . . . . . . . . . . . . . . . . . . 109
0xA0ca . . . . . . . . . . . . . . . . . . . . . 110
0xA0cb . . . . . . . . . . . . . . . . . . . . . 110
0xA0cc . . . . . . . . . . . . . . . . . . . . . 110
0xA0cd . . . . . . . . . . . . . . . . . . . . . 110
0xA0ce . . . . . . . . . . . . . . . . . . . . . 110
0xA0cf . . . . . . . . . . . . . . . . . . . . . 110
0xA0d0 . . . . . . . . . . . . . . . . . . . . 110
0xA0d1 . . . . . . . . . . . . . . . . . . . . 110
0xA0d2 . . . . . . . . . . . . . . . . . . . . 111
0xA12c . . . . . . . . . . . . . . . . . . . . . 111
Error Codes List
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 xvii
0xA12d . . . . . . . . . . . . . . . . . . . . 111
0xA12e . . . . . . . . . . . . . . . . . . . . 111
0xA12f . . . . . . . . . . . . . . . . . . . . 111
0xA130 . . . . . . . . . . . . . . . . . . . . 111
0x9300 . . . . . . . . . . . . . . . . . . . . 111
0x9301 . . . . . . . . . . . . . . . . . . . . 112
0x9302 . . . . . . . . . . . . . . . . . . . . 112
0x 9303 . . . . . . . . . . . . . . . . . . . . 112
0x9304 . . . . . . . . . . . . . . . . . . . . 112
0x9305 . . . . . . . . . . . . . . . . . . . . 112
0x9306 . . . . . . . . . . . . . . . . . . . . 112
0x9307 . . . . . . . . . . . . . . . . . . . . 112
0x9308 . . . . . . . . . . . . . . . . . . . . 112
0x9309 . . . . . . . . . . . . . . . . . . . . 112
0x930a . . . . . . . . . . . . . . . . . . . . 113
0x930b . . . . . . . . . . . . . . . . . . . . 113
0x930c . . . . . . . . . . . . . . . . . . . . 113
0x930d . . . . . . . . . . . . . . . . . . . . 113
0x930e . . . . . . . . . . . . . . . . . . . . 113
0x930f . . . . . . . . . . . . . . . . . . . . . 113
0x9310 . . . . . . . . . . . . . . . . . . . . 113
0x9311 . . . . . . . . . . . . . . . . . . . . 113
0x9312 . . . . . . . . . . . . . . . . . . . . 114
0x9313 . . . . . . . . . . . . . . . . . . . . 114
0x9314 . . . . . . . . . . . . . . . . . . . . 114
0x9316 . . . . . . . . . . . . . . . . . . . . 114
0x9317 . . . . . . . . . . . . . . . . . . . . 114
0x9318 . . . . . . . . . . . . . . . . . . . . 114
0x9319 . . . . . . . . . . . . . . . . . . . . 114
0x931a . . . . . . . . . . . . . . . . . . . . . 114
0x931b . . . . . . . . . . . . . . . . . . . . . 115
0x9330 . . . . . . . . . . . . . . . . . . . . . 115
0x9331 . . . . . . . . . . . . . . . . . . . . . 115
0x100 . . . . . . . . . . . . . . . . . . . . . . 119
0x101 . . . . . . . . . . . . . . . . . . . . . . 119
0x102 . . . . . . . . . . . . . . . . . . . . . . 119
0x103 . . . . . . . . . . . . . . . . . . . . . . 119
0x104 . . . . . . . . . . . . . . . . . . . . . . 119
0x105 . . . . . . . . . . . . . . . . . . . . . . 119
0x106 . . . . . . . . . . . . . . . . . . . . . . 119
0x107 . . . . . . . . . . . . . . . . . . . . . . 120
0x108 . . . . . . . . . . . . . . . . . . . . . . 120
0x109 . . . . . . . . . . . . . . . . . . . . . . 120
0x10a . . . . . . . . . . . . . . . . . . . . . . 120
0x10b . . . . . . . . . . . . . . . . . . . . . . 120
0x10c . . . . . . . . . . . . . . . . . . . . . . 120
0x10d . . . . . . . . . . . . . . . . . . . . . . 120
0x10e . . . . . . . . . . . . . . . . . . . . . . 120
0x10f . . . . . . . . . . . . . . . . . . . . . . 120
0x110 . . . . . . . . . . . . . . . . . . . . . . 120
0x111 . . . . . . . . . . . . . . . . . . . . . . 120
0x112 . . . . . . . . . . . . . . . . . . . . . . 120
0x113 . . . . . . . . . . . . . . . . . . . . . . 120
0x114 . . . . . . . . . . . . . . . . . . . . . . 121
0x115 . . . . . . . . . . . . . . . . . . . . . . 121
0x116 . . . . . . . . . . . . . . . . . . . . . . 121
0x117 . . . . . . . . . . . . . . . . . . . . . . 121
0x118 . . . . . . . . . . . . . . . . . . . . . . 121
Error Codes and Messages
xviii VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x119 . . . . . . . . . . . . . . . . . . . . . 121
0x11a . . . . . . . . . . . . . . . . . . . . . 121
0x11b . . . . . . . . . . . . . . . . . . . . . 121
0x11c . . . . . . . . . . . . . . . . . . . . . 121
0x11d . . . . . . . . . . . . . . . . . . . . . 121
0x11e . . . . . . . . . . . . . . . . . . . . . 121
0x11f . . . . . . . . . . . . . . . . . . . . . . 121
0x120 . . . . . . . . . . . . . . . . . . . . . 121
0x121 . . . . . . . . . . . . . . . . . . . . . 122
0x122 . . . . . . . . . . . . . . . . . . . . . 122
0x123 . . . . . . . . . . . . . . . . . . . . . 122
0x124 . . . . . . . . . . . . . . . . . . . . . 122
0x125 . . . . . . . . . . . . . . . . . . . . . 122
0x126 . . . . . . . . . . . . . . . . . . . . . 122
0x127 . . . . . . . . . . . . . . . . . . . . . 122
0x128 . . . . . . . . . . . . . . . . . . . . . 122
0x129 . . . . . . . . . . . . . . . . . . . . . 122
0x12a . . . . . . . . . . . . . . . . . . . . . 122
0x12b . . . . . . . . . . . . . . . . . . . . . 122
0x12c . . . . . . . . . . . . . . . . . . . . . 122
0x12d . . . . . . . . . . . . . . . . . . . . . 123
0x12e . . . . . . . . . . . . . . . . . . . . . 123
0x12f . . . . . . . . . . . . . . . . . . . . . . 123
0x130 . . . . . . . . . . . . . . . . . . . . . 123
0x131 . . . . . . . . . . . . . . . . . . . . . 123
0x132 . . . . . . . . . . . . . . . . . . . . . 123
0x133 . . . . . . . . . . . . . . . . . . . . . 123
0x134 . . . . . . . . . . . . . . . . . . . . . 123
0x135 . . . . . . . . . . . . . . . . . . . . . 123
0x136 . . . . . . . . . . . . . . . . . . . . . . 123
0x137 . . . . . . . . . . . . . . . . . . . . . . 123
0x138 . . . . . . . . . . . . . . . . . . . . . . 123
0x139 . . . . . . . . . . . . . . . . . . . . . . 123
0x13a . . . . . . . . . . . . . . . . . . . . . . 124
0x13b . . . . . . . . . . . . . . . . . . . . . . 124
0x13c . . . . . . . . . . . . . . . . . . . . . . 124
0x13d . . . . . . . . . . . . . . . . . . . . . . 124
0x13e . . . . . . . . . . . . . . . . . . . . . . 124
0x13f . . . . . . . . . . . . . . . . . . . . . . 124
0x140 . . . . . . . . . . . . . . . . . . . . . . 124
0x141 . . . . . . . . . . . . . . . . . . . . . . 124
0x143 . . . . . . . . . . . . . . . . . . . . . . 124
0x142 . . . . . . . . . . . . . . . . . . . . . . 124
0x159 . . . . . . . . . . . . . . . . . . . . . . 124
0x145 . . . . . . . . . . . . . . . . . . . . . . 124
0x146 . . . . . . . . . . . . . . . . . . . . . . 125
0x147 . . . . . . . . . . . . . . . . . . . . . . 125
0x148 . . . . . . . . . . . . . . . . . . . . . . 125
0x149 . . . . . . . . . . . . . . . . . . . . . . 125
0x14b . . . . . . . . . . . . . . . . . . . . . . 125
0x18b . . . . . . . . . . . . . . . . . . . . . . 125
0x15b . . . . . . . . . . . . . . . . . . . . . . 125
0x15c . . . . . . . . . . . . . . . . . . . . . . 125
0x198 . . . . . . . . . . . . . . . . . . . . . . 125
0x199 . . . . . . . . . . . . . . . . . . . . . . 125
0x300 . . . . . . . . . . . . . . . . . . . . . . 126
0x301 . . . . . . . . . . . . . . . . . . . . . . 126
0x600 . . . . . . . . . . . . . . . . . . . . . . 126
Error Codes List
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 xix
0x601 . . . . . . . . . . . . . . . . . . . . . 126
0x602 . . . . . . . . . . . . . . . . . . . . . 126
0x603 . . . . . . . . . . . . . . . . . . . . . 126
0x604 . . . . . . . . . . . . . . . . . . . . . 127
0x605 . . . . . . . . . . . . . . . . . . . . . 127
0x606 . . . . . . . . . . . . . . . . . . . . . 127
0x607 . . . . . . . . . . . . . . . . . . . . . 127
0x608 . . . . . . . . . . . . . . . . . . . . . 127
0x609 . . . . . . . . . . . . . . . . . . . . . 128
0x60d . . . . . . . . . . . . . . . . . . . . . 128
0x60e . . . . . . . . . . . . . . . . . . . . . 128
0x60f . . . . . . . . . . . . . . . . . . . . . . 128
0x610 . . . . . . . . . . . . . . . . . . . . . 128
0x611 . . . . . . . . . . . . . . . . . . . . . 128
0x612 . . . . . . . . . . . . . . . . . . . . . 128
0x613 . . . . . . . . . . . . . . . . . . . . . 128
0x614 . . . . . . . . . . . . . . . . . . . . . 129
0x615 . . . . . . . . . . . . . . . . . . . . . 129
0x616 . . . . . . . . . . . . . . . . . . . . . 129
0x617 . . . . . . . . . . . . . . . . . . . . . 129
0x618 . . . . . . . . . . . . . . . . . . . . . 129
0x619 . . . . . . . . . . . . . . . . . . . . . 129
0x61a . . . . . . . . . . . . . . . . . . . . . 129
0x61b . . . . . . . . . . . . . . . . . . . . . 129
0x61c . . . . . . . . . . . . . . . . . . . . . 129
0x61d . . . . . . . . . . . . . . . . . . . . . 129
0x61e . . . . . . . . . . . . . . . . . . . . . 129
0x61f . . . . . . . . . . . . . . . . . . . . . . 130
0x620 . . . . . . . . . . . . . . . . . . . . . 130
0x625 . . . . . . . . . . . . . . . . . . . . . . 130
0x626 . . . . . . . . . . . . . . . . . . . . . . 130
0x627 . . . . . . . . . . . . . . . . . . . . . . 130
0x628 . . . . . . . . . . . . . . . . . . . . . . 130
0x629 . . . . . . . . . . . . . . . . . . . . . . 130
0x62a . . . . . . . . . . . . . . . . . . . . . . 130
0x62b . . . . . . . . . . . . . . . . . . . . . . 130
0x62c . . . . . . . . . . . . . . . . . . . . . . 131
0x630 . . . . . . . . . . . . . . . . . . . . . . 131
0x62d . . . . . . . . . . . . . . . . . . . . . . 131
0x62e . . . . . . . . . . . . . . . . . . . . . . 131
0x62f . . . . . . . . . . . . . . . . . . . . . . 131
0x631 . . . . . . . . . . . . . . . . . . . . . . 131
0x633 . . . . . . . . . . . . . . . . . . . . . . 131
0x634 . . . . . . . . . . . . . . . . . . . . . . 131
0x635 . . . . . . . . . . . . . . . . . . . . . . 132
0x636 . . . . . . . . . . . . . . . . . . . . . . 132
0x637 . . . . . . . . . . . . . . . . . . . . . . 132
0x638 . . . . . . . . . . . . . . . . . . . . . . 132
0x639 . . . . . . . . . . . . . . . . . . . . . . 132
0x63a . . . . . . . . . . . . . . . . . . . . . . 132
0x63b . . . . . . . . . . . . . . . . . . . . . . 132
0x63c . . . . . . . . . . . . . . . . . . . . . . 132
0x63e . . . . . . . . . . . . . . . . . . . . . . 132
0x63f . . . . . . . . . . . . . . . . . . . . . . 132
0x640 . . . . . . . . . . . . . . . . . . . . . . 132
0x641 . . . . . . . . . . . . . . . . . . . . . . 132
0x643 . . . . . . . . . . . . . . . . . . . . . . 133
0x644 . . . . . . . . . . . . . . . . . . . . . . 133
Error Codes and Messages
xx VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x0002 . . . . . . . . . . . . . . . . . . . . 134
0x0003 . . . . . . . . . . . . . . . . . . . . 134
0x0020 . . . . . . . . . . . . . . . . . . . . 134
0x0021 . . . . . . . . . . . . . . . . . . . . 134
0x0032 . . . . . . . . . . . . . . . . . . . . 134
0x0031 . . . . . . . . . . . . . . . . . . . . 134
0x0032 . . . . . . . . . . . . . . . . . . . . 134
0x0060 . . . . . . . . . . . . . . . . . . . . 134
0x0070 . . . . . . . . . . . . . . . . . . . . 134
0x0071 . . . . . . . . . . . . . . . . . . . . 134
0x00a0 . . . . . . . . . . . . . . . . . . . . 134
0x00a1 . . . . . . . . . . . . . . . . . . . . 134
0x00b1 . . . . . . . . . . . . . . . . . . . . 134
0x00b3 . . . . . . . . . . . . . . . . . . . . 135
0x00b4 . . . . . . . . . . . . . . . . . . . . 135
0x00b5 . . . . . . . . . . . . . . . . . . . . 135
0x00c0 . . . . . . . . . . . . . . . . . . . . 135
0x00c1 . . . . . . . . . . . . . . . . . . . . 135
0x00e0 . . . . . . . . . . . . . . . . . . . . 135
0x00e1 . . . . . . . . . . . . . . . . . . . . 135
0x00e2 . . . . . . . . . . . . . . . . . . . . . 135
0x0100 . . . . . . . . . . . . . . . . . . . . . 135
0x0102 . . . . . . . . . . . . . . . . . . . . . 135
0x0101 . . . . . . . . . . . . . . . . . . . . . 135
0x0103 . . . . . . . . . . . . . . . . . . . . . 135
0x8000 . . . . . . . . . . . . . . . . . . . . . 135
0x8001 . . . . . . . . . . . . . . . . . . . . . 136
0x00a2 . . . . . . . . . . . . . . . . . . . . . 136
0x1000 . . . . . . . . . . . . . . . . . . . . . 136
0x1001 . . . . . . . . . . . . . . . . . . . . . 136
0x1002 . . . . . . . . . . . . . . . . . . . . . 136
0x1003 . . . . . . . . . . . . . . . . . . . . . 136
0x1004 . . . . . . . . . . . . . . . . . . . . . 136
0x1005 . . . . . . . . . . . . . . . . . . . . . 136
0x1006 . . . . . . . . . . . . . . . . . . . . . 136
0x1007 . . . . . . . . . . . . . . . . . . . . . 136
0x1008 . . . . . . . . . . . . . . . . . . . . . 136
0x1009 . . . . . . . . . . . . . . . . . . . . . 137
0x1010 . . . . . . . . . . . . . . . . . . . . . 137
Summary of Revisions
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 xxi
Summary of Revisions
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/V5
This manual is for use with OnSite 4.5.1 or higher and Processing Center 3.0.
The followig changes have been made to this manual since
DOC-ENT-ONS-ERR-0001/V4.
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/V4
The following changes have been made to this manual since
DOC-ENT-ONS-ERR-0001/V3.
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/V3
The following changes have been made to this manual since
DOC-ENT-ONS-ERR-0001/V2.
Updated Improved descriptions and corrected some cause and actions.
New error codes
added
Added new error codes and enhanced cause and action description
for some old error codes.
Processing Center
3.0 errors
Added Processing Center 3.0 errors.
Roaming Services
errors
Added Roaming service errors.
Digital Notariza-
tion errors
Added Digital Notarization Service errors
Chapter 2, CA
Key Management
Tool Error Codes
Added CASH errors.
Error Codes and Messages
xxii VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/V2
The following changes have been made to this manual since
DOC-ENT-ONS-ERR-0001/V1:
Decimal codes for
Hex error codes
Added decimal codes for all hexadecimal error values.
OCSP Responder
errors
Added new OCSP Responder errors and changed the OCSP erorr
table to OCSP Responder errors.
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 1
C H A P T E R 1
Cha pte r 1 Error Codes and Messages
This document contains a complete list of OnSite and Processing Center error
codes, organized numerically by code, and grouped by error type where possible.
For information and clarity, certain processes are included and described in the list
of errors even when they are not specifically caused by the current Processing
Center (PC) version. These processes include Litle, autheq, and DNB processes;
equifax service; and FW and KRS servers.
Signing Server Errors
CODE # Signing Server Errors
Hex Decimal
0x0000 0 CKR_OK
Cause: Successful operation.
Action: No action needed.
0x0001 1 CKR_CANCEL
Cause: Signing server.
Action: Call VeriSign technical support.
0x0002 2 CKR_HOST_MEMORY
Cause: Host low on memory, or signingserver instance not running.
Action: Ensure system resources are sufficient to run the
signingserver. Check signingserver instance to make sure it is
running.
Error Codes and Messages
2 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x0003 3 CKR_SLOT_ID_INVALID
Cause: AutoAuth: the slot specified in vsautoauth.conf is invalid.
Signingserver: the slot specified in signingserver.conf is invalid.
Action: AutoAuth: modify vsautoauth.conf to set the slot parameter
with a valid slot number.
0x0070 112 CKR_MECHANISM_INVALID
Cause: Signingserver: the token or crystoki library does not support
the RSA Raw operation.
Action: Check the version of token or get the correct scystoki library.
0x00A0 160 CKR_PIN_INCORRECT
Cause: AutoAuth: the LUNA card is not initialized properly.
Signingserver: the share password activation is not correct.
Action: AutoAuth: return the LUNA card back to OnSite Support.
Signingserver: get the correct share password.
0x00B2 178 CKR_SESSION_EXCLUSIVE_EXISTS
Cause: Signingserver: some process is already using the token.
Action: Signingserver: check any process in the system that runs and
uses the token.
0x00B3 179 CKR_SESSION_HANDLE_INVALID
Cause: A valid session handle has become invalid.
Action: Ensure card is still connected to the machine (cables,
readers, and so on).
0x00B4 180 CKR_SESSION_PARALLEL_NOT_SUPPORTED
Cause: Signingserver: some process is already using the token.
Action: Signingserver: check any process in the system that runs and
uses the token.
0x00E0 224 CKR_TOKEN_NOT_PRESENT
Cause: AutoAuth: there is no LUNA card in the slot specified in
vsautoauth.conf.
Action: AutoAuth: insert the LUNA card into the slot specified in
vsautoauth.conf.
Signing Server Errors (Continued)
CODE # Signing Server Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 3
0x0102 258 CKR_USER_PIN_NOT_INITIALIZED
Cause: AutoAuth: the LUNA card is not initialized properly.
Action: AutoAuth: return the LUNA card back to OnSite Support.
0xffffffff -1 Cause: This error may occur when a signingserver client program,
such as the CM, attempts to connect to a signingserver instance
which is not running.
Action: Check Signingserver instance to make sure it is running.
Signing Server Errors (Continued)
CODE # Signing Server Errors
Hex Decimal
Processing Center 3.0: TIPEM Error Messages
Code #
TIPEM Errors
Hex Decimal
0x0100 256 TE_ALLOC
Cause: Insufficient memory.
Action: Check system resources.
0x0101 257 TE_ASN_SIGNATURE
Cause: Invalid signature on certificate CRL.
Action: The signature was either not calculated properly, or
data has changed.
0x0102 258 TE_ATTRIBUTES_OBJ
Cause: Invalid attributes object.
Action: An invalid attribute was encountered. Ensure attributes
were encoded correctly.
0x0103 259 TE_ATTRIBUTE_COUNT
Cause: Invalid number of values for the attribute type.
Action: Ensure attribute is encoded correctly.
Error Codes and Messages
4 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x0104 260 TE_ATTRIBUTE_NOT_FOUND
Cause: The requested attribute type is not in the attributes
object.
Action: Not necessarily an error. Ensure attribute being looked
for is in the Attribute object.
0x0105 261 TE_ATTRIBUTE_TAG
Cause: Invalid attribute value tag.
Action: An attribute tag was encountered that was unknown to
the system.
0x0106 262 TE_ATTRIBUTE_TYPE
Cause: Unknown attribute type.
Action: An attribute type was encountered that was unknown to
the system.
0x0107 263 TE_ATTRIBUTE_VALUE
Cause: Invalid attribute value.
Action: An attribute value was specified which does not
conform to the constraints of its attribute type.
0x0108 264 TE_ATTRIBUTE_VALUE_LEN
Cause: Distinguished name attribute value too long.
Action: Make sure user input is within defined bounds. Most
common occurrence of this error is if a Country attribute has a
length of more than 2 characters.
0x0109 265 TE_BEGIN_PEM
Cause: PEM CSR request has incorrect header.
Action: Make sure that the header is correctly pasted into the
CSR submit field.
Processing Center 3.0: TIPEM Error Messages (Continued)
Code #
TIPEM Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 5
0x010a 266 TE_BER_ENCODING
Cause: AutoAuth: if this error occurs after calling
VSAA_Encode*() functions, one of the certificates. specified in
vsautoauth.conf is invalid. If this error occurs after calling
VSAA_DecodeCertRep, the reply is not a BER encoded
CertRep. In most cases, this is the HTML response from the
Web server due to either invalid CGI, CGI abnormal
termination, CGI timed-out. Invalid format for BER encoding.
Action: AutoAuth: if this error occurs after calling
VSAA_Encode*() functions, ensure that certs. specified in
vsautoauth.conf are valid. If this error occurs after calling the
VSAA_DecodeCertRep() function, ensure that the
vsenroll_url sent in the request is valid.Ensure encoding of
blob is correct.
0x010b 267 TE_CANCEL
Cause: Operation was cancelled by the surrender function.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
0x010c 268 TE_CERT_CHAIN
Cause: Certificate chain cannot be validated because all the
certs. in the chain cannot be found in the repository.
Action: Use SQL query to make sure that all CA certs are
correctly loaded. Make sure the roots are correctly specified in
the product.config file. Verify that all roots are in
VS_ISSUERS_T.
0x010d 269 TE_CERT_ENCODING
Cause: Invalid certificate encoding.
Action: Ensure certificate is properly encoded. Also ensure
certificate state is correct.
0x010e 270 TE_CERT_OBJ
Cause: Invalid certificate object.
Action: Ensure certificate is properly encoded. Also ensure
certificate state is correct.
Processing Center 3.0: TIPEM Error Messages (Continued)
Code #
TIPEM Errors
Hex Decimal
Error Codes and Messages
6 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x010f 271 TE_CO_SET
Cause: Invalid CO set.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
0x0110 272 TE_CRL_ENCODING
Cause: Invalid CRL encoding.
Action: CRL encoding is incorrect.
0x0111 273 TE_CRL_OBJ
Cause: Invalid CRL object.
Action: CRL encoding is incorrect.
0x0112 274 TE_DATA
Cause: Problem found with data passed into the back end of
the system. In most cases, this is caused by user error.
Action: Check logs (Web server log, cm.log) to determine if
error is occurring with many different users or just one. If many
different users are experiencing the problem, notify VeriSign
technical support immediately.
0x0113 275 TE_DBASE
Cause: Database is not reachable.
Action: Check QM or DB_DM logs for more information.
0x0114 276 TE_DEK_ALG_NOT_SUPPORTED
Cause: Customer is sending CRS request encoded with an
unsupported algorithm.
Action: Use a supported algorithm as defined in the VeriSign
CRS profile document.
0x0115 277 TE_DEK_ALG_UNKNOWN
Cause: Customer is sending CRS request encoded with an
unsupported algorithm.
Action: Use a supported algorithm as defined in the VeriSign
CRS profile document.
Processing Center 3.0: TIPEM Error Messages (Continued)
Code #
TIPEM Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 7
0x0116 278 TE_DIGEST_OBJ
Cause: Invalid digest object.
Action: Internal DigestObject error.
0x0117 279 TE_ENHANCED_TEXT_STREAM
Cause: Fatal I/O error for enhanced text stream.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
0x0118 280 TE_EOS
Cause: End of stream.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
0x0119 281 TE_EXPONENT_EVEN
Cause: Even exponent not permitted in public or private key.
Action: An invalid key was received.
0x011a 282 TE_EXPONENT_LEN
Cause: Invalid exponent length in public or private key.
Action: An invalid key was received.
0x011b 283 TE_HARDWARE
Cause: This error applies to the BBN hardware unit only.
Action: Check BBN hardware and connections.
0x011c 284 TE_HEADER
Cause: Syntax error in TIPEM header fields.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
0x011d 285 TE_INDEX
Cause: Index out of range.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
Processing Center 3.0: TIPEM Error Messages (Continued)
Code #
TIPEM Errors
Hex Decimal
Error Codes and Messages
8 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x011e 286 TE_INPUT_LEN
Cause: Invalid length of input data.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
0x011f 287 TE_INPUT_STREAM
Cause: Fatal I/O error in input stream.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
0x0120 288 TE_IO
Cause: Fatal I/O error.
Action: Unable to connect to process or save/read file. Ensure
all processes are up and running (QM, CM, TM, DB_DM, and
so on).
0x0121 289 TE_LIST_OBJ
Cause: Invalid list object.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
0x0122 290 TE_MEMORY_OBJ
Cause: Invalid memory object.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
0x0123 291 TE_MESSAGE_SIGNATURE
Cause: Invalid signature on message.
Action: The signature of the message was either not calculated
properly, or data has changed.
0x0124 292 TE_ME_SET
Cause: Invalid ME set.
Action: Ensure product.cfg settings are correct.
Processing Center 3.0: TIPEM Error Messages (Continued)
Code #
TIPEM Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 9
0x0125 293 TE_MIC_ALG_NOT_SUPPORTED
Cause: CRS message encoded with an unsupported algorithm.
Action: Use a supported algorithm as defined in the VeriSign
CRS profile document.
0x0126 294 TE_MIC_ALG_UNKNOWN
Cause: CRS message encoded with an unknown algorithm.
Action: Use a supported algorithm as defined in the VeriSign
CRS profile document.
0x0127 295 TE_MODULUS_LEN
Cause: Invalid modulus length in public or private key.
Action: An invalid key was received.
0x0128 296 TE_NAME_OBJ
Cause: Invalid name object.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
0x0129 297 TE_NEED_RANDOM
Cause: Insufficient randomness in random object.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
Processing Center 3.0: TIPEM Error Messages (Continued)
Code #
TIPEM Errors
Hex Decimal
Error Codes and Messages
10 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x012a 298 TE_NOT_FOUND
Cause: AutoAuth: if this error occurs while calling
VSAA_Encode*() functions, the RA certificate specified in
vsautoauth.conf does not have a corresponding private key in
the LUNA card.
If this error occurs while calling the VSAA_DecodeCertRep()
function, either the AutoAdmin.509 or the RA certificate is
expired or does not exist in the target system. Cert. CRL or
other database values were not found.
Action: AutoAuth: if this error occurs while calling
VSAA_Encode*() functions, ensure that the RA certificate
specified in vsautoauth.conf is listed when running aakeygen
-dump. If this error occurs while calling the
VSAA_DecodeCertRep() function, ensure that both RA and
AutoAdmin certificates are not expired. Furthermore, ensure
that the production certs. should be used in the production
system, and test certs. should be used in the test system. Not
necessarily an error. A query for a certain database object was
not found.
0x012b 299 TE_NOT_ME
Cause: Recipients of incoming message not among potential
recipients.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
0x012c 300 TE_NOT_SUPPORTED
Cause: Unsupported operation requested.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
0x012d 301 TE_OUTPUT_LEN
Cause: Invalid length for output data.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
Processing Center 3.0: TIPEM Error Messages (Continued)
Code #
TIPEM Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 11
0x012e 302 TE_OUTPUT_STREAM
Cause: Invalid length of output data.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
0x012f 303 TE_OVER_32K
Cause: Data block exceeds 32,767 bytes.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
0x0130 304 TE_PARAMETER
Cause: Invalid parameter.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
0x0131 305 TE_PASSWORD
Cause: Invalid password for decrypting data.
Action: Ensure password entered is correct.
0x0132 306 TE_PBE_ALG_NOT_SUPPORTED
Cause: CRS message encoded with an unsupported algorithm.
Action: Use a supported algorithm as defined in the VeriSign
CRS profile document.
0x0133 307 TE_PBE_ALG_UNKNOWN
Cause: CRS message encoded with an unknown algorithm.
Action: Use a supported algorithm as defined in the VeriSign
CRS profile document.
0x0134 308 TE_PKCS_INPUT_STREAM
Cause: Fatal I/O interface error in PKCS input stream.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
Processing Center 3.0: TIPEM Error Messages (Continued)
Code #
TIPEM Errors
Hex Decimal
Error Codes and Messages
12 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x0135 309 TE_PKCS_OUTPUT_STREAM
Cause: Fatal I/O interface error in PKCS output stream.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
0x0136 310 TE_PKCS_STREAM
Cause: Fata I/O interface error in PKCS stream.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
0x0137 311 TE_PRIVATE_KEY
Cause: Invalid private key format.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
0x0138 312 TE_PROCESS
Cause: Invalid message process type.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
0x0139 313 TE_PROTECTED_DATA
Cause: Invalid encoding of protected data.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
0x013a 314 TE_PUBLIC_KEY
Cause: Invalid public key format.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
0x013b 315 TE_RANDOM_OBJ
Cause: Invalid random object.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
Processing Center 3.0: TIPEM Error Messages (Continued)
Code #
TIPEM Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 13
0x013c 316 TE_SIGNATURE_ALG_NOT_SUPPORTED
Cause: CRS message encoded with an unsupported algorithm.
Action: Use a supported algorithm as defined in the VeriSign
CRS profile document.
0x013d 317 TE_SIGNATURE_ALG_UNKNOWN
Cause: CRS message encoded with an unknown algorithm.
Action: Use a supported algorithm as defined in the VeriSign
CRS profile document.
0x013e 318 TE_TEXT_ENCODING
Cause: Invalid syntax in base64 encoding.
Action: Ensure base64 object is encoded correctly.
0x013f 319 TE_TEXT_STREAM
Cause: Fatal I/O interface error in text stream.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
0x0141 321 TE_VERSION
Cause: Invalid message version.
Action: PkCS#7 message version is not supported.
0x0142 322 TE_YOU_SET
Cause: Invalid You set.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
0x0143 323 TE_VALIDITY
Cause: Invalid certificate validity.
Action: Make sure that start validity is before expiration validity
time.
0x0144 324 TE_EXTENSIONS_OBJ
Cause: Invalid extensions object.
Action: Typically, should not see this error. Check log and
escalate to VeriSign technical support.
Processing Center 3.0: TIPEM Error Messages (Continued)
Code #
TIPEM Errors
Hex Decimal
Error Codes and Messages
14 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x0145 325 TE_INVALID_AUTHORITY_KEY_ID
Cause: Invalid AKI extension.
Action: Extension encoding is incorrect.
0x0146 326 TE_INVALID_KEY_USAGE
Cause: Invalid KeyUsage extension.
Action: Extension encoding is incorrect.
0x147 327 TE_INVALID_BASIC_CONSTRAINT
Cause: Invalid Basic Contraint Extension.
Action: Extension encoding is incorrect.
0x148 328 TE_INVALID_PRIVATE_KEY_USAGE
Cause: Invalid Private Key Usage Extension.
Action: Extension encoding is incorrect.
0x149 329 TE_INVALID_CERT_TYPE
Cause: Invalid certificate type extension.
Action: Extension encoding is incorrect.
0x14a 330 TE_INVALID_SUBJECT_ALT_NAME
Cause: Invalid Subject Alt Name extension.
Action: Extension encoding is incorrect.
0x14b 331 TE_INVALID_HASHED_ROOT_KEY
Cause: Invalid Hashed Root Key extension.
Action: Extension encoding is incorrect.
0x14c 332 TE_INVALID_TYPE
Cause: Invalid Type extension.
Action: Extension encoding is incorrect.
0x14d 333 TE_EMPTY_DER_OBJ
Cause: Empty DER object.
Action: Extension value is empty.
Processing Center 3.0: TIPEM Error Messages (Continued)
Code #
TIPEM Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 15
0x14e 334 TE_SET_STREAM
Cause: SET stream error.
Action: SET ONLY.
0x14f 335 TE_EXCEEDS_OAEP_SIZE
Cause: OAEP size to large.
Action: SET ONLY.
0x150 336 TE_INVALID_HP
Cause: N/A.
Action: SET ONLY.
0x151 337 TE_INVALID_HT
Cause: N/A.
Action: SET ONLY.
0x152 338 TE_BAD_ADB
Cause: N/A.
Action: SET ONLY.
0x153 339 TE_BAD_MESSAGE_TYPE
Cause: N/A.
Action: SET ONLY.
0x154 340 TE_BAD_CERT_TYPE
Cause: N/A.
Action: SET ONLY.
0x155 341 TE_AMBIGUOUS_CERTS
Cause: N/A.
Action: SET ONLY.
0x156 342 TE_DER_OBJ_ALREADY_SET
Cause: N/A.
Action: SET ONLY.
Processing Center 3.0: TIPEM Error Messages (Continued)
Code #
TIPEM Errors
Hex Decimal
Error Codes and Messages
16 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x157 343 TE_POLICY_information._NOT_FOUND
Cause: N/A.
Action: SET ONLY.
0x158 344 TE_POLICY_QUALIFIER_NOT_FOUND
Cause: N/A.
Action: SET ONLY.
0x159 345 TE_SECRETS_DONT_MATCH
Cause: N/A.
Action: SET ONLY.
0x15a 346 TE_BRAND_NAME_DONT_MATCH
Cause: N/A.
Action: SET ONLY.
0x15b 347 TE_THUMB_NOT_MATCH
Cause: N/A.
Action: SET ONLY.
Processing Center 3.0: TIPEM Error Messages (Continued)
Code #
TIPEM Errors
Hex Decimal
Processing Center 3.0: Certificate Management Errors
Code #
Certificate Management Errors
Hex Decimal
0x1005 4101 eCMS_OVERLAPPING_USER_CERT
Cause: User request for certificate has the exact same DN as an
existing certificate. This code is also returned by the monitoring test
when it succeeds.
Action: If the error is not generated by the monitoring test, revoke
existing certificate or ask user to enroll with different DN.
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 17
0x1013 4115 eCMS_INVALID_NUMBER
Cause: Invalid number in validity period field
Check product config for bad numbers (characters in validity period
field).
Processing Center 3.0: Certificate Management Errors (Continued)
Code #
Certificate Management Errors
Hex Decimal
PC 3.0: Frameworks Errors
Code #
Frameworks Errors
Hex Decimal
0x1100 4352 eINIT_SERVER_ERROR
Cause: FW reference un-initialized object.
Action: Contact VeriSign Technical support.
0x1102 4354 eOBJECT_INITIALIZ eD
Cause: FW object is initialized.
Action: Contact VeriSign Technical support.
0x1103 4355 eFW_PDFERROR
Cause: FW PDF config file error.
Action: Contact VeriSign Technical support.
0x1104 4356 eFW_MRTERROR
Cause: FW MRT config file error.
Action: Contact VeriSign Technical support.
0x1105 4357 eFW_PDF_MISSING_PORT_NUM
Cause: FW missing port number for server.
Action: Contact VeriSign Technical support.
0x1106 4358 eFW_CANT_FORK_CHILD
Cause: FW server can't fork child process.
Action: Contact VeriSign Technical support.
Error Codes and Messages
18 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x1107 4359 eFW_OPERATION_NOT_FOUND
Cause: FW operation is not defined for this server.
Action: Contact VeriSign Technical support.
0x1108 4360 eFW_INVALID_ROUTERERROR
Cause: FW router is invalid.
Action: Contact VeriSign Technical support.
0x1109 4361 eFW_OUT_OF_MEMORY
Cause: FW out of memory.
Action: Contact VeriSign Technical support.
0x110a 4362 eFW_NO_MESSAGE_DATA
Cause: FW message data not found or invalid.
Action: Contact VeriSign Technical support.
PC 3.0: Frameworks Errors
Code #
Frameworks Errors
Hex Decimal
Processing Center 3.0: General and Miscellaneous Errors
Code # General and Miscellaneous Errors
Hex Decimal
0x1b58 7000 eECAS_CLASS3_ENROLL_OKAY
Cause: Class 3 enrollment successful.
Action: No action needed.
0x1b59 7001 eECAS_TWOSTEP_ENROLL_OKAY
Cause: Two-step enrollment successful.
Action: No action needed.
0x3000 12288 eECAS_PIN_FLIST_ERROR
Cause: Database is not reachable.
Action: Check DB_DM logs for errors.
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 19
0x3001 12289 eECAS_PIN_CREATE_ACCOUNT_FAILED
Cause: Cannot create account because of database error or bad
user input.
Action: Check DB_DM logs for errors.
0x3002 12290 eECAS_PIN_BILLING_FAILED
Cause: Product incorrectly defined in vsprice.
Action: Internal error. Send vsprice list to VeriSign technical
support for diagnosis.
0x3006 12294 eECAS_PIN_CREATE_SERVICE_FAILED
Cause: Database is not reachable, or database insertion operation
failed.
Action: Check DB_DM logs for errors.
0x3022 12339 eECAS_AUTHORITY_NA
Cause: Failed to sign certificate.
Action: Check signingserver log.
0x3033 12339 eECAS_DEFER_SIGNING_FAILED
Failed to sign certificate.
0x3034 12340 eECAS_DEFER_SIGNING_FAILED
Cause: Database operation failed.
Action: Check DB_DM.pinlog or Oracle for errors.
0x3037 12343 eECAS_UPDATE_ACCT_INFO_FAILED
Cause: A bad CC expiration was given.
Action: Validate the payment information.
Processing Center 3.0: General and Miscellaneous Errors (Continued)
Code # General and Miscellaneous Errors
Hex Decimal
Error Codes and Messages
20 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
PC 3.0: Lifecycle Errors
Code #
Lifecycle Errors
Hex Decimal
0x3300 13056 eECAS_RENEW_PARENT_NOT_IN_RENEWAL_PERIOD
Cause: Internal error.
Action: Call VeriSign technical support.
0x3301 13057 eECAS_RENEW_PARENT_CERT_INVALID
Cause: Internal error.
Action: Call VeriSign technical support.
0x3302 13058 eECAS_RENEW_PARENT_PARENT_CERT_REVOKED
Cause: Internal error.
Action: Call VeriSign Technical support.
0x3303 13059 eECAS_RENEW_PARENT_SUBJECT_DN_DOES_NOT_MATCH
Cause: Internal error.
Action: Call VeriSign Technical support.
0x3304 13060 eECAS_REPLACE_PARENT_CERT_INVALID
Cause: Internal error.
Action: Call VeriSign Technical support.
0x3305 13061 eECAS_REPLACE_PARENT_CERT_EXPIRED
Cause: Internal error.
Action: Call VeriSign Technical support.
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 21
Product Configuration File Related Errors
Code # Product Configuration File Related Errors
Hex Decimal
0x3041 12353 eECAS_PRODUCT_NOT_FOUND
Cause:eECAS_PRODUCT_NOT_FOUND
Action: Make sure that the input to product entry mapping is correct,
and that the correct product.cfg file was used
0x3042 12354 eECAS_PRODUCT_CFG_NOT_FOUND
Cause: Product.cfg file is not installed correctly.
Action: Make sure that the requested product.cfg file is in the
$ECASINSTALL/data/product_config directory.
0x3043 12355 eECAS_BAD_EXPIRATION_DATE
Cause: Expiration date in the product.cfg entry is of a bad format, or
malformed product.cfg file. This can also occur during the Automated
Administrator installation procedure when the program tries to
override the default validity of the product, or when anyone who has
access to a name/value pair puts a bad (a past date or a date too far in
the future) value. The hard coded value which would be good for the
present can become bad when the date is reached.
Action: Verify product.cfg file. Send file to VeriSign for diagnosis.
0x3044 12356 eECAS_UNKNOWN_DELIVERY_FORMAT
Cause: Malformed product.cfg file.
Action: Verify product.cfg file. Send file to VeriSign for diagnosis.
0x3045 12357 eECAS_UNKNOWN_EXTENSION_CONFIG
Cause: Malformed product.cfg file.
Action: Verify product.cfg file. Send file to VeriSign for diagnosis.
0x3046 12358 eECAS_UNKNOWN_EXTENSION_SUBSTITUTION
Cause: Malformed product.cfg file.
Action: Verify product.cfg file. Send file to VeriSign for diagnosis.
0x3047 12359 eECAS_UNKNOWN_PRODUCT_CONFIG_OPTION
Cause: Malformed product.cfg file.
Action: Verify product.cfg file. Send file to VeriSign for diagnosis.
Error Codes and Messages
22 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x3048 12360 eECAS_EXT_FORMAT_NOT_SUPPORTED
eECAS_EXT_FORMAT_NOT_SUPPORTED
Cause: Malformed product.cfg file.
Action: Verify product.cfg file. Send file to VeriSign for diagnosis.
0x3049 12361 eECAS_UNKNOWN_OID_PREFIX
Cause: Malformed product.cfg file.
Action: Verify product.cfg file. Send file to VeriSign for diagnosis.
0x304a 12362 eECAS_CA_EXTENSION_IN_CONFIG
Cause: Malformed product.cfg file.
Action: Verify product.cfg file. Send file to VeriSign for diagnosis.
0x304b 12363 eECAS_READ_FILE_FAILED
Cause: Email template file is missing or failed to open cert. extension
file which is defined in product.cfg file. Or failed to open signing robo
data file.
Action: Verify that the email template file referred to by the product.cfg
entry is correctly installed in $ECASINSTALL/data/mail on the
back-end machine.
0x304c 12364 eECAS_UNKNOWN_MSG_SUBSTITUTION
Cause: Malformed email template.
Action: Verify email template file. Send file to VeriSign for diagnosis.
0x304d 12365 eECAS_SUBSTITUTE_ARG_MISMATCH
Cause: Malformed email template.
Action: Malformed email template.
0x304e 12366 eECAS_BAD_PERM_VERIFY
Cause: End-user input incorrect PIN to retrieve certificate.
Action: Ask user to input correct PIN. Re-send PIN if necessary using
the Control Center or Admin Manager.
Product Configuration File Related Errors (Continued)
Code # Product Configuration File Related Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 23
0x3050 12368 eECAS_BAD_PINCONF_FILE
Cause: Bad or missing cm.conf file.
Action: Verify that *.conf files are correctly installed in the.../config
directory, or send *conf files to VeriSign for diagnosis.
0x3060 12384 eECAS_ERROR_CERT_WAS_REVOKED
Cause: Trying to revoke/re-issue a revoked certificate.
Action: Pick the correct certificate to revoke/re-issue.Cause: Trying to
revoke/re-issue a revoked certificate.
0x3061 12385 eECAS_ERROR_CERT_WAS_REJECTED
Cause: Trying to renew/replace a revoked certificate.
Action: Pick the correct certificate to renew/replace.
0x3062 12386 eECAS_ERROR_CERT_IS_PENDING
Cause: Trying to revoke/re-issue a pending certificate.
Action: Pick the correct certificate to revoke/re-issue, or have
customer pick up the certificate first, then revoke it.
0x3063 12387 eECAS_GET_CERT_NOT_ALLOWED
Cause: Trying to issue a certificate that is not valid. Could happen if
the Administrator tries to pick up a revoked/non-issued certificate.
Action: Tell the customer to use the correct PIN to pick up the
certificate.
0x3069 12393 eECAS_CHALLENGE_MISMATCH
Cause: Challenge phrase used for the replace or revoke operation is
incorrect.
Action: Ask user to supply correct challenge phrase.
0x306c 12396 eECAS_SERVICE_POID_REQUIRED
Cause: Minimum process ID values in your database are too low.
Action: The POID sequence should start at 10000000. You have to
backup your database and run an SQL script to reset the numbers.
Contact technical support if you require further assistance. Check the
CM log to see if the operation is of a Renewal type.
Product Configuration File Related Errors (Continued)
Code # Product Configuration File Related Errors
Hex Decimal
Error Codes and Messages
24 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x306d 12397 eECAS_BAD_OBJECTS
Cause: Internal error.
Action: Look in cm.log for more details
Product Configuration File Related Errors (Continued)
Code # Product Configuration File Related Errors
Hex Decimal
Product Configuration File Related Errors
Code #
Product Configuration File Related Errors
Hex Decimal
0x3073 12403 eECAS_DISPLAY_STATUS_ISSUED
Cause: Success code.
Action: Not an error.
0x3074 12404 eECAS_DISPLAY_STATUS_REVOKED
Cause: Success code.
Action: Not an error.
0x3075 12405 eECAS_DISPLAY_STATUS_REJECTED
Cause: Success code.
Action: Not an error.
0x3076 12406 eECAS_DISPLAY_STATUS_PENDING
Cause: Success code.
Action: Not an error.
0x3077 12407 eECAS_UPDATE_STATUS_FAILED
Cause: Writing comment entry for a particular account failed.
Action: Look in cm.log for details. Call VeriSign technical support.
0x3078 12408 eECAS_UPDATE_STATUS
Cause: Updating an account status failed. Internal error
Action: Look in cm.log for details. Contact VeriSign technical support.
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 25
0x3079 12409 eECAS_REVOKE_CERT_NOT_FOUND
Cause: The certificate targeted for revocation cant be found.
Action: Send cm.log to VeriSign Technical Support.
0x307a 12410 eECAS_REVOKE_INVALID_PASSWORD
Cause: End-user has supplied invalid password for the revoke
operation
Action: User needs to supply correct password
0x307b 12411 eECAS_REVOKE_UNKNOWN_REASON_CODE
Cause: The reason code specified for the revocation operation is not
a valid one. This is most likely an internal coding error.
Action: Send cm.log to VeriSign Technical Support.
0x307c 12412 eECAS_REVOKE_MISSING_PARAMETER
Cause: This could be due to either the password or the revocation
reason missing in the input.
Action: User needs to supply all information requested on the
revocation lifecycle page.
0x307d 12413 eECAS_DISPLAY_STATUS_MESSAGE
Cause: Success code.
Action: Not an error.
0x307e 12414 eECAS_APPROVE_CERT_SUCCESS
Cause: Success code.
Action: Not an error.
0x307f 12415 eECAS_REVOKE_OK
Cause: Success code.
Action: Not an error.
0x3080 12416 eECAS_REJECT_CERT_SUCCESS
Cause: Success code.
Action: Not an error.
Product Configuration File Related Errors (Continued)
Code #
Product Configuration File Related Errors
Hex Decimal
Error Codes and Messages
26 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x3081 12417 eECAS_DISPLAY_CUSTOMIZE_information.
Cause: Internal error.
Action: Call VeriSign technical support.
0x3082 12418 eECAS_DISPLAY_STATUS_ZERO
Cause: Internal error.
Action: Call VeriSign technical support.
0x3083 12419 eECAS_ONLINE_STATUS_OK
Cause: Internal error.
Action: Call VeriSign technical support.
0x3084 12420 eECAS_CERT_JURISDICTION_MISMATCH
Cause: In Automated Administration, customer used RA Admin
certificate from one account to sign a CRS for a different account. The
jurisdiction of the subscriber certificate is different from that of the
administrators certificate.
Action: Call VeriSign technical support.
0x3085 12421 eECAS_CERT_INSUFFICIENT_PRIVS
Cause: Administrator does not have sufficient privileges to perform
this operation.
Action: Ask Enterprise security officer to provide additional privileges.
0x3086 12422 eECAS_CERT_NOT_VALID
Cause: Administrator certificate presented is expired or revoked. It is
also caused if the application that's sending the request has
misspelled the Company/Organization and Department/Organization
Unit name value pairs or if a third party application has requested that
a user enter the jurisdiction name. It can also occur during the Auto
Admin set up.
Action: Ask user to apply for new certificate.
0x3087 12423 eECAS_LRA_MISSING_JURISDICTION
Cause: he domain jurisdiction hash required for the admin operation
is not found.
Action: Verify that the Control Center web server is set up to require
Client-Authentication.
Product Configuration File Related Errors (Continued)
Code #
Product Configuration File Related Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 27
0x3088 12424 eECAS_LRA_MISSING_PRIVILEGES
Cause: The privileges requires for the admin operation cant be found.
Action: Verify that the Control Center web server is set up to require
Client-Authentication.
0x308a 12426 eECAS_INVALID_PURCHASE_QUANTITY
Cause: Internal error. The certificate quantity for OnSite service
enrollment is not valid.
Action: Check product.cfg.onsite to make sure that purchase
quantity is a valid number.
0x308b 12427 eECAS_UPDATECRL_OK
Cause: Success code.
Action: Not an error.
0x3090 12432 eECAS_REISSUE_OK
Cause: Success code.
Action: Not an error.
0x3096 12438 eECAS_REISSUE_NOT_ALLOWED
Cause: Cant reissue non-class3 certs. Internal error.
Action: Contact VeriSign Technical Support with cm.log.
0x3097 12439 eECAS_REISSUE_GET_CUSTOMER_information._FAILED
Cause: Internal error.
Action: Contact VeriSign technical support.
0x3098 12440 eECAS_WRITE_FILE_FAILED
Cause: The file being updated is not writable or the directory where
the file goes does not exist.
Action: Look in cm.log for more diagnostic information.
0x3099 12441 eECAS_INPUT_EMPTY
Cause: Internal error.
Action: Call VeriSign technical support.
Product Configuration File Related Errors (Continued)
Code #
Product Configuration File Related Errors
Hex Decimal
Error Codes and Messages
28 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x309a 12442 eECAS_NOT_ON_AUTO_VERIFY_THE_LIST
Cause: Internal error.
Action: Contact VeriSign technical support.
0x309b 12443 eECAS_MISSING_AUTO_VERIFY_FILE_ERROR
Cause: Internal error.
Action: Contact VeriSign technical support.
0x309c 12444 eECAS_AUTO_VERIFY_PRODUCT_CFG_ERROR
Cause: Internal error.
Action: Contact VeriSign technical support.
0x30a2 12450 eECAS_MISSING_AUTO_VERIFY_ENTRY_ERROR
Cause: Internal error.
Action: Contact VeriSign technical support.
0x30a3 12451 eECAS_ARG_MISSING
Cause: Required parameters for a transaction is not supplied.
Action: Turn on argument debugging by setting the environment
variable ECAS_ARG_DEBUG, restart the cm process, and look in the
cm.log file for output.
0x30a4 12452 eECAS_SUBJECT_VALIDITY_PAST_ISSUER
Cause: This error is caused by one of the following situations:
- The validity period requested for a cert exceeds the validity period
of the issuing cert.
- The missing cert was not found in the database.
Action: Depending on the cause of the error, use one of the following
actions:
- Renew issuing cert with a longer validity period.
- Find the cert and insert it into the database.
Product Configuration File Related Errors (Continued)
Code #
Product Configuration File Related Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 29
0x30a5 12453 eECAS_UPDATE_ONSITE_USER_CONFIG_FAILED
Cause: Unable to generate OnSite customer lifecycle pages.
Action: Verify that there is enough disk space, and the target
(installation) directory has the correct permission. Look in com.log,
beamupEnrl.log, beamdown.log for more details.
0x30a7 12455 eECAS_OUT_OF_MEMORY
Cause: Internal error.
Action: Add more memory.
0x30a8 12456 eECAS_UPDATE_ONSITE_USER_ENROLL_DIR_NAME_FAILED
Cause: This error may occur when creating jurisdiction information for
an OnSite account. Most likely an internal error.
Action: Call VeriSign technical support.
0x30aa 12458 eECAS_NO_MORE_CERTS
Cause: The OnSite customer has exceeded the number of certificates
purchased.
Action: Inform customer to purchase more certificates.
0x30ab 12459 eECAS_CERT_ALREADY_APPROVED
Cause: The administrator attempted to approve a certificate request
that has already been approved by another administrator.
Action: Refresh Control Center to avoid stale records.
0x30ac 12460 eECAS_MISSING_BBN_SERVER_TYPE_ENTRY_IN_CM_CONF
Cause: Internal error.
Action: Contact VeriSign technical support.
Product Configuration File Related Errors (Continued)
Code #
Product Configuration File Related Errors
Hex Decimal
Error Codes and Messages
30 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
Web Verification Errors
Code #
Web Verification Errors
Hex Decimal
0x30ad 12461 eECAS_WEB_VERIFY_PIN_FAILED
Cause: Internal error. Invalid PIN number. Check the PIN.
Action: Contact VeriSign technical support.
0x30ae 12462 eECAS_WEB_VERIFY_COMMON_NAME_FAILED
Cause: Internal error.
Action: Contact VeriSign technical support.
0x30af 12463 eECAS_WEB_VERIFY_ZIP_CODE_FAILED
Cause: Internal error.
Action: Contact VeriSign technical support.
0x30b0 12464 eECAS_WEB_VERIFY_PHONE_FAILED
Cause: Internal error.
Action: Contact VeriSign technical support.
0x30b1 12465 eECAS_WEB_VERIFY_EMAIL_FAILED
Cause: Internal error.
Action: Contact VeriSign technical support.
0x30b2 12466 eECAS_WEB_VERIFY_TECH_LAST_FAILED
Cause: Internal error.
Action: Contact VeriSign technical support.
0x30b3 12467 eECAS_WEB_VERIFY_TECH_EMAIL_FAILED
Cause: Internal error.
Action: Contact VeriSign technical support.
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 31
General and Miscellaneous Errors
Code #
General and Miscellaneous Errors
Hex Decimal
0x30b4 12468 eECAS_MULTIPLE_ROOTS_PER_JURISDICTION_NOT_ALLO
WED
Cause: The jurisdiction already exists. The company and
department pair the customer is trying to enroll for is already
being used by others.
Action: Ask customers to re-enroll with different company or
department name.
0x30b5 12469 eECAS_CERT_ALREADY_REJECTED
Cause: Admin tried to reject an already rejected cert.
Action: Refresh Control Center to avoid state records.
LDAP Directory for OnSite Errors
Code #
LDAP Directory for OnSite Errors
Hex Decimal
0x30b8 12472 eECAS_UPDATE_LDAP_PARMS_FAILED
Cause: Failed to update ldap/report parameters in the database or
ldif/report beaming failed.
Action: Check database connectivity and beaming process.
0x30b9 12473 eECAS_UPDATED_LDAP_PARMS
Cause: Successful condition.
Action: No action is required.
0x30ba 12474 eECAS_GET_DIRECTORY_FILE
No report file available.
0x30bb 12475 eECAS_SAVE_DIRECTORY_FILE
Cause: Successful condition.
Action: No action is required.
Error Codes and Messages
32 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x30bc 12476 eECAS_NO_LDIF_TO_DOWNLOAD
Cause: No ldif/report/crl files in Control Center.
Action: Check beaming process.
LDAP Directory for OnSite Errors (Continued)
Code #
LDAP Directory for OnSite Errors
Hex Decimal
Send Mail Message Errors
Code #
Send Mail Message Errors
Hex Decimal
0x30bd 12477 eECAS_SEND_MAIL_MESSAGE_FAILED
Cause: Malformed email template.
Action: Verify email template file. Send file to VeriSign for diagnosis.
0x30be 12478 eECAS_SENT_MAIL_MESSAGE
Cause: Successful notification.
Action: No action required.
OnSite Multiple Administration Errors
Code #
Onsite Multiple Administration Errors
Hex Decimal
0x30bf 12479 eECAS_ONSITE_ROOT_ACCOUNT_NOT_FOUND
Cause: User attempted to enroll for additional administrator
certificate with incorrect company or dept. name.
Action: Verify users company and dept. to make sure that it is an
existing OnSite account.
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 33
Signing Server Errors
Code #
Signing Server Errors
Hex Decimal
0x30c0 12480 eECAS_ISSUER_NAME_NOT_FOUND
Cause: Signing server was asked to sign data using an issuer
whose name it did not recognize.
Action: Make sure signing server is properly configured; restart
server. If this is a private or ceremony account, check the
signingserver field in the product configuration file on the
Processing Center application server.
0x30c1 12481 eECAS_SIGNING_SERVER_ERROR
Cause: Internal error.
Action: Look in signing server log for more details.
0x30c2 12482 eECAS_PRODUCT_CONFIG_FILE_SPECIFIED_NOT_FOUND
Cause: The product.cfg file specified in an HTML template file or an
FDF file is incorrect.
Action: Verify that the product.cfg file specified in HTML page or an
FDF file is present in the $ECASINSTALL/data/product_config
directory.
OnSite Multiple Administration Errors
Code #
OnSite Multiple Administration Errors
0x30c3 12483 eECAS_OSADMIN_ACCT_NOT_FOUND
Cause: User attempted to enroll for additional administrator
certificate with incorrect company or dept. name.
Action: Verify users company and dept. to make sure that it is an
existing OnSite account.
Error Codes and Messages
34 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
Signing Server Errors
Code #
Signing Server Errors
0x30c4 12484 eECAS_SIGNING_SERVER_MISSING_CONF_FILE
Cause: Signing server couldnt find the file.
Action: Make sure the signing server directory contains a valid
configuration file or a soft link to one.
0x30c5 12485 eECAS_DOMAIN_MISMATCH
Cause: Server OnSite user submitted a CSR with a domain name
that does not belong to his OnSite account.
Action: Change domain name in CSR.
OnSite Local Hosting Errors
Code #
OnSite Local Hosting Errors
Hex Decimal
0x1b59 7001 Cause: Local Hosting is not enabled.
Action: Enable Local hosting.
0x30c6 12486 eECAS_ONSITE_LOCALHOSTING_BEAMUP_FAILED
Cause: Transporting the local hosting kit to the Web server failed.
Action: Check beamuplh.log and beamdown.log for more
information.
0x30c7 12487 eECAS_ONSITE_LOCALHOSTING_BEAMUP_SUCCESS
Cause: Successful transport.
Action: No action required.
0x30c8 12488 eECAS_SIGNING_SERVER_INSTANCE_ERROR
Cause: Signing server error.
Action: Check cm.log and signingserver logs for more information.
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 35
PTA Errors
Error Code Error Name Description
0x80001001 E_INITIALIZED
The PTA is already initialized. This is an error in
the Web application.
0x80001002 E_EMPTYARGS The parameters supplied to the PTA were
empty. This is an error in the Web application.
0x80001003 E_INVALIDARGS The parameters supplied to the PTA were
invalid. This is an error in the Web application.
Contact the application vendor/administrator.
0x80001006 E_NOTINITIALIZED The PTA is not initialized. This is an error in the
Web application. Contact the application ven-
dor/administrator.
0x80001009 E_CAPIMODEONLY This functionality is supported in CAPI mode
only. This is an error in the Web application. Con-
tact the application vendor/administrator.
0x80001021 E_IDNOTSELECTED An id has not been selected.This is an error in the
Web application. Contact the application ven-
dor/administrator.
0x80001023 E_CANNOTLOADMSCAPI MS Capi version 2.0 could not be loaded. You
need to upgrade the version of IE on your
machine to 4.0+
0x8000102B E_PROFDOESNOTEXIST The specified profile does not exist. Specify a dif-
ferent profile name.
0x8000102D E_PROFEXISTS The specified profile already exists. Specify a dif-
ferent profile name.
0x8000102F E_CARDALREADYOPEN A profile is already open. This is an error in the
Web application.
Contact the application vendor/administrator.
0x80001032 E_PROFCREATED A profile has been created.
0x80001067 E_USERCANCELLED The user cancelled the operation.
0x80001091 E_CERTNOTFOUND The certificate specified by the search criteria
was not found.
Error Codes and Messages
36 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x80001098 E_HTTPSREQD Https is required. This is an error in the Web
application. Contact the application ven-
dor/administrator.
0x8000109A E_ROAMING_START_SESS
ION_FAILED
Error occurred while initializing the roaming ser-
vice. Contact the administrator.
0x8000109B E_ROAMING_STORE_DATA
_FAILED
Error occurred while uploading data to the roam-
ing server. Contact the application ven-
dor/administrator.
0x8000109C E_ROAMING_UPDATE_FAI
LED
Error occurred while updating the data on the
roaming server. Contact the application ven-
dor/administrator.
0x8000109D E_ROAMING_RECDATA_FA
ILED
Error occurred trying to receive data. Contact the
application vendor/administrator.
0x8000109F E_INSTALLCERTWRONGPR
OFILE
The certificate is trying to be installed in a profile
that does not have private keys for that certifi-
cate. Open a different profile.
Error Code Error Name Description
PIN (or Token)-Based Enrollment Errors
Code #
PIN (or Token)-Based Enrollment Errors
Hex Decimal
0x30c9 12489 eCAS_PIN_ENROLLMENT_FAILED_GENERIC_INVALID
Cause: Generic masked error.
Action: Contact VeriSign technical support.
0x30ca 12490 eCAS_PIN_ENROLLMENT_FAILED_BAD_PIN
Cause: Incorrect token for current originator.
Action: Contact VeriSign technical support.
0x30cb 12491 eCAS_PIN_ENROLLMENT_FAILED_PINs_EXPIRED
Cause: Token has expired.
Action: Contact VeriSign technical support.
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 37
0x30cc 12492 eCAS_PIN_ENROLLMENT_FAILED_EXCEEDED_REDEMPTION_
COUNT
Cause: Redemption count has been exceeded.
Action: Contact VeriSign technical support.
0x30cd 12493 eCAS_PIN_ENROLLMENT_FAILED_ORDER_NOT_ENABLED
Cause: Order has been disabled or terminated.
Action: Contact VeriSign technical support.
0x30ce 12494 eCAS_PIN_ENROLLMENT_FAILED_INCORRECT_REDEEMER_I
D
Cause: Unexpected redeemer identification.
Action: Contact VeriSign technical support.
0x30cf 12495 eCAS_PIN_CONFIGURATION_FAILED_DUPLICATE_ORDER
Cause: Duplicate Order ID found.
Action: Contact VeriSign technical support.
0x30d0 12496 eCAS_PIN_CONFIGURATION_FAILED_ORDER_NOT_FOUND
Cause: Order ID not found.
Action: Contact VeriSign technical support.
0x30d1 12497 eCAS_PIN_CONFIGURATION_FAILED_ILLEGAL_OPERATION
Cause: Illegal operation or incorrect semantics.
Action: Contact VeriSign technical support.
0x30d2 12498 eCAS_INCONSISTENCE_ISSUER_SERIAL
Cause: Inconsistent issuer serial.
PIN (or Token)-Based Enrollment Errors (Continued)
Code #
PIN (or Token)-Based Enrollment Errors
Hex Decimal
Error Codes and Messages
38 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
Enrollment Status Errors
Code #
Enrollment Status Errors
Hex Decimal
0x30d3 12499 eECAS_CERT_ISSUING
Action: Contact VeriSign technical support.
PIN (or Token)-Based Enrollment Errors
Code #
PIN (or Token)-Based Enrollment Errors
Hex Decimal
0x30d4 12500 eCAS_PIN_CONFIGURATION_FAILED_FILE_NOT_FOUND_OR_
BAD
Cause: Configuration failed- file not found or bad.
Action: Contact VeriSign technical support.
Client Authentication Errors
Code #
Client Authentication Errors
Hex Decimal
0x30d5 12501 eECAS_CLIENT_AUTH_REVOKE_ISSUER_SERIAL_NOT
_MATCH
Cause: Revocation issuer serial mismatch.
Action: Contact VeriSign technical support.
0x30d6 12502 eECAS_CLIENT_AUTH_ISSUER_SERIAL_NOT_MATCH
Cause: Issuer serial mismatch.
Action: Contact VeriSign technical support.
0x30d7 12503 eECAS_CLIENT_AUTH_BAD_ISSUER_SERIAL
Cause: Multiple certificates found by one issuer serial.
Action: Contact VeriSign technical support.
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 39
0x30d8 12504 eECAS_CLIENT_AUTH_CERT_NOT_IN_DB
Cause: Certificate not found in database.
Action: Contact VeriSign technical support.
Client Authentication Errors (Continued)
Code #
Client Authentication Errors
Hex Decimal
Bootstrapping Errors
Code #
Bootstrapping Errors
Hex Decimal
0x30df 12511 eECAS_BOOTSTRAP_ERROR
Cause: Error during bootstrapping of a Processing Center
installation.
Action: Check cm.log for more information.
Class 3 Instant Issue Errors
Code #
Class 3 Instant Issue Errors
Hex Decimal
0x30e0 12512 eECAS_INSTANT_MISSING_ORIGINAL_ISSUER_DIGEST
Cause: Missing original issuer digest.
Action: Check html/fdf enrollment pages.
0x30e1 12513 eECAS_INSTANT_MISSING_PARENT_ISSUER_DIGEST
Cause: Missing parent issuer digest.
Action: Check html/fdf enrollment pages.
0x30e2 12514 eECAS_INSTANT_PARENT_CERT_NOT_ISSUE_YET
Cause: Parent cert. not issued yet.
Action: Instant issue rule.
Error Codes and Messages
40 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x30e3 12515 eECAS_INSTANT_PARENT_CERT_NOT_VALID
Cause: Parent cert. not valid.
Action: Instant issue rule.
0x30e4 12516 eECAS_INSTANT_PARENT_CERT_NOT_START_VALID_YET
Cause: Parent cert. not valid.
Action: Instant issue rule.
0x30e5 12517 eECAS_INSTANT_INVALID_PAYMENT_TYPE
Cause: Instant issue can only be paid by credit card.
Action: Instant issue rule.
0x30e6 12518 eECAS_INSTANT_ISSUE_ALLOWED_EXCEEDED
Cause: Instant issue exceeded the number defined in the
product.cfg file.
Action: Check product.cfg file for definition of instant issue
allowed and check the cm/casper log for detail information.
0x30e7 12519 eECAS_INSTANT_UNKNOWN_RULE_IN_PRODUCT_CFG
Cause: Not a valid instant issue rule defined in product.cfg file.
Action: Check product.cfg file for the definition of instant issue
rule.
0x30e8 12520 eECAS_INSTANT_DN_NOT_MATCH
Cause: Cert. DN does not match when doing an instant issue
replacement.
Action: Instant issue rule.
0x30e9 12521 eECAS_INSTANT_O_NOT_MATCH
Cause: Cert. organization does not match when doing an instant
issue.
Action: Instant issue rule.
0x30ea 12522 eECAS_INSTANT_INVALID_ADDITIONAL_CN
Cause: Cert. DN does not match when doing an instant issue
additional.
Action: Instant issue rule.
Class 3 Instant Issue Errors (Continued)
Code #
Class 3 Instant Issue Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 41
0x30eb 12523 eECAS_ADDITIONAL_FROM_ADDITIONAL
Cause: Cannot issue instant additional from additional.
Action: Instant issue rule.
0x30ed 12525 eECAS_INSTANT_ORG_CONTACT_NOT_MATCH
Cause: Organization contact information does not match when
doing an instant issue replacement.
Action: Instant issue rule.
Class 3 Instant Issue Errors (Continued)
Code #
Class 3 Instant Issue Errors
Hex Decimal
Enrollment Payment Errors
Code #
Enrollment Payment Errors
Hex Decimal
0x30f0 12528 eECAS_UNKNOWN_PAYMENT_TYPE
Cause: Unknown payment type.
Action: Check cm or casper log for payment type.
Robo Internic Errors
Code #
Robo Internic Errors
Hex Decimal
0x30f1 12529 eECAS_DOMAIN_SERVICE_FAILURE
Cause: Internal error.
Action: Contact VeriSign technical support.
0x30f2 12530 eECAS_INVALID_COMMON_NAME
Cause: Internal error.
Action: Contact VeriSign technical support.
Error Codes and Messages
42 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x30f3 12531 eECAS_INVALID_DOMAIN_NAME
Cause: Internal error.
Action: Contact VeriSign technical support.
Robo Internic Errors (Continued)
Code #
Robo Internic Errors
Hex Decimal
E-mail Template Format Error
Code #
E-mail Template Format Error
Hex Decimal
0x30f4 12532 eECAS_EMAIL_TEMPLATE_BAD_FORMAT
Cause: The Email template has a bad header format.
Action: Visually inspect the email template and make sure that
the number of substitution arguments specified in the header
actually appear (as%s) in the body of the template. You may
want to look at cm.log for more details.
0x30f5 12533 eECAS_EMAIL_TEMPLATE_BAD_ARG
Cause: Invalid substitution argument in the email template
header.
Action: Verify that the substitution arguments specified in the
header are correct.
OnSite Errors
Code #
OnSite Errors
Hex Decimal
0x3100 12544 eECAS_NOT_ASSIGNED_TO_YOU
Cause: OnSite administrator attempted to approve or reject a
request assigned to another administrator.
Action: Ask admin to approve or reject, or assign to self then
approve or reject.
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 43
0x3101 12545 eECAS_ILLEGAL_ROLE_OPERATION
Cause: An OnSite admin is trying to perform an operation that is
not allowed for the admin roles assigned to the admin.
Action: Ask the Security Admin to assign appropriate roles to the
admin or have the admin with appropriate roles perform the
operation.
OnSite Errors (Continued)
Code #
OnSite Errors
Hex Decimal
OnSite (Email Wizard) Errors
Code #
OnSite (Email Wizard) Errors
Hex Decimal
0x3102 12546 eECAS_ONSITE_EMAILWIZARD_MISSING_ARGUMENT
Cause: User did not supply the $$ variable when customizing the
email message.
Action: Go back to the customize-email page and check the
instruction on what variable(s) is mandatory.
0x3103 12547 eECAS_ONSITE_EMAILWIZARD_INVALID_ARGUMENT
Cause: User supplied an invalid $$ variable when customizing
the email message.
Action: Go back to the customize-email page and check the
instruction on what variable(s) is valid.
0x3104 12548 eECAS_ONSITE_EMAILWIZARD_SUPPRESS_EMAIL
Cause: Indicates that the user selected email message
suppression.
Action: No action needed.
Error Codes and Messages
44 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
OnSite (Server) Errors
Code #
OnSite (Server) Errors
Hex Decimal
0x3105 12549 eECAS_ONSITE_COMPANY_MISMATCH
Cause: The Secure Server enrollment CSR contains
Organization value that does not match the Company name for
this OnSite account.
Action: Customer must create the CSR with the correct
Organization field.
0x3106 12550 eECAS_ONSITE_INVALID_COMMON_NAME
Cause: The Common name is not specified in the Server CSR.
Action: Ask the customer to include a Common Name in the
CSR.
0x3107 12551 eECAS_ONSITE_DUPLICATE_PURCHASE_REQUEST
Cause: Internal error.
Action: Contact VeriSign Technical Support.
0x3108 12552 eECAS_ONSITE_DUPLICATE_DOMAIN_NAME
Cause: Customer is trying to register for a domain thats already
registered for this Server OnSite account.
Action: Inform the customer that they have already registered
the domain.
OnSite Errors
Code #
OnSite Errors
Hex Decimal
0x3109 12553 eECAS_ADMIN_NOT_IN_RENEWAL_PERIOD
Cause: OnSite administrator attempted to renew his certificate.
Action: Contact VeriSign Technical Support.
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 45
0x310a 12554 eECAS_END_USER_RENEWAL_ONLY
Cause: Using one-step renewal, passed Admin. cert. while
renewing a user cert.
Action: Ask the customer to select the correct (end-user) cert. to
renew.
0x310b 12555 eECAS_ONSITE_SERVICE_EXPIRED
Cause: OnSite administrator attempted to use Control Center
after service has expired.
Action: Ask the customer to renew the service.
0x3112 12562 eECAS_INVALID_EXTENSION_REQ
Cause: The extension req extension contained in the client's
CSR does not meet requirements that any of the following can be
present at most once: subject alt name, key usage, and PGP
extension
Action: Contact customer to resubmit a correct CSR.
0x3113 12563 eECAS_ONSITE_GEN_POLICY_FAILED
Cause: Generation of the OnSite policy file failed.
Action: Check cm.log for further information.
0x3114 12564 eECAS_PKCS7_SENDER_CERT_EXPIRED
Cause: The client cert used by the customer to sign the CRS
request has expired.
Action: Contact customer to renew their RA cert. If it's an end
entity cert (self signed), then just ask the customers to generate
a new one themselves.
0x3115 12565 eECAS_PKCS7_CA_CERT_EXPIRED
Cause: The Auto Admin cert used by the customer to encrypt the
CRS request has expired.
Action: Contact customer to either obtain a new AA sitekit, or to
obtain a new Auto Admin cert and replace the old one in their
sitekit.
OnSite Errors (Continued)
Code #
OnSite Errors
Hex Decimal
Error Codes and Messages
46 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x3117 12567 eECAS_ENROLLMENT_MATCH_SET_NONEXISTANT
Cause: This will occur when an OnSite applicant tries to redeem
a cert with Passcode match values that are invalid (not created
by the admin)
Action: This is not a system error, and thus is not pagable. The
error code is used only to trigger a nice end-user error page.
0x3118 12568 eECAS_ENROLLMENT_MATCH_SET_LOCKED_OUT
Cause: This will occur when an OnSite applicant tries to redeem
a cert with valid Passcode match values but incorrect token
value too many times. Now the token is invalid
Action: This is not a system error, and thus is not pagable. The
error code is used only to trigger a nice end-user error page.
0x3119 12569 eECAS_ENROLLMENT_MATCH_SET_REDEEMED
Cause: This will occur when an OnSite applicant tries to redeem
a cert with valid Passcode match values and a valid token value,
but somebody has already used this match set and token to
redeem a certificate. The token and match set have been
redeemed already.
Action: This is not a system error, and thus is not pagable. The
error code is used only to trigger a nice end-user error page.
0x311b 12571 eECAS_CANNOT_SUSPEND_NON_VALID_CERT
Cause: Only a valid certificate can be suspended.
Action: Contact VeriSign technical support with cm.log.
0x311c 12572 eECAS_CANNOT_RESUME_NON_SUSP_CERT
Cause: Only a suspended certificate can be resumed.
Action: Contact VeriSign technical support.
OnSite Errors (Continued)
Code #
OnSite Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 47
Dual Control within ECAS for LRA Tools
Code #
Dual Control within ECAS for LRA Tools
Hex Decimal
0x3200 12800 eECAS_GET_AUTH_NAME_LIST_FAILED
Cause: The list of verification team members didnt get set up.
Action: Contact VeriSign technical support.
0x3201 12801 eECAS_GET_VERIFY_NAME_LIST_FAILED
Cause: The list of verification team members didnt get set up.
Action: Contact VeriSign technical support.
0x3202 12802 eECAS_ISSUER_NOT_IN_VERIFY_LIST
Cause: The admin who is trying to issue the cert is not a member
of verification team.
Action: User is either performing a task beyond his/her privilege
or contact your supervisor to add him/her to the verification
team.
0x3203 12803 eECAS_ISSUER_IS_IN_AUTH_LIST
Cause: The admin who is trying to issue the cert is not a member
of authentication team.
Action: User is either performing a task beyond his/her privilege
or contact your supervisor to add him/her to the authentication
team.
0x3204 12804 eECAS_AUTH_NAME_IN_VERIFY_LIST
Cause: The user is trying to perform authentication task, but
he/she belongs to the verification team.
Action: User is either performing a task beyond his/her privilege
or contact your supervisor to add him/her to the correct team.
Error Codes and Messages
48 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
Payflow Pro Errors
Code #
Payflow Pro Errors
Hex Decimal
0x3340 13120 eECAS_PAYFLOW_READ_CFG_ERR
Cause: Payflow client fails to read configuration file.
Action: Check file /ecas/public/config/payflow.conf.
0x3341 13121 eECAS_PAYFLOW_NETWORK_INIT_ERR
Cause: Payflow client network initialization error.
Action: Check network connection and proxy server. Run
/ecas/public/payflow/e2eMonitor/pingSignio.exe for further
information.
0x3342 13122 eECAS_PAYFLOW_NETWORK_ERR
Cause: Payflow service network error.
Action: Check /ecas/log/cm.log for further information or run
/ecas/public/payflow/e2eMonitor/pingSignio.exe.
0x3343 13123 eECAS_PAYFLOW_PROCESSING_ERR
Cause: Payment server processing error. Authorization failure.
Either bad credit or AVS failure.
Action: Skip it.
0x3344 13124 eECAS_PAYFLOW_GET_TRXINFO_ERR
Cause: Fail to retrieve credit card information from enrollment
request.
Action: Normally should not happen. If happened, we have to do
source debug.
0x3345 13125 eECAS_PAYFLOW_LOG_TRX_ERR
Cause: Fail to log payment transaction information into
database.
Action: Check qm process and log.
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 49
Utility Classes Errors
Code #
Utility Classes Errors
Hex Decimal
0x3a00 14848 eUTIL_ITEMTYPE_MISMATCH
Cause: Internal error.
Action: Check qm.llog or qm3.log for a query that was expected to return a
single result, but instead returned multiple results.
0x3a01 14849 eUTIL_NO_MEMORY
Cause: Internal error.
Action: Call VeriSign technical support.
0x3a02 14850 eUTIL_DICT_NOT_TABLE
Cause: Internal error.
Action: Call VeriSign technical support.
0x3a03 14851 eUTIL_LISTTEMPLATE_SYNTAX_ERROR
Cause: Internal error.
Action: Call VeriSign technical support.
0x3a04 14852 eUTIL_LISTTEMPLATE_PARSING_ERROR
Cause: Internal error.
Action: Call VeriSign technical support.
0x3a05 14853 eUTIL_NO_MORE_TOKENS
Cause: Internal error.
Action: Call VeriSign technical support.
0x3a06 14854 eUTIL_STATUS_FILE_NOT_FOUND
Cause: Internal error.
Action: Call VeriSign technical support.
0x3a07 14855 eUTIL_CAN_NOT_EXCEED_MAX_BITS
Cause: Internal error.
Action: Call VeriSign technical support.
Error Codes and Messages
50 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x3a08 14856 eUTIL_BAD_STATUS_DEFINITION
Cause: Internal error.
Action: Call VeriSign technical support.
0x3a09 14857 eUTIL_NULL_ENTRYLIST
Cause: Internal error.
Action: Call VeriSign technical support.
0x3a0a 14858 eUTIL_NULL_QUERY_TEMPLATE_NAME
Cause: A call was made to the Query Manager but a template name was
not specified
Action: Check qm.log or qm3.log for a query that generated this error.
0x3a0b 14859 eUTIL_MISSING_ALARM_CONFIG_FILE_ERROR
Cause: Internal error.
Action: Call VeriSign technical support.
0x3a0e 14862 eUTIL_DICT_ENTRY_NOT_FOUND
Cause: Internal error.
Action: Check qm.log or qm3.log for a query that did not return any data.
0x3a0f 14863 eUTIL_CANT_OPEN_FILE
Cause: Internal error.
Action: Call VeriSign technical support.
0x3a10 14864 eUTIL_INVALID_BASE64_FORMAT
Cause: Internal error.
Action: Call VeriSign technical support.
0x3a12 14866 eUTIL_DECODE_BASE64_INVALID_CHAR
Cause: There are some invalid characters in Base64 data block.
Action: Trhy to determine the characters in the Base64 data block,
regenerate the CSR and try resubmitting again.
Utility Classes Errors (Continued)
Code #
Utility Classes Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 51
Query Manager Errors
Code #
Query Manager Errors
Hex Decimal
0x4000 16384 eQM_NO_ERROR
Cause: Successful.
Action: No action required
0x4001 16385 eQM_NO_ERROR_PARTIAL_RESULTS
Cause: This error is not supported anymore.
Action: Contact VeriSign technical support.
0x4002 16386 eQM_INTERNAL_ERROR
Cause: QM cannot construct the name-value pair response.
Action: This error is most likely caused by a lack of a system resource
such as memory, or file handling. Check qm logs.
0x4020 16416 eQM_QUERY_TEMPLATE_NOT_SUPPLIED
Cause: There is no name-value pair template defined in the request.
Action: Check the client applications request.
0x4022 16418 eQM_OUT_OF_MEMORY
Cause: There is no more system memory for the QM.
Action: Check if there is any memory leak in any process, then restart that
process in order to reclaim the memory.
0x4023 16419 eQM_CONNREFUSED
Cause: Cannot connect to the QM. It can be caused by either one of the
following aspects:
- QM is down.
- QM host is down or unreachable.
- QM host and port in client configuration pin.conf is defined incorrectly.
-
Action: See Figure A-1 flow chart at the end of this list.
0x4024 16420 eQM_TIMEDOUT
Cause: Cannot send request to or read the response from the QM.
Action: Check the QM status. It can be hung or all the service threads are
running out.
Error Codes and Messages
52 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x4025 16421 eQM_NO_DATA_FOUND
Cause: There is no record matched with the WHERE clause in the SQL
template.
Action: Check your criteria of the fields in the WHERE clause in order to
make sure the error is correct.
0x4026 16422 eQM_UPDATE_NOT_ALLOW
Cause: The QM process was started to disallow update operations.
Action: Is update allowed in config file? If not allowed,
QM_UPDATEALLOW line will read 0 or be commented out. (qm3.log
should allow updates.)
0x4027 16423 eQM_UPDATE_EXCEED_LIMIT
Cause: The number records which are effected by the UPDATED SQL is
greater than the value QM UPDATEALLOW in the configuration.
Action: See Figure A-2 flow chart at the end of this list
Query Manager Errors (Continued)
Code #
Query Manager Errors
Hex Decimal
Front End Errors
Code #
Front End Errors
Hex Decimal
0x6000 24576 eCGI_ARGS_ERROR
Cause: CGI has received an unexpected input string. (For example,
unmatched name-value pairs.)
Action: Error page returned to ask for users correction.
0x6001 24577 eCGI_CREATEPIPE_FAILED
Cause: Cannot create socket. Typically a resource problem and should
not happen.
Action: Call VeriSign technical support.
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 53
0x6003 24579 eCGI_HOST_NOT_FOUND
Cause: Cannot find the host specified. Possible pin.conf missing or bad
configuration of pin.conf.
Action: Make sure pin.conf is under cgi-bin and has correct configuration.
0x6004 24580 eCGI_BROWSER_MISMATCH
Cause: User did not use the required browser.
0x6005 24581 eCGI_OUTPUT_FAILED
Cause: Read from socket failed. Server process might be dead or
hanging.
Action: Check back-end daemon processes.
0x6006 24582 eCGI_WRITE_FAILED
Cause: Write to socket failed. Typically, should not happen.
Action: Contact VeriSign.
0x6007 24583 eCGI_GENERIC_ERROR
Cause: A host is found but the connection to it cannot be created.
Typically, should not happen.
Action: Check network.
Front End Errors (Continued)
Code #
Front End Errors
Hex Decimal
Form Descriptor Errors
Code #
Front End Errors
Hex Decimal
0x6200 25088 NO_ENTRY_DESCRIPTORS
Cause: Fdf file has no entry in it.
Action: Check fdf file. Make sure there is at least one entry.
Error Codes and Messages
54 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x6201 25089 MISSING_NAME_DESCRIPTOR
Cause: Fdf error: the entry in fdf does not have a name.
Action: Specify a name.
0x6202 25090 MISSING_TYPE_DESCRIPTOR
Cause: Fdf error: the entry in fdf does not have a type.
Action: Specify a type.
0x6203 25091 UNKNOWN_TYPE_DESCRIPTOR
Cause: Fdf error: the entry does not have a known type.
Action: Use known type.
0x6204 25092 MISSING_REQUIREMENT_DESCRIPTOR
Cause: Fdf error: no requirement is given to an entry.
Action: Specify requirement.
0x6205 25093 UNKNOWN_REQUIREMENT_DESCRIPTOR
Cause: Fdf error: requirement is not recognized.
Action: Must give MANDATORY or OPTIONAL.
0x6206 25094 MISSING_DEPENDENCY_DESCRIPTOR
Cause: Fdf error: dependency is missing.
Action: Must give a dependency entry name or NONE.
0x6207 25095 MISSING_CONTROL_DESCRIPTOR
Cause: Fdf error: no control is given.
Action: Must give a control or NONE.
0x6208 25096 MISSING_CONTROL_VALUES
Cause: Fdf error: a control given does not have a control value.
Action: Must give a control value. For example, name=4.
0x6209 25097 MISSING_CODE_DESCRIPTOR
Cause: Fdf error: a status entry does not have status code.
Action: Check to make sure status code is there.
Form Descriptor Errors (Continued)
Code #
Front End Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 55
0x620A 25098 MISSING_VALUE_DESCRIPTOR
Cause: Fdf error: a status entry does not have a html page.
Action: Check to make sure output page is given.
0x620B 25099 UNKNOWN_CHARACTER_ENCODING
Cause: Fdf error: a character_encoding is given, but is not valid on
Solaris. Possible that conversion to UTF-8 is not supported, or the
character_encoding does not exist at all.
Action: Give only the supported character_encoding value. Check Sophia
documentation to find all values.
Form Descriptor Errors (Continued)
Code #
Front End Errors
Hex Decimal
I/O and Browser Errors
Code #
I/O and Browser Errors
Hex Decimal
0x6301 25345 FORM_FILE_NOT_FOUND
Cause: Fdf cannot be found. Possible fdf file name is mis-typed or has a
wrong path.
Action: Check to make sure the files full path name is correct.
0x6302 25346 HTML_FILE_NOT_FOUND
Cause: HTML file is not found.
Action: Check to make sure the path name is correct, and the web server
is configured correctly.
0x6303 25347 HTML_FILE_ERROR
Cause: An error in the VHTML page. Typically a mismatched $$pair.
Action: Check to make sure $$ are matched.
0x6304 25348 EMPTY_TAG_NAME
Cause: There is $$ $$ in the VHTML page.
Action: Check to make sure the tag name is in between.
Error Codes and Messages
56 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x6305 25349 GETENV_ERROR
Cause: Could not get the value of the environment variable like
REMOTE_ADDR and SERVER_URL. Typically should not happen
unless operating in manual simulation of CGI.
Action: Should not happen in the real case. But in bats, check if these
environment variables are set or not.
0x6308 25352 INVALID_BROWSER
Cause: The browser is not supported. Typically users are using a lower
version than supported.
Action: An error page is returned to ask user to use the supported
browsers.
0x6309 25353 INVALID_ENROLL_TRACK
Cause: User did not use the browser that matches the enroll_track
specified in the HTML form.
Action: An error page is returned to ask user to use the matched browser.
0x6400 25600 ERROR_FOUND_IN_LIST
Cause: Fdf validation finds at least one bad entry.
Action: An error page is returned to ask user to correct bad entry.
0x6400 25600 When the Fdf validation finds a bad entry, this error occurs in the Automated
Administration log. Fix the Fdf entry to correct the error in Automated admin-
istration log.
I/O and Browser Errors (Continued)
Code #
I/O and Browser Errors
Hex Decimal
CGI Errors
Code #
Send Mail Errors
Hex Decimal
0x6450 25680 NO_SEND_MAIL_SERVER
Cause: Remote_email is specified but remote mail server is not.
Action: Remote_email feature is not currently supported.
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 57
0x6451 25681 NO_SEND_MAIL_DOMAIN
Cause: Remote_email is specified but remote mail domain is not.
Action: Remote_email feature is not currently supported.
0x6452 25682 NO_RECEPIENT_FOR_EMAIL
Cause: Remote_email is specified but the recipients email address is
not.
Action: Remote_email feature is not currently supported.
0x6FFF 28671 eCGI_GOT_CERT
Cause: Success code.
Action: No action is required.
CGI Errors
Code #
Send Mail Errors
Hex Decimal
SMIME Errors
Code #
SMIME Errors
Hex Decimal
0x9006 36870 eSMIME_PKCS10_TRANSFER_ENCODING
Cause: The transfer encoding is invalid.
0x9008 36872 eSMIME_CHALLENGE_MULTIPLE
Cause: There are multiple values for the challenge password.
0x900a 36874 eSMIME_CHALLENGE_TAG
Cause: The challenge password does not conform to the printable string
character set.
0x900b 36875 eSMIME_CHALLENGE_ENCODING
Cause: The encoding of the challenge password is invalid.
0x900c 36876 eSMIME_CHALLENGE_LENGTH
Cause: The challenge password should have a minimum of four
alpha-numeric characters.
Error Codes and Messages
58 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
OCSP Responder Errors
Code #
OCSP Responder Errors
Hex Decimal
0x9200 37376 eOCSP_ENCODE_ASN_ERROR
Cause: ASN encoding error. It indicates an internal error and should not
normally happen.
Action: Debugging code may be needed.
0x9201 37377 eOCSP_DECODE_ASN_ERROR
Cause: ASN decoding error. It indicates an internal error and should not
normally happen.
Action: Debugging code may be needed.
0x9202 37378 eOCSP_RESPONSE_SUCCESSFUL
Cause: Successful.
Action: No action required.
0x9203 37379 eOCSP_MALFORMED_REQUEST
Cause: OCSP request is not in the correct format (bad request).
Action: None. The OCSP responder returns a Malformed Request for the
OCSP response status.
0x9204 37380 eOCSP_INTERNAL_ERROR
Cause: Indicates an internal error and should not normally happen.
Action: Debugging code may be needed.
0x9205 37381 eOCSP_TRY_LATER
Cause: Signing server or QM unavailable.
Action: Attempt OCSP status request later.
0x9206 37382 eOCSP_REQUEST_SIGNATURE_REQUIRED
Cause: The OCSP request does not contain a signature.
Action: The OCSP responder is configured (in the IDENTRUS.conf
file) to require the OCSP request to be signed. Unsigned OCSP requests
will not be accepted unless this value is changed.
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 59
0x9207 37283 eOCSP_UNAUTHORIZED
Cause: The OnSite account is not configured for OCSP.
Action: Check with Customer Support to see if OCSP should be enabled
for the OnSite account.
0x9208 37384 eOCSP_QM_ERROR
Cause: Missing columns returning from QM query.
Action: Make sure that the SQL templates are up to date.
0x9209 37385 eOCSP_REQUESTOR_CERT_MISSING
Cause: Indicates an internal error and should not normally happen.
Action: Debugging code may be needed.
0x920a 37386 eOCSP_REQUEST_SIGNATURE_ALG_NOT_SUPPORTED
Cause: Signature algorithm specified in OCSP request is not supported.
Action: None. The OCSP responder returns an Unauthorized Request for
the OCSP response status.
0x920b 37387 eOCSP_REQUEST_MISSING_CLIENT_CERT
Cause: There is no certID in the OCSP request.
Action: None. The OCSP responder returns a Malformed Request for the
OCSP response status.
0x920c 37388 eOCSP_REQUEST_INVALID_CLIENT_CERT
Cause: The clientID in the request is not in a valid format.
Action: None. The OCSP responder returns a Malformed Request for the
OCSP response status.
0x920d 37389 eOCSP_RESPONSE_HAS_NO_SIGNATURE
Cause: The OCSP response has no signature.
Action: None. The OCSP responder returns an Unauthorized Request for
the OCSP response.
0x920e 37390 eOCSP_RESPONSE_HAS_INVALID_SIGNATURE
Cause: The OCSP response has an invalid signature.
Action: None. The OCSP responder returns a Malformed Request for the
OCSP response status.
OCSP Responder Errors (Continued)
Code #
OCSP Responder Errors
Hex Decimal
Error Codes and Messages
60 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x920f 37391 eOCSP_RESPONSE_SIGNER_CERT_NOT_ATTACHED
Cause: The signer certificate is not attached in the OCSP response.
Action: Ask the OCSP client to attach the signer certificate in the OCSP
request.
0x9210 37392 eOCSP_RESPONSE_CERT_ID_NOT_MATCH
Cause: Indicates an internal error and should not normally happen.
Action: Debugging code may be needed.
0x9211 37393 eOCSP_RESPONSE_INVALID_CERT_STATUS
Cause: The CA certificate associated with the OCSP responder being
queried is revoked.
Action: Contact the Processing Center that issued the root.
0x9212 37394 eOCSP_ISSUER_UNKNOWN
Cause: The subject certificate not issued by the CA associated with the
OCSP responder being queried.
Action: None. The OCSP responder only supports MD5 and SHA-1.
0x9213 37395 eOCSP_HASH_ALG_NOT_SUPPORTED
Cause: The hashing algorithm is not supported.
Action: None. The OCSP responder only supports MD5 and SHA-1.
0x9214 37396 eOCSP_REQUEST_HAS_NO_SIGNATURE
Cause: The OCSP request does not contain a signature.
Action: The OCSP responder is configured (in the IDENTRUS.conf
file) to required the OCSP request to be signed. Unsigned OCSP
requests will not be accepted.
0x9215 37397 eOCSP_REQUEST_HAS_INVALID_SIGNATURE
Cause: The signature in the OCSP request is invalid.
Action: None. The OCSP responder returns a Malformed Request for the
OCSP response status.
OCSP Responder Errors (Continued)
Code #
OCSP Responder Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 61
0x9216 37398 eOCSP_NO_RP_IP_SIGNER
Cause: No RP-IP signer configured for this jurisdiction.
Action: Ensure that the Identrus_IP signer is loaded in
vs_onsite_ocsp_signer_t for this jurisdiction.
0x9217 37399 eOCSP_NO_RP_RC_SIGNER
Cause: No RP-RC signer configured for this jurisdiction.
Action: Ensure that the Identrus_RC signer is loaded in
vs_onsite_ocsp_signer_t for this jurisdiction.
0x9218 37400 eOCSP_NO_BASIC_RSP_IN_RELAY_RSP
Cause: The relay OCSP responder did not send back the complete
OCSP response.
Action: Contact the OCSP responder to report a problem with the relay
URL for this transaction.
0x9219 37401 eOCSP_MISMATCH_CERT_ID_IN_RELAY_RSP
Cause: The certificate ID in the relay response does not match the
certificate ID in the request.
Action: Contact the OCSP responder to report a problem with the relay
URL for this transaction.
0x921a 37402 eOCSP_REQUEST_HAS_INVALID_SIGN_ALG
Cause: The signature algorithm in the OCSP request is not supported.
Action: None. The OCSP responder only supports
SHA1WithRSAEncryption and MD5WithRSAEncryption.
0x921b 37403 eOCSP_NO_NONCE_EXTENSION_IN_RSP
Cause: The OCSP response does not have the nonce extension.
Action: None. The nonce extension must be sent in the OCSP request.
0x921c 37404 eOCSP_MISMATCH_NONCE_IN_RSP
Cause: The nonce in the OCSP response does not match with the nonce
extension in the OCSP request.
Action: None. The nonce extension must be sent in the OCSP request.
OCSP Responder Errors (Continued)
Code #
OCSP Responder Errors
Hex Decimal
Error Codes and Messages
62 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x921d 37405 eOCSP_NON_SUCCESSFUL_ROOT_RSP
Cause: When trying to verify the OCSP relay responder certificate, the
Root OCSP responder does not send back a complete response.
Action: Contact the Root OCSP responder to report a problem with the
relay URL for this transaction.
0x921e 37406 eOCSP_INVALID_RESPONDER_CERT
Cause: The relay OCSP responder certificate is not valid (based on the
OCSP response from the Root responder).
Action: Attempt the OCSP request again. If the problem continues to
occur, contact the OCSP responder to report the problem.
0x921f 37407 eOCSP_MISMATCH_CERT_ID_IN_ROOT_RSP
Cause: While trying to verify the OCSP relay responder certificate, the
OCSP response sent back from the Root responder does not contain the
same certificate ID as the OCSP request.
Action: Attempt the OCSP request again. If the problem continues to
occur, contact the OCSP responder as appropriate, to report the problem.
0x9220 37408 eOCSP_MISSING_SERVICE_LOCATOR_IN_REQ
Cause: There is no service locator in the OCSP request; relay cannot be
performed.
Action: None. The service locator must be included in the OCSP request.
0x9221 37409 eOCSP_RESPONSE_HAS_INVALID_SIGN_ALG
Cause: The OCSP response is sign with an unsupported algorithm.
Action: None. The OCSP responder only supports MD5 and SHA-1.
OCSP Responder Errors (Continued)
Code #
OCSP Responder Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 63
Key Recovery Service Errors
Code #
Key Recovery Service Errors
Hex Decimal
0xd000 53248 eVSKRS_KRO_ERRORS_START_HERE
Cause: Not an error.
Action: No action required.
0xd001 53249 eVSKRS_KRO_CRYPTO_ERROR
Cause: Crypto Error.
Action: Contact VeriSign.
0xd002 53250 eVSKRS_KRO_NETWORK_INFO_LOOKUP_FAILURE
Cause: Network Info Lookup Error.
Action: Make sure KRC configuration name in vskrs.cfg file is
correct.
0xd003 53251 eVSKRS_KRO_COULD_NOT_CONNECT_TO_KRC
Cause: Cannot connect to KRC.
Action: Ensure KRC is running and the KRC network
configuration parameters in the vskrs.cfg file are correct.
0xd004 53252 eVSKRS_KRO_NETWORK_SEND_ERROR
Cause: Network send error.
Action: Check network configuration.
0xd005 53253 eVSKRS_KRO_NETWORK_RECEIVE_ERROR
Cause: Network receive error when talking with KRC or KRA. A
process may have died during a transaction.
Action: Ensure KRA, KRC and Listener processes are up and
running.
0xd006 53254 eVSKRS_KRO_NETWORK_TIMEOUT
Cause: Network timeout when trying to communicate with KRC
or KRA. Current timeout specified is 30 seconds.
Action: Change timeout.
Error Codes and Messages
64 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0xd007 53255 eVSKRS_KRO_NETWORK_CORRUPT_MSG_RECEIVED
Cause: Network corrupt message received.
Action: Contact VeriSign.
0xd008 53256 eVSKRS_KRO_RECOVERED_KEY_CORRUPT
Cause: Recovered key is corrupt.
Action: Contact VeriSign.
0xd009 53257 eVSKRS_KRO_REQUEST_CANCELLED_BY_USER
Cause: Request cancelled by user.
Action: Check cm.log to verify that key recover operation
reached the CM. Check krs_listener.log file on the KRS machine
to verify that key recover operation reached the KRS Listener.
Check Application Event Log on the KRS machine for more
details.
0xd00a 53258 eVSKRS_KRO_KRB_LOAD_ERROR
Cause: Error loading KRB for recovery.
Action: Check cm.log to verify that key recover operation
reached the CM. Check krs_listener.log file on the KRS machine
to verify that key recover operation reached the KRS Listener.
Check Application Event Log on the KRS machine for more
details.
0xd00b 53259 eVSKRS_KRO_CONNECTION_LOST
Cause: Connection lost to KRC or KRA.
Action: Ensure KRA and KRC processes are running.
0xd00c 53260 eVSKRS_KRO_PRIVILEGE_ERROR
Cause: Privilege error.
0xd00d 53261 eVSKRS_KRO_CONFIG_ERROR
Cause: Configuration config error.
Action: Check the vskrs.cfg file and ensure configuration
parameters are correct.
Key Recovery Service Errors (Continued)
Code #
Key Recovery Service Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 65
0xd065 53349 eVSKRS_KRO_RECOVERY_SUCCESSFUL
Cause: Key recovery successful.
Action: No action needed.
0xd0c9 53449 eVSKRS_KRO_VERSION_NOT_SUPPORTED
Cause: KRB version not supported. KRB trying to be recovered
is not supported by the KRS.
Action: Contact VeriSign.
0xd0ca 53450 eVSKRS_KRO_INVALID_KRO_CERT
Cause: KRO certificate not valid.
Action: Contact VeriSign.
0xd0cb 53451 eVSKRS_KRO_INVALID_KRC_CERT
Cause: KRC certificate not valid.
Action: Contact VeriSign.
0xd0cc 53452 eVSKRS_KRO_INVALID_KRA_CERT
Cause: KRA certificate not valid.
Action: Contact Verisign.
0xd0dc 53468 eVSKRS_KRO_AUTHENTICATION_FAILURE
Cause: The emergency recovery codes sent along with this key
recovery request are not correct.
Action: Enter the emergency recovery codes that were in effect
on the enrollment date of the certificate whose private key you
are trying to recover.
0xd0ec 53484 eVSKRS_KRO_INVALID_KRB
Cause: The KRB sent for recovery is invalid or corrupt.
Action: Contact VeriSign.
0xd0f0 53488 eVSKRS_KRO_AGENT_FAILURE
Cause: KRA Failure.
Action: Ensure proper KRAs are running.
Key Recovery Service Errors (Continued)
Code #
Key Recovery Service Errors
Hex Decimal
Error Codes and Messages
66 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0xd0fa 53498 eVSKRS_KRO_SERVER_FAILURE
Cause: Server Failure.
Action: Contact Verisign.
0xd104 53508 eVSKRS_KRO_PROTOCOL_ERROR
Cause: Protocol error.
Action: Call VeriSign technical support.
0xd10e 53518 eVSKRS_KRO_NETWORK_ERROR
Cause: Network error.
Action: Call VeriSign technical support.
0xd12b 53547 eVSKRS_KRO_INTERNAL_ERROR
Cause: Internal error.
Action: Call VeriSign technical support.
0xd300 54016 eVSKRS_INVALID_FILE_NAME
Cause: The listener is unable to open one of the files specified in
the config file c:\vskrs\krs_listener.cfg.
Action: Call VeriSign technical support.
0xd301 54017 eVSKRS_UNABLE_TO_OPEN_FILE
Cause: The listener is unable to open the config file
c:\vskrs\krs_listener.cfg.
Action: Call VeriSign technical support.
0xd302 54018 eVSKRS_UNABLE_TO_WRITE_TO_FILE
Cause: The listener is unable to write to the file system.
Action: Ensure the C:\TEMP directory is writable and disk is not
full.
0xd303 54019 eVSKRS_UNABLE_TO_READ_FROM_FILE
Cause: The listener is unable to read the configuration file
e:\vskrs\krs_listener.cfg.
Action: Call VeriSign technical support.
Key Recovery Service Errors (Continued)
Code #
Key Recovery Service Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 67
0xd304 54020 eVSKRS_UNABLE_TO_INITIALIZE_CSSM
Cause: The listener is unable to initialize the CSSM toolkit.
Action: Ensure it is installed properly.
0xd305 54021 eVSKRS_ERROR_IN_KRO_INIT
Cause: Unable to initialize the listener process.
Action: Ensure the password provided during startup is correct
and try again.
0xd307 54023 eVSKRS_ERROR_DURING_BASE64_ENCODING
Cause: Base64 encoding error.
Action: Call VeriSign technical support.
Key Recovery Service Errors (Continued)
Code #
Key Recovery Service Errors
Hex Decimal
Key Recovery Manager Errors
Code #
Key Recovery Manager Errors
Hex Decimal
0x310c 12556 eECAS_KRS_CONNECT_FAILURE
Cause: Failed to connect to the KRS server.
Action: Verify that the port to the KRS server is correctly
configured and the KRS server process is active.
0x310d 12557 eECAS_KRS_SEND_FAILURE
Cause: Failed to send request to the KRS server.
Action: Verify that the port to the KRS server is correctly
configured and the KRS server process is active.
0x310e 12558 eECAS_KRS_READ_FAILURE
Cause: Failed to read response from the KRS server.
Action: Verify that the port to the KRS server is correctly
configured and the KRS server process is active.
Error Codes and Messages
68 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x310f 12559 eECAS_KRS_DISCONNECT_FAILURE
Cause: Failed to disconnect from the KRS server.
Action: Verify that the port to the KRS server is correctly
configured and the KRS server process is active.
0x3110 12560 eECAS_RESTRICTED_KEY_USAGE
Cause: A keyUsage extension value was requested which is not
supported.
Action: Requested keyUsage values can only be
keyEncipherment and/or digitalSignature.
0x3111 12561 eECAS_INVALID_PRODUCT
Cause: A Key Recovery account is configured for single certs.,
but customer is enrolling for dual, or vice-versa. Or, customer is
trying to enroll for a non-Key Manager certificate in a Key
Manager account.
Action: Customer should enroll for proper product, or else use
Policy Wizard to change between single and dual certs.
0x3112 12562 eECAS_INVALID_EXTENSION_REQ
Cause: Extension request contains duplicate extensions.
Action: Verify that the customers extensions requests sent in
the CRS PKCSReq message.
0x3114 12564 eECAS_PKCS7_SENDER_CERT_EXPIRED
Cause: The certificate that corresponds to the signer of the
incoming CRS message has expired.
Action: Verify that the key used to sign the incoming CRS
message has not expired.
0x3115 12565 eECAS_PKCS7_CA_CERT_EXPIRED
Cause: The certificate that envelopes the content of the
incoming CRS message has expired
Action: Verify that the key used to envelope the incoming CRS
message has not expired. Also contact engineering to see if the
AutoAdmin.509 cert has recently expired.
Key Recovery Manager Errors (Continued)
Code #
Key Recovery Manager Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 69
Roaming Services Errors
Code #
Common Errors
Hex Decimal
0x30de 12510 eECAS_CANT_BUILD_ROAMING_INFO
Cause: This is a catch-all error for problems relating to building an
information block needed by Roaming clients. It indicates that
something went wrong in the back end Application Server when an
Administrator used the Policy Wizard to update their policy
information.
Action: Check the Application Server's cm.log file for more details
about the specific problem.
0x4101 16641 VSRM_ERR_UNKNOWN
Cause: A non-typical error which could be caused by system failure
Action: Check server log, and call VeriSign technical support if
necessary
0x4102 16642 VSRM_ERR_INTERNAL
Cause: System error or code bug
Action: Call VeriSign technical support.
0x4103 16643 VSRM_ERR_NULL_PARAMETER
Cause: A required input parameter is missing
Action: Check end users input value and server log to find out which
field is not given
0x4104 16644 VSRM_ERR_OUT_OF_MEMORY
Cause: System is out of memory.
Action: Ensure system resources are sufficient.
0x4105 16645 VSRM_ERR_INVALID_INPUT
Cause: Input data is not valid which could be end users wrong data
or a hackers data
Action: Check that end user uses roaming client correctly; examine
roaming server log to spot possible data corruption
Error Codes and Messages
70 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x4106 16646 VSRM_ERR_INDEX_OUT_OF_BOUND
Cause: Internal error or clientInfo in the PTA policy file is not correct
where roaming server URLs are missing or not valid
Action: Report the problem to VeriSign
0x4107 16647 VSRM_ERR_FLATTEN_NV_TO_BUFFER
Cause: Roaming front end server failure which reports an error
page; it is typically because the web server failed to load NS-plugin
or connect to back end servers
Action: Check that roaming back end is up running and examine the
configuration of the roaming front end to back end servers to make
sure connections should work. Check web server error log to spot
the reason; check back end server log to spot whether a new
request would be rejected because the allowed maximal number of
requests for the web or back end server has reached.
0x4108 16648 VSRM_ERR_CREATE_THREAD
Cause: The system cannot create a new thread
Action: Check system resource and processes
0x4109 16649 VSRM_ERR_ENTRY_NOT_FOUND
Cause: A required entry from client or server side is missing
Action: Check that the client and server runs in compatible version;
examine server log to spot whether it is caused by a service denial
attack
0x410A 16450 VSRM_ERR_NULL_SERVER_INFO
Cause: The clientInfo blob in the PTA download policy file
information is missing
Action: Check and re-configure the OnSite policy file for the PTA if
necessary
0x410B 16451 VSRM_ERR_NULL_SERVER_INFO_SIG
Cause: The clientInfoSig blob in the PTA download policy file
information is missing
Action: Check and re-configure the OnSite policy file for the PTA if
necessary
Roaming Services Errors (Continued)
Code #
Common Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 71
0x410C 16452 VSRM_ERR_BAD_FORMAT_SERVER_INFO
Cause: The clientInfo blob in the PTA download policy file
information is not proper
Action: Check and re-configure the OnSite policy file for the PTA if
necessary
0x410D 16453 VSRM_ERR_SERVER_INFO_SIG_MISMATCH
Cause: The clientInfo blob in the PTA download policy file
information is not proper
Action: Check and re-configure the OnSite policy file for the PTA if
necessary; If problem remains, contact VeriSign technical support
0x410E 16454 VSRM_ERR_EXTRACT_PUBLIC_KEY_FROM_CERT
Cause: Internal error; it shouldnt occur if system is right
Action: Report the problem to VeriSign
0x410F 16455 VSRM_ERR_VERSION_MISSING
Cause: Illegal software was used or network data has been
modified
Action: Check any possible man-in-the-middle attack which
manipulated data; Double check that roaming front end server
points to correct back end servers
0x4110 16456 VSRM_ERR_VERSION_NOT_SUPPORTED
Cause: A new PTA tried to talk with an old roaming server
Action: Upgrade roaming server or make sure the PTA version is
compatible with the roaming servers
0x4111 16457 VSRM_ERR_SERVER_ID_MISSING
Cause: Roaming server ID is not sent by the roaming server
Action: Check roaming server log to find the output name values
that were sent to the client; check that server has loaded server ID
by looking at the beginning of the log when server is started
Roaming Services Errors (Continued)
Code #
Common Errors
Hex Decimal
Error Codes and Messages
72 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
Roaming Services (Encoding) Errors
Code #
Encoding Errors
Hex Decimal
0x4150 16720 VSRM_ERR_BASE64_ENCODE
Cause: Internal error or data is modified
Action: Check data integrity and any possible data modification
in network traffic
0x4151 16721 VSRM_ERR_BASE64_DECODE
Cause: Internal error or data is modified
Action: Check data integrity and any possible data modification
in network traffic
0x4152 16722 VSRM_ERR_BASE64_NOT_ENOUGH_BUFFER_SPACE
Cause: System resource is insufficient to allocate memory
Action: Ensure sufficient system resource
0x4153 16723 VSRM_ERR_DECODE_BASE64_INVALID_CHAR
Cause: Internal error or data is modified
Action: Check data integrity and any possible data modification
in network traffic
0x4154 16724 VSRM_ERR_HASC_ENCODE
Cause: Internal error or data is modified
Action: Check data integrity and any possible data modification
in network traffic
0x4155 16725 VSRM_ERR_HASC_DECODE
Cause: Internal error or data is modified
Action: Check data integrity and any possible data modification
in network traffic
0x4156 16726 VSRM_ERR_INVALID_NUMBER
Cause: Internal error or data is modified
Action: Check data integrity and any possible data modification
in network traffic
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 73
0x4157 16727 VSRM_ERR_UNSUPPORT_ENCODE_ALG
Cause: Internal error by incorrect function call
Action: Fix code bug
0x4158 16728 VSRM_ERR_UNICODE_TO_UTF8
Cause: Internal error or data is modified during network
transfer
Action: Ensure sufficient system memory resource; check user
input data
0x4159 16729 VSRM_ERR_UTF8_TO_UNICODE
Cause: Internal error or data is modified during network
transfer
Action: Ensure sufficient system memory resource; check user
input data
Roaming Services (Encoding) Errors
Code #
Encoding Errors
Hex Decimal
Roaming Services (Crypto) Errors
Code #
Crypto Errors
Hex Decimal
0x4170 16752 VSRM_ERR_CRYPTO
Cause: Wrong password or insufficient system resource or
corrupted data
Action: Check system resource, input data, and password
0x4171 16753 VSRM_ERR_FIND_PRIME
Cause: Internal error due to possibly temporary system
resource constraint
Action: Try again and contact VeriSign technical support if the
problem persists
Error Codes and Messages
74 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x4172 16754 VSRM_ERR_MOD_EXP
Cause: Wrong password or corrupted input data from network
or incompatible client server components
Action: Check data in server log to spot possible data
corruption due to network traffic and possible rogue
client/server end
0x4173 16755 VSRM_ERR_KEY_CREATION
Cause: Internal error due to system resource limitation
Action: Ensure sufficient system resources and try again
0x4174 16756 VSRM_ERR_COMPUTE_DIGEST
Cause: Input data corruption
Action: Check user data and log file, ensure sufficient system
resources
0x4175 16757 VSRM_ERR_COMPUTE_XOR
Cause: Wrong password or corrupted data from network or
incompatible client server components
Action: Confirm correct password input, check data in server or
client log to spot possible data corruption due to network traffic
and possible rogue client/server end
0x4176 16758 VSRM_ERR_COMPUTE_RANDOM
Cause: System resource limitation or other internal error
Action: Check system resource and try again.
0x4177 16759 VSRM_ERR_COMPUTE_RANDOM_INVERSE
Cause: System resource limitation or other internal error
because of possibly memory corruption of system wide safe
prime number P
Action: Check system resource and try again
0x4178 16760 VSRM_ERR_ENCRYPT
Cause: Wrong password or corrupted input data from network
Action: Ensure correct password, and examine server log for
the input/output name value pairs for possible empty data in
required fields.
Roaming Services (Crypto) Errors (Continued)
Code #
Crypto Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 75
0x4179 16761 VSRM_ERR_DECRYPT
Cause: Wrong password or corrupted input data from network
Action: Ensure correct password, and examine server log for
the input/output name value pairs for possible empty data in
required fields
0x417A 16762 VSRM_ERR_DECRYPT_SK
Cause: Wrong password or corrupted data from storage server
associated with name encrypted_key
Action: Check password correctness, and examine storage
server log file for the data information associated with the
name, and further database about column
VSRM_ENCRYPTED_SYM_KEY in table
vsrm_store_user_data_t for the user.
0x417B 16763 VSRM_ERR_KEY_NULL
Cause: Internal error: a failure servers error was not caught in
code
Action: Check roaming library code for possible bug and
application code for incorrect API use
0x417C 16764 VSRM_ERR_SIG_MISMATCH
Cause: Incorrect clientInfo/clientInfoSig that is given to
roaming API call from PTA or original OnSite policy file
Action: Check clientInfo/ clientInfoSig in PTA server side or
policy file; make sure that the clientInfo is not corrupted; if
problem persists, contact VeriSign for possible signing key
update
0x417D 16765 VSRM_ERR_UNSUPPORT_DIGEST_ALG
Cause: Internal error
Action: Check roaming library version compatibility with
bsafelite
0x417E 16766 VSRM_ERR_READ_CERT
Cause: Internal error
Action: Check client software authenticity
Roaming Services (Crypto) Errors (Continued)
Code #
Crypto Errors
Hex Decimal
Error Codes and Messages
76 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x417E 16767 VSRM_ERR_BAD_RSA_KEY_BUFFER
Cause: Corrupted server key pair
Action: Check key pair file vsrmpriv.key and vsrmpub.key to
spot any possibly unexpected modification; it is good to create
a new key pair and use the new key pair to avoid possible
attack.
Roaming Services (Crypto) Errors (Continued)
Code #
Crypto Errors
Hex Decimal
Roaming Services (Http Connection) Errors
CODE # Http Connection Errors
Hex Decimal
0x4190 16784 VSRM_ERR_BAD_URL
Cause: Incorrect clientInfo that is given to roaming API call from
PTA or original OnSite policy file
Action: Examine the OnSite policy file for the URL setting, and
generate policy file again to use correct URL.
0x4191 16785 VSRM_ERR_UNSUPPORT_URL_SCHEME
Cause: Incorrect clientInfo that is given to roaming API call from
PTA or original OnSite policy file which contains a URL which is
neither https://xxx nor http://xxx.
Action: Examine the OnSite policy file for the URL setting, and
generate policy file again to use correct URL
0x4192 16786 VSRM_ERR_OPEN_SESSION
Cause: Insufficient system resource
Action: Check client log file if it is ON, and examine system
resource, close some open network connections if there are too
many
0x4193 16787 VSRM_ERR_CONNECT_URL
Cause: The host and port specified in the URL cannot be reached
Action: Examine the web server status of the associated URL, and
fix it accordingly
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 77
0x4194 16788
VSRM_ERR_OPEN_REQUEST
Cause: The host and port specified in the URL cannot be reached
Action: Examine the web server status of the associated URL, and
fix it accordingly
0x4195 16789
VSRM_ERR_SEND_REQUEST
Cause: Following typical reasons:
If URL is https://xxx, SSL version mismatch between client and server,
such as client sends SSL v3 but server doesnt support V3
If URL is https://xxx, server certificate cannot be trusted by the client
Bad request data
Web server experienced some error when loading NS Plug-in
The server cannot accept the new connection because maximal num-
ber of concurrent connections have reached
Action:
If it is SSL problem, check web server to make sure that both SSL V2
and V3 are turned on; if client log is on, check to find precise connection
error code and message in the log file. Check the root certificates in IE
to find out whether the server certificate should be trusted
Check web server error log to find some clue about the connection fail-
ure.
Check that allowed concurrent client requests have not exceeded the
threshold number specified in web server and the file vsrm.csp for NS
Plug-in to communicate with back end server
0x4196 16790 VSRM_ERR_END_REQUEST
Cause: Internal error; not used
0x4197 16791 VSRM_ERR_READ_HTTP_RESPONSE
Cause: Server failure during data transfer such as sudden server
shutdown
Action: Examine roaming front end server status
0x4198 16792 VSRM_ERR_QUERY_SERVER_STATUS
Cause: Roaming back end server failed to report its operational
status
Action: Check roaming front end server access log and error log to
find out whether back end server is tried; check roaming back end
server log file to find information about the connection
Roaming Services (Http Connection) (Continued) Errors
Error Codes and Messages
78 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x4199 16793 VSRM_ERR_QUERY_SERVER_RESPONSE_HEADER
Cause: Network or web server failure
Action: Check the web server status and its log files; start the server
if it is down; check client log file if it exists to find system error report
information for further fix
0x419A 16794 VSRM_ERR_REQUESTED_URL_NOT_FOUND
Cause: The specified URL cannot be reached
Action: Examine OnSite policy file that contains the URL information
to make sure you have correct URL entered; try from a browser to
connect to the URL to make sure that the URL can be reached
0x419B 16795 VSRM_ERR_BAD_REQUEST
Cause: Invalid request syntax or server is not able to serve this
request
Action: Check web server configuration file obj.conf to make sure
that it loads roaming NS Plug-in, and its associated the NS Plug-in
libproxy.so with request URL http(s)://xxx/vsrm; also check web
server error log file for failure reasons and fix it accordingly.
0x419C 16796 VSRM_ERR_HTTP_DENIED
Cause: Server configuration denied the URL or domain access
Action: Check web server configuration of the associated URL for
any access control limitation
0x419D 16797 VSRM_ERR_HTTP_FORBIDDEN
Cause: Request is forbidden for the roaming front end web server
Action: Check web server configuration of the associated URL for
any access control limitation
Roaming Services (Http Connection) (Continued) Errors
Roaming Services (Protocol Errors)
CODE # Protocol Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 79
0x4210 16912 VSRM_ERR_INVALID_SESSION_IDENTIFIER
Cause: Internal error which shouldnt occur if client software is
correctly downloaded
Action: Examine that the client software PTA is correctly
downloaded
0x4211 16913 VSRM_ERR_UNSUPPORT_OPERATION
Cause: Incompatible roaming client with server or data modification
attacks during network traffic
Action: Compare the roaming client and server version for possible
roaming server upgrade; the version information is available in
server log; check the operation name in server log, and contact
VeriSign technical support if the versions are OK
0x4212 16914 VSRM_ERR_NULL_PROFILE
Cause: User profile is not provided
Action: Examine server log to confirm whether the user encrypted
profile is successfully recovered from storage server; if not, check
the server availability; if yes, examine network connectivity and fix it
accordingly.
0x4213 16915 VSRM_ERR_READ_FILE
Cause: File doesnt exists or is not permitted to read
Action: Examine log file to find the file which caused problem;
examine its existence and permission
0x4214 16916 VSRM_ERR_CONVERT_RESPONSE_TO_NV
Cause: Server responses are not valid data from back end server.
Typically it is an error report by web server due to some server side
failure
Action: Examine roaming front end web server error log to find
clues; check both front and back end server running status and
connectivity between the front and back end servers. Check front
end server configuration files to make sure it forward requests to
correct back end servers
0x4215 16917 VSRM_ERR_ROAMING_SERVER_URL_ID_CNT_MISMATCH
Cause: Corrupted server response data where server ID
information was taken away from valid responses
Action: Examine that the client talks with correct roaming front end
and back end servers by examining server logs for the related
request log information.
Roaming Services (Protocol Errors) (Continued)
Error Codes and Messages
80 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x4216 16918 VSRM_ERR_STORAGE_SERVER_INFO
Cause: Internal error, not used
Action: If you are using Enterprise Hosting configuration of the
Roaming Service, check the log file for the Roaming and Storage
Server for more information. If you are using the Split hosting
configuration, contact VeriSign.
0x4217 16919 VSRM_ERR_NO_SUCH_USER
Cause: The requested user account doesnt exist
Action: A user cannot access an account which has not been
created; it is a normal status report. Create the user account first
before access it.
0x4218 16920 VSRM_ERR_USER_NON_COMPLETE
Cause: The requested user account has not been completely
created. The account is either in the middle of creation or a previous
enrollment has been aborted
Action: An end user can either wait and try again later when all
roaming servers have completed the account enrollment and
verified; if it were a aborted user account, simply ignore it and create
another profile with different username
0x4219 16921 VSRM_ERR_USER_ALREADY_EXISTS
Cause: The requested username already exists in roaming servers;
it occurs when an end user try to create a profile with a existing
username
Action: Change to use a different username
0x421A 16922 VSRM_ERR_BAD_STATE
Cause: The user account transaction state was not the expected
one for the requested action; most probably the request was
interrupted by another request against the same user account at the
same time
Action: Wait and try again; for server administrators, be alert that
this maybe an indication of attacks to the user account or misuse of
the username by non-owner who coincidentally entered the same
name if the account owner didnt issue two simultaneous requests
0x421B 16923 VSRM_ERR_USER_PENDING_STATE
Cause: The account was being used by another request
Action: Wait and try again
Roaming Services (Protocol Errors) (Continued)
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 81
0x421C 16924 VSRM_ERR_ATTEMPT_EXCEED_THRESHOLD
Cause: The user account has been locked out because number of
failure access to the account which is typically caused because of
wrong password has exceeded the allowed threshold
Action: The account owner calls the roaming service administrator
to unlock the account
0x421D 16925 VSRM_ERR_VERIFIER_MISMATCH
Cause: Wrong password is given
Action: Enter the correct password and try again
0x421E 16926 VSRM_ERR_PROFILE_DATA_CORRUPTED
Cause: The user encrypted profile may have been corrupted during
network transfer or in storage server
Action: Try again to check whether it was a network failure; if
problem remains, contact roaming administrator; roaming
administrator should check storage server log to find out whether
database has been corrupted, check server log to extract the users
profile data and contact VeriSign technical support to diagnosis the
integrity for the data; if the data is good in server side, check that
server setup hasnt been modified so that data is sent from correct
back end server and database, and further spot any possible server
redirection by an intruder
0x421F 16927 VSRM_ERR_WRONG_PASSWORD
Cause: Wrong password is provided
Action: Enter correct password and try again
0x4220 16928 VSRM_ERR_UPDATE_LOCKOUT_THRESHOLD_CACHE_FAILED
Cause: Update lockout threshold in cache memory failed.
Action: This error might be caused by out of system memory.
0x4221 16929 VSRM_ERR_INVALID_RESPONSE_DATA_SIZE
Cause: Roaming server response data is corrupted
Action: End user contacts roaming administrator; administrator
checks that roaming setup has not been changed or redirected;
checks server back end log to determine the request did come into
the correct roaming servers, and further check possible data
corruption; if the data seems to be OK, contact VeriSign technical
support.
Roaming Services (Protocol Errors) (Continued)
Error Codes and Messages
82 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x4222 16930 VSRM_ERR_LOCKOUT_THRESHOLD_NOT_FOUND
Cause: Roaming database cannot be reached to extract the
threshold for the jurisdiction
Action: Check server log to find the users request information,
check the database status for roaming server about whether it is up
running; if yes, database table vsrm_roam_account_t should be
examined with sqlplus to query the entry existence and
vsrm_lockout_threshold with the users jurisdiction.
0x4223 16931 VSRM_ERR_VERSION_MISMATCH
Cause: Html protocol version in html files does not match with the
Roaming server protocol version.
Action: The release version of Roaming server and Roaming admin
is not matched.
0x4224 16932 VSRM_ERR_CHANGE_SAME_PASSWORD
Cause: New password is given to be the same as the old password
Action: Try again by entering a different new password than the old
one for password change
0x4225 16933 VSRM_ERR_USERNAME_TOO_LONG
Cause: A username is longer than 255 characters
Action: Choose a shorter username that consists of at most 255
characters
0x4226 16934 VSRM_ERR_BAD_PASSWORD_INPUT
Cause: The password is empty or consists of only blank spaces
Action: Choose a non-null password and try again
Roaming Services (Protocol Errors) (Continued)
Roaming Services (Server Configuration Error)
CODE # Server Configuration Error ?
Hex Decimal
0x4300 17152 VSRM_ERR_CFG
Cause: Configuration file error
Action: Check configuration file and fix it according to the instruction in
the configuration file and Roaming Server Administrator Guide
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 83
0x4301 17153 VSRM_ERR_CFG_ENTRY_MISSING
Cause: A required configuration entry is missing the configuration file
Action: Find the name that is missing from server log, and setup it in
the configuration file. Typically the error will report if QM host names or
port are not given in file vsrmsrv.cfg.
0x4302 16914 VSRM_ERR_CFG_ENTRY_INVALID
Cause: An invalid configuration line is found in configuration file
Action: Check log for failure line position and fix the configuration file
according to given syntax and instruction
0x4303 16915 VSRM_ERR_CFG_CLIENT_CERT_SERIAL_NULL
Cause: The required administrator certificate serial number is not set
in server configuration file vsrmsrv.cfg
Action: Add roaming server administrators certificate serial number
into the configuration file
0x4304 16916 VSRM_ERR_CFG_DUPL_ENTRIES
Cause: Duplicate configuration entries are given in configuration file
Action: Delete the duplicate entries in configuration file
0x4305 16917 VSRM_ERR_CFG_FILE_LINE_TOO_LONG
Cause: A configuration line is longer than 1024 characters
Action: Delete unnecessary blank spaces in the value string of the
configuration entry and make it at most 1024 characters long
0x4306 16918 VSRM_ERR_CFG_ILLEGAL_SPACE_MARKER
Cause: The syntax of a configuration entry is not correct where special
character which is used to indicate that a string containing a blank
space is actually one value for the given name is not paired, either the
leading or ending marker is missing
Action: Fix the configuration entry according to correct syntax
0x4307 16919 VSRM_ERR_MISSING_CFG_DLL_NAME
Cause: Reserved error code; not used in the first release
Action: N/A
Roaming Services (Server Configuration Error) (Continued)
Error Codes and Messages
84 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x4308 16920 VSRM_ERR_LOAD_DLL
Cause: Failed to load a shared library. For the first release, only
required shared library is libvsrmqm.so
Action: Check that <root>/be/server/bin/libvsrmqm.so exists and has
execution file permission
0x4309 16921 VSRM_ERR_QUERY_DLL_API
Cause: Failed to find all required API from a shared library. For the first
release, only required shared library is libvsrmqm.so
Action: Check that <root>/be/server/bin/libvsrmqm.so is not corrupted
or replaced with a rogue shared library
0x430A 16922 VSRM_ERR_INVALID_DATA
Cause: Input data is not correct
Action: Contact VeriSign technical support
0x430B 16923 VSRM_ERR_CLIENT_CERT_NOT_FOUND
Cause: The required administrator certificate was not passed to
roaming back end server from roaming front end web server
Action: Check roaming front end web server configuration file obj.conf
to make sure that it contains the following line:
PathCheck fn="get-client-cert" dorequest="1" method="*"
0x430C 16924 VSRM_ERR_CLIENT_CERT_NOT_AUTHORIZED
Cause: The serial number of the administrator certificate that is used
for client authentication to access Roaming Service Control Center
doesnt match any one of those listed in roaming server configuration
file vsrmsrv.cfg. The error will be reported and so block unauthorized
access to administer roaming server if one doesnt have correct
administrator certificate
Action: If the error was noticed in server log and the real administrator
didnt cause the problem, check the administrator web server log to
trace down where the request is from and so possible intruder. If it was
caused by the real administrator, try again with correct administrator
certificate for the roaming administration authority, or add the serial
number to server configuration file and restart roaming server to load
the change if this certificate should be allowed.
Roaming Services (Server Configuration Error) (Continued)
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 85
0x430D 16925 VSRM_ERR_PRIVATE_KEY_FILE_OPEN
Cause: Either the private key file vsrmpriv.key in the same directory as
server binary file vsrmsrv doesnt exist or is not allowed to open by the
user who tried to start the roaming server
Action: Follow Roaming Administrators Guide to generate the
required server key pair if the file is missing. Change the file
permission or change user ID to start the roaming server if the file is
not allowed to read. Notice that the file should be highly protected to
prevent other people than roaming server administrator to access,
better it should be audited for any permission change or content
changes, be cautions when you are going to change its file permission.
0x430E 16926 VSRM_ERR_PRIVATE_KEY_FILE_DATA_FORMAT
Cause: The private key data in file vsrmpriv.key is corrupted
Action: Try to recover the correct data by replace it with your backup
copy; generate a new key pair and use the new key pair for roaming
service if necessary
0x430F 16926 VSRM_ERR_WRONG_PASSWORD_OPEN_PRIVATE_KEY_FILE
Cause: The password specified in configuration file vsrmsrv.cfg under
entry name PRIVATE_KEY_FILE_PASSWORD is not the correct
one that was used to protect the private key in file vsrmpriv.key
Action: Change to the correct password in vsrmsrv.cfg and try again
Roaming Services (Server Configuration Error) (Continued)
Roaming Services (Flat File DB Errors)
CODE # Flat FILE DB Errors
Hex Decimal
0x4360 17248 VSRM_FILE_ERR
Cause: Internal error
Action: Flat file database support is not enabled; feature enhancement
is needed
0x4361 17249 VSRM_FILE_ERR_OPEN
Cause: The given flat file database in configuration file vsrmsrv.cfg
cannot be open
Action: Check the file existence and permission
Error Codes and Messages
86 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
Roaming Services (QM Client Handler) Errors
CODE # QM Client Handler Errors
Hex Decimal
0x4380 17280 VSRM_QM_ERR
Cause: Query Manager related error
Action: Check roaming server log vsrmsrv.log.<timestamp> and QM log
qm.log.<timestamp> to spot possible clue of errors; Contact VeriSign
technical support if necessary
0x4381 17281 VSRM_QM_ERR_CONNECT
Cause: The QM server cannot be reached
Action: Check QM server status and setting of roaming server; make
sure that the specified QM given in roaming configuration file
vsrmsrv.cfg is up running
0x4382 17282 VSRM_QM_ERR_NULL_RESPONSE
Cause: No data was returned from QM
Action: Check QM server status and setting of roaming server; make
sure that the specified QM given in roaming configuration file
vsrmsrv.cfg is up running. Check QM log to find any useful clue; check
database activity and availability that the QM uses.
Roaming Services (QM Server) Errors
CODE # QM Server Errors
Hex Decimal
0x4384 17283 VSRM_QM_ERR_INTERNAL_ERROR
Cause: QM cannot construct the name-value pair response.
Action: The error is most likely caused by a lack of a system resource
such as memory, or file handling. Check qm logs.
0x4385 17284 VSRM_QM_ERR_QUERY_TEMPLATE_NOT_SUPPLIED
Cause: There is no name-value pair template defined in the request.
Action: Check the client applications request.
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 87
0x4386 17285 VSRM_QM_ERR_QUERY_TEMPLATE_OPENING_ERROR
Cause: Cannot open the sql template file.
Action: Check sql template directory for the sql template file.
0x4387 17286 VSRM_QM_ERR_OUT_OF_MEMORY
Cause: There is no more system memory for the QM.
Action: Check if there is any memory leak in any process, then restart
that process in order to reclaim the memory.
0x4388 17287 VSRM_QM_ERR_CONNREFUSED
Cause: Cannot connect to the QM. It can be caused by either one of the
following aspects:
- QM is down.
- QM host is down or unreadable.
- QM host and port in client configuration pin.conf is defined incorrectly.
Action: Check if it is caused by any of the above.
0x4389 17288 VSRM_QM_ERR_TIMEDOUT
Cause: Cannot send request to or read the response from the QM.
Action: Check the QM status. It can be hung or all the service threads
are running out.
0x438A 17289 VSRM_QM_ERR_NO_DATA_FOUND
Cause: There is no record matched with the WHERE clause in the sql
template.
Action: Check your criteria of the fields in the WHERE clause in order to
make sure the error is correct.
0x438B 17290 VSRM_QM_ERR_UPDATE_NOT_ALLOW
Cause: The QM process was started to disallow update operations.
Action: IS update allowed in config file? If not allowed,
QM_UPDATEALLOW line will read 0 or be commented out.
0x438C 17291 VSRM_QM_ERR_UPDATE_EXCEED_LIMIT
Cause: The number records which are effected by the UPDATED SQL
is greater than the value QMUPDATEALLOW in the configuration.
Roaming Services (QM Server) Errors (Continued)
Error Codes and Messages
88 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
Roaming Services (Audit) Errors
CODE # Audit Errors
Hex Decimal
0x4500 17664 VSRM_AUDIT_ERR
Cause: A transaction activity cannot be successfully audited into audit
database table vsrm_roam_event_t
Action: Check the roaming QM availability that is specified in roaming
configuration file vsrmsrv.cfg with entries ROAM_QM_HOST and
ROAM_QM_PORT. Check database availability that the QM uses;
check possible database disk space full which prevent any new entry
addition
0x4501 17665 VSRM_AUDIT_ERR_OP_NULL
Cause: The required name value pair input for operation name is
missing. Each roaming activity always contains a named entry op or
operation if it is an administration action. Such an error indicates the
following possibilities:
- Data corruption during network transfer
- Incorrect or non-original roaming client
Action: Check application server where PTA is downloaded to make sure
correct PTA software is for download by end users. Check any network
failure.
PKI Errors
Code #
PKI Errors
Hex Decimal
0x3900 14592 PKI_RESPONDER_PORT_NOT_DEFINED
Cause: NA
Action: Typically, should not see this error. Check crs.log and escalate to
VeriSign technical support.
0x3901 14593 PKI_MESSAGE_CONTAINS_NO_SIGNED_ATTRIBUTES
Cause: CRS message received does not contain any signed attributes.
Action: Ensure CRS message conforms to the VeriSign CRS profile
document.
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 89
0x3902 14594 PKI_MESSAGE_TYPE_NOT_FOUND
Cause: CRS message does not contain a messageType attribute.
Action: Ensure CRS message conforms to the VeriSign CRS profile
document.
0x3903 14595 PKI_TRANSACTION_ID_NOT_FOUND
Cause: CRS message does not contain a transactionID attribute.
Action: Ensure CRS message conforms to the VeriSign CRS profile
document.
0x3904 14596 PKI_ATTRIBUTE_ENCODING_ERROR
Cause: CRS message contains an incorrectly encoded attribute.
Action: Ensure CRS message conforms to the VeriSign CRS profile
document.
0x3905 14597 PKI_CANNOT_VERIFY_SIGNED_MESSAGE
Cause: CRS message cannot be verified.
Action: Ensure CRS message conforms to the VeriSign CRS profile
document and signatures are created correctly.
0x3906 14598 PKI_CANNOT_UNENVELOPE_MESSAGE
Cause: CRS message cannot be decrypted.
Action: Ensure correct certificate was used to encrypt.
0x3907 14599 PKI_INCORRECT_TAG_ON_EXTENSION_REQ
Cause: ExtensionReq attribute contains an invalid tag.
Action: ExtensionReq attribute in PKCS#10 (PKCSReq) is not tagged
correctly.
0x3908 14600 PKI_INCORRECT_TAG_ON_SENDER_NONCE
Cause: SenderNonce attribute contains an invalid tag.
Action: Must be OCTET STRING.
0x3909 14601 PKI_INCORRECT_TAG_ON_RECIPIENT_NONCE
Cause: RecipientNonce attribute contains an invalid tag.
Action: Must be OCTET STRING.
PKI Errors (Continued)
Code #
PKI Errors
Hex Decimal
Error Codes and Messages
90 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x390A 14602 PKI_SENDER_NONCE_NOT_FOUND
Cause: SenderNonce attribute not found.
Action: Ensure CRS message conforms to the VeriSign CRS profile
document.
0x390B 14603 PKI_MALFORMED_PKI_MESSAGE
Cause: Incorrect CRS message encoding.
Action: Ensure CRS message conforms to the VeriSign CRS profile
document.
0x390C 14604 PKI_CHALLENGE_PASSWORD_NOT_FOUND
Cause: ChallengePassword attribute not found.
Action: Make sure a challengePassword attribute is included in the
PKCS#10 message.
0x390D 14605 PKI_UNKNOWN_MESSAGE_TYPE
Cause: MessageType specified not known.
Action: Ensure CRS message conforms to the VeriSign CRS profile
document.
0x390E 14606 PKI_BACKEND_ERROR_DURING_PKCS_REQ
Cause: Error during PKCSReq processing.
Action: See crs.log and cm.log for more information.
0x390F 14607 PKI_BACKEND_ERROR_DURING_GET_CERT_INITIAL
Cause: Error during GetCertInitial processing.
Action: See crs.log and cm.log for more information.
0x3910 14608 PKI_BACKEND_ERROR_DURING_GET_CERT
Cause: Error during GetCert processing.
Action: See crs.log and cm.log for more information.
0x3911 14609 PKI_BACKEND_ERROR_DURING_GET_CRL
Cause: Error during GetCRL processing.
Action: See crs.log and cm.log for more information.
PKI Errors (Continued)
Code #
PKI Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 91
0x3912 14610 PKI_BACKEND_ERROR_DURING_GENERATE_PKCS7
Cause: Error creating the CRS response.
Action: See crs.log and cm.log for more information.
0x3913 14611 PKI_BACKEND_ERROR_DURING_RECEIVE_PKCS7
Cause: Error receiving a CRS message.
Action: See crs.log and cm.log for more information.
0x3914 14612 PKI_BAD_GET_CERT_MESSAGE_ENCODING
Cause: GetCert message encoding is incorrect.
Action: Ensure CRS message conforms to the VeriSign CRS profile
document and CRS specifications.
0x3915 14613 PKI_BAD_GET_CRL_MESSAGE_ENCODING
Cause: GetCRL message encoding is incorrect.
Action: Ensure CRS message conforms to the VeriSign CRS profile
document and CRS specifications.
0x3916 14614 PKI_BAD_PKCS_REQ_MESSAGE_ENCODING
Cause: PKCSReqmessage encoding is incorrect.
Action: Ensure CRS message conforms to the VeriSign CRS profile
document and CRS specifications.
0x3917 14615 PKI_BAD_GET_CERT_INITIAL_MESSAGE_ENCODING
Cause: GetCertInitial message is incorrect.
Action: Ensure CRS message conforms to the VeriSign CRS profile
document and CRS specifications.
0x3918 14616 PKI_BACKEND_ERROR_WHILE_UPDATING_TRANSACTION_ID
Cause: Transaction error.
Action: See cm.log and crs.log for more information.
0x3919 14617 PKI_INVALID_DN
Cause: An invalid DN was requested.
Action: The PKCS#10 message contained an invalid DN.
PKI Errors (Continued)
Code #
PKI Errors
Hex Decimal
Error Codes and Messages
92 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x391A 14618 PKI_UNKNOWN_OPERATING_MODE
Cause: NA
Action: NA
0x391B 14619 PKI_GET_CERT_INITIAL_NOT_FOUND
Cause: Certificate requested for pickup is not found.
Action: Ensure transactionID used for GetCertIniital operation matches
the one used for PKCSReq.
0x391C 14620 PKI_UNSTRUCTURED_NAME_NOT_FOUND
Cause: An unstructuredName attribute was expected in the DN but not
found.
Action: Ensure unstructuredName attribute is included in the PKCSReq
message.
0x391F 14623 PKI_CERT_ASSOCIATED_WITH_THIS_TRANS_ID_HAS_BEEN_REVO
KED
Cause: The certificate associated with this transactionID has been
revoked.
Action: Make sure a unique transaction ID is used for each new
enrollment.
0x3920 14624 PKI_CERT_ASSOCIATED_WITH_THIS_TRANS_ID_HAS_BEEN_REJE
CTED
Cause: The certificate associated with this transactionID has been
rejected.
Action: Make sure a unique transaction ID is used for each new
enrollment.
0x3921 14625 PKI_BAD_REV_REQ_MESSAGE_ENCODING
Cause: RevReq message is incorrect.
Action: Ensure CRS message conforms to the VeriSign CRS profile
document and CRS specifications.
0x3922 14626 PKI_BACKEND_ERROR_DURING_REV_REQ
Cause: Error during RevReq processing.
Action: See crs.log and cm.log for more information.
PKI Errors (Continued)
Code #
PKI Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 93
0x3923 14627 PKI_MISSING_REG_INFORMATION
Cause: Reginfo values are missing.
Action: Ensure reginfor information conforms to the VeriSign CRS profile
document.
0x3924 14628 PKI_MISSING_UNSIGNED_CERT_IN_REG_information.
Cause: An unsigned certificate value(s) was expected in the reginfo field.
Action: Ensure reginfor information conforms to the VeriSign CRS profile
document. (See ProtoCert section.)
0x3925 14629 PKI_MISSING_ORGANIZATION_IN_REG_information.
Cause: The corp_company name-value pair is missing from the reginfo
string.
Action: Ensure reginfor information conforms to the VeriSign CRS profile
document.
0x3926 14630 PKI_MISSING_ORG_UNIT_IN_REG_information.
Cause: The org_unit name-value pair is missing for the reginfo string.
Action: Ensure reginfor information conforms to the VeriSign CRS profile
document.
0x3927 14631 PKI_MISSING_CERT_TYPE_IN_REG_information.
Cause: The cert_type name-value pair is missing from the reginfo string.
Action: Ensure reginfor information conforms to the VeriSign CRS profile
document.
0x3928 14632 PKI_MISSING_CLASS_IN_REG_information.
Cause: The class name-value pair is missing from the reginfo string.
Action: Ensure reginfor information conforms to the VeriSign CRS profile
document.
0x3929 14633 PKI_TRANSID_TOO_LARGE
Cause: Transaction ID is too large.
Action: Use a smaller transaction ID (less than 30 bytes).
PKI Errors (Continued)
Code #
PKI Errors
Hex Decimal
Error Codes and Messages
94 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x392A 14634 PKI_NO_CRL_FOR_ISSUER
Cause: A CRL cannot be found for the issuer specified.
Action: Ensure CRL for this CRL is being updated.
0x392B 14635 PKI_BAD_PASSTHRU_MESSAGE_ENCODING
Cause: The password message encoding is incorrect.
Action: Password messages are used for Key Recovery operations.
Escalate to VeriSign technical support.
0x392C 14636 PKI_PASSTHRU_OPERATION_MISSING
Cause: No operation specified in the passthrough message.
Action: Escalate to VeriSign technical support.
0x392D 14637 PKI_PASSTHRU_OPERATION_NOT_ALLOWED
Cause: A passthrough operation is not allowed.
Action: Only works in an RA signed CRS message.
0x392E 14638 PKI_BACKEND_ERROR_DURING_PASS_THRU
Cause: Error during passthrough processing.
Action: See crs.log and cm.log for more information.
0x392F 14639 PKI_MISSING_APPLICATION_IN_REG_information.
Cause: The application name-value pair is missing from the reginfo string.
Action: Ensure reginfor information conforms to the VeriSign CRS profile
document.
0x3930 14640 PKI_MISSING_ORIGINATOR_IN_REG_information.
Cause: The originator name-value pair is missing from the reginfo string.
Action: Ensure reginfor information conforms to the VeriSign CRS profile
document.
0x3931 14641 PKI_RESTRICTED_KEY_USAGE
Cause: Key Usage requested not allowed.
Action: Only keyEnchpherment and digitalSignature key usages are
allowed.
PKI Errors (Continued)
Code #
PKI Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 95
0x3932 14642 PKI_CHALLENGE_REQUIRED_FOR_END_ENTITY
Cause: A challenge phrase is required.
Action: Make sure it is in the reginfo field
PKI Errors (Continued)
Code #
PKI Errors
Hex Decimal
Secure Channel Library Errors
Code #
Secure Channel Library Errors
Hex Decimal
0x9002 36866 SC_ERROR_SSLC_NOT_SUPPORTED
Cause: Trying to use SSL, but SSL is not supported on this platform. This
is generally caused by passing a non-NULL file name to the very first
VSSC function call.
Action: Error occurs on HP-UX only. Specify no/null file name for the
certificate file in your pestub.cfg and vsaasrv.cfg files.
0x9005 36869 SC_ERROR_SSLC_BIO_NEW
Cause: Failed to create a BIO structure. Host may not be listening at
specified port.
Action: Verify the port is not being used by another host/device. Ensure
specified port is correct.
0x9006 36870 SC_ERROR_SSL_SSL
Cause: SSL handshake error.
Action: Ensure the server is still running and in good state.
0x9007 36871 SC_ERROR_SSL_SYSCALL
Cause: System call error (usually a read or write call error.
Action: Ensure the server is still running and in good state.
Error Codes and Messages
96 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x9008 36872 SC_ERROR_SSL_SOCK_CLOSED
Cause: Zero value returned from a read or write; other end of the socket
was closed or shut down.
Action: For client processes, verify the server did not shut down
abnormally. For server process, verify the client did not shut down
abnormally.
0x900c 36876 SC_ERROR_SSLC_READ_CERTIFICATE
Cause: Failed to read server certificate. Could not access the certificate
file, or certificate is formatted incorrectly.
Action: Ensure the server pem file exists, and the permissions allow (at
least) read access for the server process.
0x900d 36877 SC_ERROR_SSLC_READ_PRIVATE_KEY
Cause: Failed to read the private key. Password to decrypt private key not
correct, or private key is not formatted correctly.
Action: Ensure password is correct in related configuration file. Ensure
that the private key was pasted into the server pem file correctly.
0x900e 36878 SC_ERROR_SSLC_CHECK_PRIVATE_KEY
Cause: Failed to verify private key. Password to decrypt private key not
correct, or private key is not formatted correctly.
Action: Ensure password is correct in related configuration file. Examine
the server pem file. Non-matching certificate and private key may be in
same file.
0x9011 36881 SC_ERROR_SSLC_LOAD_ROOT_FILE
Cause: Failed to load the root certificate file, possibly due to failure to
access the file.
Action: Ensure the root pem file exists, and the permissions allow (at
least) read access for the client process
Secure Channel Library Errors (Continued)
Code #
Secure Channel Library Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 97
0x9013 36883 SC_ERROR_CANNOT_VERIFY_SERVER_DNS_NAME
Cause: Failed to verify the server DNS name. The server host name
specified in the pestub.cfg file does not match the common name in the
server certificate.
Action: Ensure the server name specified in the pestub.cfg file is the
correct and fully qualified DNS name. Ensure the certificate common
name matches the fully qualified DNS name.
Secure Channel Library Errors (Continued)
Code #
Secure Channel Library Errors
Hex Decimal
Front End Errors
Code #
SFront-end ErrorSecure Server Enrollment and
SMIME Enrollment
Hex Decimal
0x9500 38144 SS_REQUEST_MISSING
Cause: CSR is not provided to request a server certificate.
Action: An error page returned to ask for CSR.
0x9501 38145 SS_INVALID_SIGNATURE
Cause: PKCS10 contains invalid signature.
Action: Error page is returned to user.
0x9502 38146 SS_ATTRIBUTES_OBJECT
Cause: PKCS10 contains bad attributes.
Action: Error page notifies user.
0x9503 38147 SS_BER_ENCODING
Cause: PKCS10 has BER encoding error.
Action: Error page notifies user.
0x9504 38148 SS_UNSUPPORTED_SIG_ALG
Cause: User used unsupported signature algorithm.
Action: Error page asks user to use supported signature algorithm.
Error Codes and Messages
98 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x9505 38149 SS_MISSING_COMMON_NAME
Cause: PKCS10 does not contain common_name.
Action: Error page asks user to re-submit a CSR that does contain
common_name.
0x9506 38150 SS_MISSING_ORG
Cause: PKCS10 does not contain organization.
Action: Error page asks user to re-submit a CSR that does contain
organization.
0x9507 38151 SS_MISSING_COUNTRY
Cause: PKCS10 does not contain country.
Action: Error page asks user to re-submit a CSR that does contain
country.
0x9508 38152 SS_MISSING_STATE
Cause: PKCS10 does not contain state.
Action: Error page asks user to re-submit a CSR that does contain state.
0x9509 38153 SS_INVALID_LOCALITY
Cause: The value of locality specified in PKCS10 is not valid.
Action: Ask user to give a valid locality.
0x950a 38154 SS_MISSING_STATE_OR_LOCALITY
Cause: Either state or locality is missing. At least one must exist in
PKCS10.
Action: Ask user to re-submit CSR that contains at least one.
0x950b 38155 SS_INVALID_STATE
Cause: PKCS10 does not have a valid state value.
Action: Ask user to re-submit CSR that has a valid state.
0x950c 38156 SS_INVALID_COUNTRY
Cause: Country name in PKCS10 is not valid.
Action: Ask user to re-submit CSR with a correct two-letter country name
code.
Front End Errors (Continued)
Code #
SFront-end ErrorSecure Server Enrollment and
SMIME Enrollment
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 99
0x950d 38157 SS_INVALID_DN_ORDER
Cause: The order of the DN field in PKCS10 is not correct.
0x950e 38158 SS_INVALID_COMMON_NAME
Cause: Common_name contains invalid characters like ?, *, :
Action: Ask user to re-submit a corrected CSR.
0x950f 38159 SS_COMMON_NAME_IS_IPADDRESS
Cause: User uses an IP address for common_name field.
Action: Ask user not to use IP address as common_name.
0x9510 38160 SS_MISSING_EMAIL_ADDRESS
Cause: Email address is not in PKCS10.
Action: Ask user to put email address in PKCS10.
0x9511 38161 BINARY_PKCS10_NOT_SET
Cause: PKCS10 is not set in CSR.
Action: Ask user to re-submit CSR.
0x9512 38162 SS_INVALID_COMMON_NAME_HEADER
Cause: Common_name uses header http, https, and so on.
Action: Ask user to re-construct PKCS10.
0x9999 39321 eECAS_CERT_REVOKE_SUCCESS
Cause: Successful code.
Action: No action is required.
Front End Errors (Continued)
Code #
SFront-end ErrorSecure Server Enrollment and
SMIME Enrollment
Hex Decimal
Error Codes and Messages
100 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
RecordUp Errors
Code #
RecordUp Errors
Hex Decimal
0xb000 45056 eECAS_MSG_RECORDED
Cause: RECORD message successfully recorded.
Action: No action is required.
AutoAdministration Errors
Code #
AutoAdministration Errors
Hex Decimal
0xA000 40960 VSAA_SUCCESS
Cause: No error.
Action: No action is required.
0xA001 40961 VSAA_VERIFY_FAILED
Cause: The Authentication server cannot authenticate this request.
Exchange integration: the enrollment request does not match with that in
the GAL.
Action: Contact the OnSite administrator.
0xA003 40963 VSAA_SIGN_FAILED
Cause: Internal error.
Action: Call VeriSign technical support.
0xA004 40964 VSAA_UPDATE_FAILED
Cause: Internal error.
Action: Call VeriSign technical support.
0xA005 40965 VSAA_OUT_OF_MEMORY
Cause: Cannot allocate additional memory.
Action: Ensure that there is enough free memory for the process; check
for incorrect AutoAdmin.509 and/or CACert.509 files.
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 101
0xA006 40966 VSAA_INVALID_CERT
Cause: Cannot read the certificate specified in vsautoauth.conf; the
certificate specified in vsautoauth.conf is invalid; or the certificate in the
cert_base64 name-value pair is invalid.
Action: If this error is returned after calling VSAA_Encode*() functions,
ensure that all certs are specified in the vsautoauth.conf. These files
should contain the binary X.509 cert. If this error is returned after calling
VSAA_DecodeCert() functions, ensure that the value associated with the
name-value pair cert_base64 is a base-64 encoded X.509 certificate.
0xA007 40967 VSAA_HARD_ERROR
Cause: An error is encountered after trying to sign, verify, encrypt, or
decrypt data.
Action: Confirm you certificate chain is complete and none of your
certificates are expired. Add the VSAA_SetDebugLog() function before
invoking other functions to log additional errors.
0xA008 40968 VSAA_BAD_CONFIG_FILE
Cause: Cannot open pestub.cfg or vsautoauth.conf. The content of the
file is invalid. Pestub cannot write to the log file.
Action: Ensure that pestub.cfg is readable by Sophialite. Ensure that the
log file specified in pestub.cfg is writable by Sophialite.
AutoAdministration Errors (Continued)
Code #
AutoAdministration Errors
Hex Decimal
Error Codes and Messages
102 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0xA009 40969 VSAA_CANNOT_LOGIN
If caused by Hardware Signing
Cause: Cannot login to the Luna card. The Luna card that you are using
may not be initialized properly. The Luna driver may not be properly
installed or the version may be incorrect.
Action: Verify that the Luna drivers are installed correctly and that the
Luna test program can communicate with the token. Contact VeriSign
technical support.
Software Signing
Verify that the path to your signing files is correct in your vsautoauth.conf
file.
Action: From the command line, run swimport - dump and verify the
contents of your signers. Check to see that all the certificates are for the
correct system. Make sure that you are using pilor certificates for pilot,
production certificates for production, and so on. Verify that your own RA
certificate name matches between the vsautoauth.conf and your
swimport -dump output.
0xA00A 40970 VSAA_SIGNER_NOT_INITED
Cause: The VSAA_Encode/Decode function is invoked without invoking
VSAA_InitSigner().
Action: Ensure that the VSAA_InitSigner() function is invoked before
calling any VSAA_Encode/Decode() functions.
AutoAdministration Errors (Continued)
Code #
AutoAdministration Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 103
0xA00B 40971 VSAA_INTERNAL_ERROR
Cause: This is a generic or fall-through error. Any error situation that does
not specifically have an error code defined for it will return A00B error. The
error may appear differently in the pestub.out and vsaasrv.out files
depending on the circumstances that are causing the problem.
Action: To troubleshoot this error, you have to gather the following
information:
- The full transaction log for this enrollment from the pestub.out and
vsaasrv.out files.
- Description of the auto-admin set up, such as the type of authenticating
server.
- The circumstances under which the error occurred. Does this affect
only one user or multiple users? If previously you had successful
enrollments, now all of them fail, what has changed since then.
- Call VeriSign technical support.
0xA00C 40972 VSAA_NO_PUBKEY
Cause: No public_key name-value pair in request.
Action: Ensure that the public key name-value pair is included in the
request list.
0xA00D 40973 VSAA_BAD_MSG
Cause: The CertRep is invalid.
Action: Call VeriSign technical support.
0xA00D 40973 VSAA_BAD_MSG (Sophialite)
Cause: Sophialite: the returned transaction ID does not match the one in
the request.
Action: Call VeriSign technical support.
0xA00E 40974 VSAA_CERT_PENDING
Cause: The certificate has not yet been approved and cannot be picked
up yet.
Action: Try again when the certificate has been approved. Call VeriSign
technical support.
AutoAdministration Errors (Continued)
Code #
AutoAdministration Errors
Hex Decimal
Error Codes and Messages
104 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0xA00F 40975 VSAA_CERT_FAILURE
Cause: Errors occurs during the TCP/IP connection with crs.exe.
Action: Call VeriSign technical support.
0xA010 40976 VSAA_CANNOT_REACH_VS
Cause: The URL given to VSAA_ExchangeMsg() is invalid or the host
name indicated in that URL cannot be reached.
Action: Ensure that the URL is valid.
0xA010 40976 VSAA_CANNOT_REACH_VS (Sophialite)
Cause: Your enrollment pages contain a name/value pair for vsenroll_url,
which is typically configured as part of your customizations from install-nt,
install-sun, or install-hpux script. It should be the full URL to crs.exe at
VeriSign or the Affiliate.
Action: Verify the connectivity between your registration server (Web
server) and VeriSign or the Affiliate.
0xA011 40977 VSAA_BAD_URL
Cause: The URL given to VSAA_ExchangeMsg() is invalid.
Action: Ensure that the host name is valid.
0xA011 40978 VSAA_BAD_URL (sophialite)
Cause: The URL in the vsenroll_url name-value pair is invalid.
Action: Ensure that the value specified in vsenroll_url is valid.
0xA012 40978 VSAA_BAD_CSR
Cause: No CSR name-value pair in the request given to
VSAA_ExchangeMsg(). No certOrCRL name-value
pair in the request given to VSAA_ExtractCert(). No cert_base64
name-value pair in the request given to VSAA_DecodeCert().
Action: Call VeriSign technical support.
0xA012 40978 VSAA_BAD_CSR (sophialite)
Cause: No CSR name-value pair returned from ProcessRequest().
Action: Call VeriSign technical support.
AutoAdministration Errors (Continued)
Code #
AutoAdministration Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 105
0xA013 40979 VSAA_NO_SERVER_URL
Cause: No CSR name-value pair returned from ProcessRequest().
Action: Call VeriSign technical support.
0xA014 40980 VSAA_NO_ISSUER
Cause: No issuerName name-value pair in the request.
Action: Add issuerName name-value pair to the request.
0xA015 40981 VSAA_NO_SERIAL
Cause: No certSerial name-value pair in the request.
Action: Add certSerial name-value pair to the request.
0xA016 40982 VSAA_NO_REASON
Cause: No reason name-value pair in the request.
Action: Add reason name-value pair to the request.
0xA017 40983 VSAA_NO_CHALLENGE
Cause: No challenge name-value pair
in the request.
Action: Add challenge name-value pair to the request.
0xA018 40984 VSAA_NO_COMMENT
Cause: Internal error.
Action: Call VeriSign technical support.
0xA019 40985 VSAA_NO_TIME
Cause: No time name-value pair in the request.
Action: Add time name-value pair to the request.
0xA01a 40986 VSAA_UNKNOWN_REASON
Cause: Invalid value associated with the reason name-value pair in the
request. The list of valid reasons are defined in vsverify.h.
Action: Choose a valid reason described in vsverify.h.
AutoAdministration Errors (Continued)
Code #
AutoAdministration Errors
Hex Decimal
Error Codes and Messages
106 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0xA01b 40987 VSAA_BAD_TIME_FMT
Cause: Invalid value associated with the time name-value pair in the
request.
Action: Ensure the time format matches with that described in the Auto.
Admin. documentation.
0xA01e 40990 VSAA_BAD_SERIAL
Cause: Invalid value associated with the certSerial name-value pair in
the request.
Action: Ensure that the value associated with certSerial is numeric.
0xA01f 40991 VSAA_BAD_ISSUER
Cause: Invalid value associated with the issuerName name-value pair in
the request.
Action: Ensure that the value associated with issuerName is valid.
0xA020 40992 VSAA_TIMEDOUT (Sophialite)
Cause: No reply from crs.exe.
Action: Call VeriSign technical support.
0xA01f 40993 VSAA_LOG_FAILED
Cause: Incorrect login information entered.
Action: Re-enter login correctly. Verify login setting and permission for
user.
0xA020 40992 VSAA_SLOT_ID_INVALID
Cause: Slot number specified by vsautoauth.conf is incorrect.
Action: Correct slot number in configuration file.
0xA021 40993 VSAA_PIN_INCORRECT
Cause: User PIN for Luna token is incorrect.
Action: Re-enter pin correctly.
AutoAdministration Errors (Continued)
Code #
AutoAdministration Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 107
0xA022 40994 VSAA_TOKEN _NOT_PRESENT
Cause: Luna token not inserted correctly, is in the wrong slot, or card
reader installed incorrectly.
Action: Re-insert token correctly, or in correct slot. Verify card reader is
installed correctly.
0xA023 40995 VSAA_USER_PIN_NOT_INITIALIZED
Cause: Luna token not initialized properly.
Action: Contact VeriSign technical support.
0xA024 40996 VSAA_PRIVATE_KEY_NOT_FOUND
Cause: RA certificate specified in vsautoauth.conf doesnt have a
corresponding private key on the Luna token.
Action: Private key not generated on Luna token, or wrong Luna token
inserted.
0xA025 40997 VSAA_CERT_EXPIRED_OR_NOT_FOUND
Cause: Either the RA or AutoAdmin.509 certificate is expired or does not
exist on the target system (as specified in the vsautoauth.conf file).
Action: Ensure certificate exists on target system, is not expired, and is
specified correctly in the vsautoauth.conf file.
0xA026 40998 VSAA_CAN_NOT_DECRYPT
Cause: The reply is not a BER encoded CertRep. In most cases, this is
the HTML reply from the Web server due to invalid CGI, CGI abnormal
termination, or CGI timeout.
Action: Ensure value for vsenroll_url in enrollment.fdf file is a valid URL for
crs.exe.
0xA026 40998 VSAA_CAN_NOT_DECRYPT (Sophialite)
Cause: The reply is not a BER encoded CertRep. In most cases, this is
the HTML reply from the Web server due to invalid CGI, CGI abnormal
termination, or CGI timeout.
Action: Ensure Sophialite is not blocked from creating session by proxy
server.
AutoAdministration Errors (Continued)
Code #
AutoAdministration Errors
Hex Decimal
Error Codes and Messages
108 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0xA027 40999 VSAA_CERT_EXPIRED
Cause: One of the certificates: RA Admin certificate, AutoAdmin
certificate (AutoAdmin.509), Admin CA certificate (caCert.509) or Root
certificate (root.509) has expired.
Action: Use certinfo or a similar tool to determine which certificate
has expired. If the expired certificate is an RA Admin certificate, renew it,
else contact VeriSign technical support.
0xA028 41000 VSAA_BAD_VERSION_LUNA_DRIVER
Cause: The version of Luna driver installed in your system is incorrect.
Action: Contact VeriSign technical support
0xA064 41060 VSAA_ERR_CFG
Cause: General configuration error in vsaasrv.cfg file.
Action: Ensure that file exists, has correct permission, and the contents
are correct.
0xA065 41061 VSAA_ERR_CFG_FILE_OPEN
Cause: Cannot open the vsaasrv.cfg file.
Action: Ensure that file exists and has correct permission.
0xA066 41062 VSAA_ERR_CFG_ENTRY_MISSING
Cause: Required entry missing in vsaasrv.cfg file.
Action: Add missing entry to configuration file.
0xA067 41063 VSAA_ERR_CFG_ENTRY_NOT_FOUND
Cause: No entry found in data source.
Action: Contact OnSite administrator.
0xA068 41064 VSAA_ERR_CFG_DUPL_ENTRIES
Cause: Duplicate entry found in data source.
Action: Contact OnSite administrator.
0xA069 41065 VSAA_ERR_CFG_FILE_LINE_TOO_LONG
Cause: Line in vsaasrv.cfg exceeds maximum length.
Action: Correct line in vsaasrv.cfg file.
AutoAdministration Errors (Continued)
Code #
AutoAdministration Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 109
0xA06a 41066 VSAA_ERR_CFG_ILLEGAL_SPACE_MARKER
Cause: Brackets ([,]) used to delineate spaces in vsaasrv.cfg file
incorrect.
Action: Examine vsaasrv.cfg file. Use bracket pairs to delineate spaces.
0xA06b 41067 VSAA_ERR_LOAD_DLL
Cause: Failed to load dll file specified in vsaasrv.cfg file.
Action: Examine log file for name of dll causing error. Verify existence,
path, or permission of dll file.
0xA06c 41068 VSAA_ERR_QUERY_DLL_API
Cause: Failed to find required API in given dll.
Action: Examine log file for name of dll causing error. Verify API required
by AA server is present and implemented correctly.
0xA06d 41069 VSAA_ERR_INVALID_DATA
Cause: Enrollment data input by user is incorrect.
Action: Re-enter enrollment data correctly.
0xA06e 41070 VSAA_ERR_CERTIFICATE_NOT_GIVEN
Cause: Certificate is not available to registration data source.
Action: Contact OnSite administrator.
0xA06f 41071 VSAA_ERR_BASE64
Cause: Data improperly encoded/decoded (internal data error).
Action: Contact OnSite administrator.
0xA0c8 41160 VSAA_LDAP_ERR
Cause: General/unknown error accessing the LDAP directory.
Action: Correct the LDAP server settings in vsaasrv.cfg file.
0xA0c9 41161 VSAA_LDAP_ERR_CFG
Cause: Configuration error in vsaasrv.cfg file.
Action: Correct the LDAP section in vsaasrv.cfg file
AutoAdministration Errors (Continued)
Code #
AutoAdministration Errors
Hex Decimal
Error Codes and Messages
110 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0xA0ca 41162 VSAA_LDAP_ERR_INIT
Cause: Could not initiate an LDAP session.
Action: Check LDAP server settings and availability.
0xA0cb 41163 VSAA_LDAP_ERR_BIND
Cause: Cannot connect to LDAP server.
Action: Re-enter login information correctly. Verify that vsaasrv.cfg file
has proper privilege to access LDAP server (check *_LDAP_BIND_DN
and *_LDAP_BIND_PWB variables)
0xA0cc 41164 VSAA_LDAP_ERR_SEARCH
Cause: Search parameters are incorrect.
Action: Examine search settings in vsaasrv.cfg file (check
*_LDAP_BASE_DN variable).
0xA0cd 41165 VSAA_LDAP_ERR_INVALID_DATA
Cause: User input invalid data
Action: Re-enter data correctly. Contact OnSite administrator.
0xA0ce 41166 VSAA_LDAP_ERR_CFG_BINDDN
Cause: Error in binding DN data.
Action: Re-enter data correctly. Examine *_LDAP_BIND_DN variable in
vsaasrv.cfg file.
0xA0cf 41167 VSAA_LDAP_ERR_AUTH_ATTR_NOT_FOUND
Cause: Verification attribute not defined in vsaasrv.cfg file
Action: Correct LDAP_ATTR_VER variable in vsaasrv.cfg file.
0xA0d0 41168 VSAA_LDAP_ERR_AUTH_ATTR_NOT_QUALIFY
Cause: Setting for LDAP_ATTR_VER variable not qualified in
vsaasrv.cfg file; authentication was rejected
Action: Correct LDAP_ATTR_VER variable in vsaasrv.cfg file.
0xA0d1 41169 VSAA_LDAP_ERR_HOSTNAME_NULL
Cause: LDAP directory server host name not specified.
Action: Correct LDAP section of vsaasrv.cfg file.
AutoAdministration Errors (Continued)
Code #
AutoAdministration Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 111
0xA0d2 41170 VSAA_LDAP_ERR_PORT_MISSING
Cause: LDAP directory server port number not specified.
Action: Correct LDAP section of vsaasrv.cfg file.
0xA12c 41260 VSAA_ODBC_ERR
Cause: General/unknown error accessing ODBC database.
Action: Check that ODBC section vsaasrv.cfg file has correct permission
to access ODBC database and is configured correctly.
0xA12d 41261 VSAA_ODBC_ERR_OPEN_CONNECTION
Cause: Failed to open connection to ODBC database.
Action: Re-enter login information correctly. Correct login settings in
ODBC section of vsaasrv.cfg.
0xA12e 41262 VSAA_ODBC_ERR_OPEN_CURSORCause: Failed to open database cur-
sor.
Action: Correct database settings (system error).
0xA12f 41263 VSAA_ODBC_ERR_CFG
Cause: Configuration error in ODBC section of vsaasrv.cfg.
Action: Examine vsaasrv.cfg file and correct as needed.
0xA130 41264 VSAA_ODBC_ERR_CFG_SQL
Cause: Error or invalid setting for ODBC_SQL_FROM_WHERE variable
in vsaasrv.cfg file.
Action: Correct ODBC_SQL_FROM_WHERE variable in vsaasrv.cfg file.
AutoAdministration Errors (Continued)
Code #
AutoAdministration Errors
Hex Decimal
Digital Notarization Errors
Code #
Digital Notarization Errors
Hex Decimal
0x9300 37632 eTIMESTAMP_BAD_CONTENT_TYPE
Cause: Request has a bad content type
Action: Reject clients request
Error Codes and Messages
112 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x9301 37633 eTIMESTAMP_BAD_CONTENT_LENGTH
Cause: Request has a bad content length
Action: Reject clients request
0x9302 37634 eTIMESTAMP_READ_CLIENT_DATA_ERROR
Cause: Clients header doesnt match data buffer
Action: Reject clients request
0x 9303 37635 eTIMESTAMP_INTERNAL_ERROR
Cause: Internal error
Action: Reject clients request
0x9304 37636 eTIMESTAMP_REQUEST_NOT_SIGNED
Cause: Request is not signed
Action: Reject clients request
0x9305 37637 eTIMESTAMP_REQUEST_SIGNATURE_UNVERIFIED
Cause: Request has used an algorithm the server doesnt support
Action: Reject clients request
0x9306 37638 eTIMESTAMP_UNAUTHORIZED
Cause: Time source not available
Action: Reject clients request
0x9307 37639 eTIMESTAMP_REQUESTOR_CERT_UNKNOWN
Cause: The request is not a signed pkcs7
Action: Reject clients request
0x9308 37640 eTIMESTAMP_REQUESTOR_CERT_WRONG_TYPE
Cause: Request signature doesnt match the cert
Action: Reject clients request
0x9309 37641 eTIMESTAMP_REQUESTOR_CERT_INVALID
Cause: Requestor doesnt have a valid account
Action: Reject clients request
Digital Notarization Errors (Continued)
Code #
Digital Notarization Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 113
0x930a 37642 eTIMESTAMP_REQUESTOR_CERT_REVOKED
Cause: Requestor cert is revoked
Action: Reject clients request
0x930b 37643 eTIMESTAMP_REQUESTOR_CERT_EXPIRED
Cause: Requestor cert is expired
Action: Reject clients request
0x930c 37644 eTIMESTAMP_REQUESTOR_CERT_PENDING
Cause: Requestor cert is not valid yet
Action: Reject clients request
0x930d 37645 eTIMESTAMP_UNSUPPORTED_ATTRIBUTE
Cause: Request uses an attribute that is not supported (only for
Microsoft authenticode timestamping)
Action: Reject clients request
0x930e 37646 eTIMESTAMP_DB_MISSING_DATA
Cause: Dictionary returned by QM doesnt have the requested data
Action: Internal error. Most likely the sql template is missing some
expected columns
0x930f 37647 eTIMESTAMP_ACCOUNT_NOT_FOUND
Cause: Client doesnt have an account for using the service
Action: Reject clients request
0x9310 37648 eTIMESTAMP_ACCOUNT_NOT_NORMAL
Cause: Client has an account but its status is not valid
Action: Reject clients request
0x9311 37649 eTIMESTAMP_TRANSACTION_LIMIT_REACHED
Cause: Clients has used up the number of transaction they
purchased.
Action: Reject clients request
Digital Notarization Errors (Continued)
Code #
Digital Notarization Errors
Hex Decimal
Error Codes and Messages
114 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x9312 37650 eTIMESTAMP_OPEN_FILE_FAILED
Cause: Cannot open a file for writing the log info
Action: Most likely user doesnt have enough privilege or the directory
$ECASINSTALL/timestamp/audit doesnt exist.
0x9313 37651 eTIMESTAMP_WRITE_FILE_FAILED
Cause: Failure on writing a log file
Action: Check disk space and permission on the time stamping
server.
0x9314 37652 eTIMESTAMP_SSL_NOT_SUPPORTED
Cause: Requestor has reach the transaction limit
Action: Return unauthorized
0x9316 37654 eTIMESTAMP_BADFORMED_REQUEST
Cause: Server could not write into a file
Action: Check system set up
0x9317 37655 eTIMESTAMP_BAD_DATAFORMAT
Cause: Request has an incorrectly formatted messageImprint
Action: Reject clients request
0x9318 37656 eTIMESTAMP_TIME_NOT_AVAILABLE
Cause: Any component of the time stamping service is not available,
e.g. signing server is down, qm is down, etc.
Action: Check if Signing server or QM is down.
0x9319 37657 eTIMESTAMP_UNACCEPTED_POLICY
Cause: Clients request has an unacceptable policy
Action: Reject clients request with appropriate failure info
0x931a 37658 eTIMESTAMP_UNACCEPTED_EXTENSION
Cause: Clients request has an extension field that is not accepted.
Action: Reject clients request with appropriate failure info
Digital Notarization Errors (Continued)
Code #
Digital Notarization Errors
Hex Decimal
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 115
0x931b 37659 eTIMESTAMP_ADDINFO_NOT_AVAIL
Cause: Clients is requesting some additional info using it extension
field and it is not available
Action: Reject clients request with appropriate failure info
0x9330 37680 eTIMESTAMP_ASN_ENCODE_ERR
Cause: Error happened when doing asn.1 encoding.
Action: Internal error. should not happen normally.
0x9331 37681 eTIMESTAMP_ASN_DECODE_ERR
Cause: Error happened when decoding a message.
Action: Most likely the clients request is not correctly encoded.
Otherwise it would be a bug.
Digital Notarization Errors (Continued)
Code #
Digital Notarization Errors
Hex Decimal
Error Codes and Messages
116 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
Figure 1-1 Troubleshooting for code
Chapter 1 Error Codes and Messages
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 117
Figure 1-2 Troubleshooting for code 0x4027
Error Codes and Messages
118 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 119
C H A P T E R 2
Cha pte r 2 CA Key Management Tool Error
Codes
This document contains a complete list of CA Key Management Tool (CASH)
error codes, organized numerically by code, and grouped by error type where
possible.
CASH: TIPEM Errors
Code # TIPEM Errors
Hex Decimal
0x100 256 TE_ALLOC
Cause: Insufficient memory
0x101 257 TE_ASN_SIGNATURE
Cause: Invalid signature on certificate or CRL
0x102 258 TE_ATTRIBUTES_OBJ
Cause: Invalid attributes object
0x103 259 TE_ATTRIBUTE_COUNT
Cause: Invalid number of values for attribute type
0x104 260 TE_ATTRIBUTE_NOT_FOUND
Cause: Requested attribute not in attributes object
0x105 261 TE_ATTRIBUTE_TAG
Cause: Invalid attribute value tag
0x106 262 TE_ATTRIBUTE_TYPE
Cause: Unknown attribute type
Error Codes and Messages
120 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x107 263 TE_ATTRIBUTE_VALUE
Cause: Invalid attribute value
0x108 264 TE_ATTRIBUTE_VALUE_LEN
Cause: Invalid attribute value length
0x109 265 TE_BEGIN_PEM
Cause: Could not find the beginning of the privacy enhanced
message
0x10a 266 TE_BER_ENCODING
Cause: This file is improperly encoded.
0x10b 267 TE_CANCEL
Cause: Operation cancelled
0x10c 268 TE_CERT_CHAIN
Cause: A certificate chain could not be constructed
0x10d 269 TE_CERT_ENCODING
Cause: Invalid certificate encoding
0x10e 270 TE_CERT_OBJ
Cause: Invalid certificate object
0x10f 271 TE_CO_SET
Cause: Invalid co set
0x110 272 TE_CRL_ENCODING
Cause: Invalid CRL encoding
0x111 273 TE_CRL_OBJ
Cause: Invalid CRL object
0x112 274 TE_DATA
Cause: Generic data error
0x113 275 TE_DBASE
Cause: Fatal database interface error
CASH: TIPEM Errors
Code # TIPEM Errors
Hex Decimal
Chapter 2 CA Key Management Tool Error Codes
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 121
0x114 276 TE_DEK_ALG_NOT_SUPPORTED
Cause: Unsupported data encryption algorithm
0x115 277 TE_DEK_ALG_UNKNOWN
Cause: Unknown data encryption algorithm
0x116 278 TE_DIGEST_OBJ
Cause: Invalid digest object
0x117 279 TE_ENHANCED_TEXT_STREAM
Cause: Fatal I/O interface error in enhanced text stream
0x118 280 TE_EOS
Cause: End of stream
0x119 281 TE_EXPONENT_EVEN
Cause: Even exponent not permitted in public or private key
0x11a 282 TE_EXPONENT_LEN
Cause: Invalid exponent length in public or private key
0x11b 283 TE_HARDWARE
Cause: Cryptographic hardware error
0x11c 284 TE_HEADER
Cause: Syntax error in the encapsulated header of a
privacy-enhanced message
0x11d 285 TE_INDEX
Cause: Index is out of range
0x11e 286 TE_INPUT_LEN
Cause: Invalid length for input data
0x11f 287 TE_INPUT_STREAM
Cause: Fatal I/O interface error in input stream
0x120 288 TE_IO
Cause: Fatal I/O interface error
CASH: TIPEM Errors
Code # TIPEM Errors
Hex Decimal
Error Codes and Messages
122 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x121 289 TE_LIST_OBJ
Cause: Invalid list object
0x122 290 TE_MEMORY_OBJ
Cause: Invalid internal memory object
0x123 291 TE_MESSAGE_SIGNATURE
Cause: Signature does not verify.\nThe file has been
modified or the signature is not associated with this file.
0x124 292 TE_ME_SET
Cause: Invalid me set
0x125 293 TE_MIC_ALG_NOT_SUPPORTED
Cause: Unsupported message digest algorithm
0x126 294 0x126 TE_MIC_ALG_UNKNOWN
Cause: Unknown message digest algorithm
0x127 295 TE_MODULUS_LEN
Cause: Invalid modulus length in public or private key
0x128 296 TE_NAME_OBJ
Cause: specified Signer file is invalid or corrupt or does not
match its approval.
0x129 297 TE_NEED_RANDOM
Cause: Insufficient seeding of the random object screen for
a few moments and retry.
0x12a 298 TE_NOT_FOUND
Cause: Certificate, private key or CRL was not found
0x12b 299 TE_NOT_ME
Cause: Recipient of incoming message not among potential
recipients
0x12c 300 TE_NOT_SUPPORTED
Cause: Unsupported operation was requested
CASH: TIPEM Errors
Code # TIPEM Errors
Hex Decimal
Chapter 2 CA Key Management Tool Error Codes
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 123
0x12d 301 TE_OUTPUT_LEN
Cause: Invalid length for output data
0x12e 302 TE_OUTPUT_STREAM
Cause: Fatal I/O interface error in output stream
0x12f 303 TE_OVER_32K
Cause: Data block exceeds 32
0x130 304 TE_PARAMETER
Cause: Invalid parameter
0x131 305 TE_PASSWORD
Cause: Invalid password entered for this signer.
0x132 306 TE_PBE_ALG_NOT_SUPPORTED
Cause: Unsupported password-based encryption algorithm
0x133 307 TE_PBE_ALG_UNKNOWN
Cause: Unknown password-based encryption algorithm
0x134 308 TE_PKCS_INPUT_STREAM
Cause: Fatal I/O interface error in PKCS input stream
0x135 309 TE_PKCS_OUTPUT_STREAM
Cause: Fatal I/O interface error in PKCS output stream
0x136 310 TE_PKCS_STREAM
Cause: Fatal I/O interface error in PKCS stream
0x137 311 TE_PRIVATE_KEY
Cause: invalid private key format
0x138 312 TE_PROCESS
Cause: Invalid message process type
0x139 313 TE_PROTECTED_DATA
Cause: Invalid encoding of protected data
CASH: TIPEM Errors
Code # TIPEM Errors
Hex Decimal
Error Codes and Messages
124 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x13a 314 TE_PUBLIC_KEY
Cause: Invalid public key format
0x13b 315 TE_RANDOM_OBJ
Cause: Invalid random object
0x13c 316 TE_SIGNATURE_ALG_NOT_SUPPORTED
Cause: Unsupported certificate or CRL signature algorithm
0x13d 317 TE_SIGNATURE_ALG_UNKNOWN
Cause: Unknown certificate or CRL signature algorithm
0x13e 318 TE_TEXT_ENCODING
Cause: Syntax error in encapsulated text of a
privacy-enhanced message
0x13f 319 TE_TEXT_STREAM
Cause: Fatal I/O interface error in text stream
0x140 320 TE_TOKEN
Cause: Argument expected to be a defined constant is
invalid
0x141 321 TE_VERSION
Cause: Invalid certificate, CRL or message version
0x143 323 TE_VALIDITY
Cause: The certificate or CRL validity is invalid
0x142 322 TE_YOU_SET
Cause: Invalid you set
0x159 345 TE_SECRETS_DONT_MATCH
Cause: These shares are not for the same secret.
0x145 325 TE_INVALID_AUTHORITY_KEY_ID
Cause: The authority key identifier extension is either invalid
or missing.
CASH: TIPEM Errors
Code # TIPEM Errors
Hex Decimal
Chapter 2 CA Key Management Tool Error Codes
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 125
0x146 326 TE_INVALID_KEY_USAGE
Cause: The key usages extension is either invalid or
missing.
0x147 327 TE_INVALID_BASIC_CONSTRAINT
Cause: The basic constraint extension is either invalid or
missing.
0x148 328 TE_INVALID_PRIVATE_KEY_USAGE
Cause: The private key usage period extension is either
invalid or missing.
0x149 329 TE_INVALID_CERT_TYPE
Cause: The certificate type extension is either invalid or
missing.
0x14b 331 TE_INVALID_HASHED_ROOT_KEY
Cause: The hashed root key extension is either invalid or
missing.
0x18b 395 TE_INVALID_CERT_POLICY
Cause: The certificate policy extension is either invalid or
missing.
0x15b 347 TE_BRAND_NAME_NOT_MATCH
Cause: The subject's brand name does not match the CA's.
0x15c 348 TE_INVALID_EXTENSION
Cause: The extensions list is invalid.
0x198 408 TE_INVALID_SET_QUALIFIER
Cause: Certificate policy extension contains invalid SET
qualifier
0x199 409 TE_CA_CERT_EXPIRED_OR_PENDING
Cause: The issuer certificate is either expired or in pending
CASH: TIPEM Errors
Code # TIPEM Errors
Hex Decimal
Error Codes and Messages
126 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
CA Key Management Tool (CASH) Errors
Code # CASH Errors
Hex Decimal
0x300 768 ECA_NEXT_UPDATE
Cause: The next update date must be later than the last
update date
0x301 769 ECA_IA_NAME
Cause: Incorrect issuer name
0x600 1536 kCASH_SOFTWARE_ISSUER_CHANGED
Cause: The software CA has changed since you refreshed it.
Action: Refresh, and try again.
0x601 1537 kCASH_PASSWORDS_NOT_EQUAL
Cause: The passwords do not match.
Action: This occurs when attempting to generate a key with
PIN-based encryption, and the passwords entered are not the
same. Check that the correct password is being used and try
again.
0x602 1538 kCASH_NO_ISSUER_LOADED
Cause: No issuer is loaded.
Action: This occurs when attempting to update a CRL without
an active issuer. Activate the issuer, and try again.
0x603 1539 kVSOID_BAD_INPUT
Cause: You have entered an invalid OID.
Action: The Object Identifier (OID) that was entered is not the
correct format. Confirm that the format is correct and try
again.
Chapter 2 CA Key Management Tool Error Codes
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 127
0x604 1540 kVSOID_VALUE_NOT_SET
Cause: Internal error: The OID has not been set.
Action: This occurs when a new extension is created in the
Other Extension tab or in the certificate policy property pages.
Confirm that the required OID field is set by clicking the Set
OID button (in the Other page), or enter a valid OID in the
Certificate Policy page OID field.
0x605 1541 kCASH_MISSING_VALUES
Cause: A required value is missing.
Action: This is an extension configuration error. The Hashed
Public Key field in the HashedRoot Key extension page is not
set. Set it and try again.
0x606 1542 kCASH_BAD_INI_FILE
Cause: The INI file is either corrupt or missing.
Action:CASH.ini is not in the expected format. Exit the tool,
delete the CASH.ini file, and restart the tool.
NOTE: All configuration settings will be lost. Load previously stored
reference file to restore configuration settings.
0x607 1543 kCASH_BAD_EXTENION_PREFERENCES
Cause: An extension is not valid.
Action: This error occurs when using Configure Standard
Extensions. One of the extensions in the Other page is not
valid. Check them and try again.
0x608 1544 kCASH_DUPLICATE_OIDS
Cause: You have more than one extension with the same
OID. Delete one.
Action: This error occurs when using Configure Standard
Extensions. It indicates an attempt to create extensions with
the same OID. Confirm that only one extension is defined for
the OID. This is most likely to occur in the Other page.
CA Key Management Tool (CASH) Errors (Continued)
Code # CASH Errors
Hex Decimal
Error Codes and Messages
128 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x609 1545 kCASH_HARDWARE_ISSUER_CHANGED
Cause: The hardware CA has changed since you refreshed it.
Action: Indicates an attempt to update a CRL, or an attempt to
recertify with a different CA than the one that originally signed
the certificate. Deactivate the current CA and activate the
correct CA.
0x60d 1549 kCASH_PRINTER_ERROR
Cause: There has been an error printing.
0x60e 1550 kCASH_INCORRECT_ISSUER
Cause: The issuer for this CRL is not active on this device.
Either activate the correct issuer or select a different device.
0x60f 1551 kCASH_BOX_IN_USE
Cause: The box is in use by another function.
0x610 1552 kCASH_EXTENSION_NOT_FOUND
Cause: An extension is not found.
Action: There has been an attempt to create a Version 2 CRL
without setting the CRL extension in the extension
configuration, or there has been an attempt to add an
additional policy when the issuer certificate does not include
the Certificate Policy extension. Correct the appropriate error
and try again.
0x611 1553 kCASH_CSV_FORMAT_ERROR
Cause: CSV file format invalid.
0x612 1554 kCASH_CSV_BAD_CERT_TYPE
Cause: CSV File: Human and machine readable cert type are
inconsistent
0x613 1555 kCASH_CSV_BAD_KEY_USAGE
Cause: CSV File: Human and machine readable key usage
are inconsistent
CA Key Management Tool (CASH) Errors (Continued)
Code # CASH Errors
Hex Decimal
Chapter 2 CA Key Management Tool Error Codes
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 129
0x614 1556 kCASH_CSV_MULTIPLE_NAMES
Cause: CSV File: The name has been entered in more than
one format.
0x615 1557 kCASH_CSV_MULTIPLE_KEYS
Cause: CSV File: More than one key name has been
specified.
0x616 1558 kCASH_CSV_NO_NAME
Cause: CSV File: No subject distinguished name has been
specified.
0x617 1559 kCASH_CSV_NO_CERT_FILE
Cause: CSV File: No cert file has been specified.
0x618 1560 kCASH_CSV_NO_OUTPUT_FILE
Cause: CSV File: No output file has been specified.
0x619 1561 kCASH_CSV_NO_KEY
Cause: CSV File: No key name has been specified.
0x61a 1562 kCASH_CSV_NO_REQ_FILE
Cause: CSV File: No request file has been specified.
0x61b 1563 kCASH_CSV_MORE_THAN_ONE_REQ_FILE_TYPE
Cause: CSV File: More than one request file type has been
specified.
0x61c 1564 kCASH_CSV_NO_KEY_NAME
Cause: CSV File: No Issuer key name has been specified.
0x61d 1565 kCASH_BAD_CERT_EXTENSIONS
Cause: Certificate extensions list is invalid.
0x61e 1566 kCASH_BACTH_CERT_NOT_EQUAL_TO_SIGNER
Cause: CSV File: The software signer does not match the cert
file.
CA Key Management Tool (CASH) Errors (Continued)
Code # CASH Errors
Hex Decimal
Error Codes and Messages
130 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x61f 1567 kCASH_BATCH_SIGNER_NOT_ACTIVE
Cause: CSV File: The specified software signer is not loaded.
0x620 1568 kCASH_BATCH_SOFTWARE_KEYS_DONT_MATCH
Cause: CSV File: Software keys don't match.
0x625 1573 kCASH_INVALID_SUBJECT_NAME
Cause: Subject name is invalid.
0x626 1574 kCASH_INVALID_BCI_VALIDITY
Cause: BCI validity is not within the signer certificate's validity.
0x627 1575 kCASH_INVALID_SIGNING_TIME
Cause: Signing time is not within the signer certificate's
validity.
Action: There has been an attempt to sign a SET certificate
with the subject certificates validity period outside of the CAs
validity period. Change the subject certificates validity period
to be within the CAs validity period, and try again.
0x628 1576 kCASH_NO_CRL_SIGNING_CER
Cause: A CRL signing cert can not be found for the signer
Action: There has been an attempt to update a SET CRL, and
the certificate that signed the CRL is not in the CA Key
Management Tool database.
- 1. Add the required certificate to the database.
- 2. Deactivate, and then reactive the signer, then try again.
0x629 1577 kCASH_FOUND_MULTIPLE_CERTS
Cause: Multiple certificates were found for the signer.
0x62a 1578 kCASH_SUBJECT_NAME_NOT_MATCHED
Cause: The signer name does not match the subject name in
the request.
0x62b 1579 kCASH_NOT_A_SELF_SIGNED_CERT
Cause: Failed to add to the trusted roots list: not a self-signed
certificate
CA Key Management Tool (CASH) Errors (Continued)
Code # CASH Errors
Hex Decimal
Chapter 2 CA Key Management Tool Error Codes
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 131
0x62c 1580 kCASH_MISSING_SECRET_SHARE
Cause: There are not enough shares for constructing the
secret.
Action: This occurs when converting from Shares to DER
Shares. The number of shares entered is different from the
Threshold value in the Secret Share dialog box. Confirm that
the threshold value is correct, or enter the threshold number
of shares when prompted by the CA Key Management Tool.
0x630 1584 kCASH_ALREADY_PKCS10_16
Cause: The request already included certificate extension(s).
Action: There has been an attempt to convert a PKCS #10
Version 1.6 to a PKCS #10 Version 1.6. Do nothing.
0x62d 1581 kCASH_UNSUPPORTED_KEY_TYPE
Cause: Key type is unknown or unsupported
0x62e 1582 kCASH_DSA_PARAM_NOT_ACTIVATED
Cause: DSA parameter is not activated
0x62f 1583 kCASH_KEY_LENGTH_NOT_SUPPORTED
Cause: DSA or RSA key length is not supported.
Action: There has been an attempt to add a DSA parameter
(in the General Configuration > DSA Parameter) which has a
key length greater than 1024 bits. The supported maximum
key length for RSA is 2048, and for DSA is 1024.
0x631 1585 kCASH_CREATE_TIPEM_LOG
Cause: Failed to create TIPEM log file.
0x633 1587 kCASH_INVALID_KEY_NAME
Cause: Invalid key name
0x634 1588 kCASH_DUPLICATION_DN
Cause: Duplication of Directory Name in the Subject
Alternative Name
CA Key Management Tool (CASH) Errors (Continued)
Code # CASH Errors
Hex Decimal
Error Codes and Messages
132 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x635 1589 kCASH_DUPLICATION_KEYNAME
Cause: The Key Name has already been used
0x636 1590 kCASH_DATA_NOT_AVAILABLE
Cause: The data is not available
0x637 1591 kCASH_UNSUPPORT_REQ_FILE
Cause: The kind of request file is not supported
0x638 1592 kCASH_CERT_ALREADY_SIGNED
Cause: The certificate has been signed
0x639 1593 kCASH_MISMATCH_TYPE
Cause: Mismatch type between the signer and the requested
record
0x63a 1594 kCASH_SKI_NOT_FOUND
Cause: The subject key identifier can not be found in the CA
certificate
0x63b 1595 kCASH_NO_EXTENSIONS
Cause: There are no extensions to be included in the request.
0x63c 1596 kCASH_MULTIPLE_CDP_NOT_SUPPORTED
Cause: Multiple CRL Distribution Points is not supported.
0x63e 1598 kCASH_SET_INVALID_AKI
Cause: SET: Invalid Authority Key Identifier extension
0x63f 1599 kCASH_INVALID_SET_POLICY
Cause: SET: Invalid SET certificate policy
0x640 1600 kCASH_HAS_SET_EXTENSION
Cause: General extensions list includes SET extension
0x641 1601 kCASH_HAS_NON_SET_EXTENSION
Cause: SET extensions list includes non-SET extension
CA Key Management Tool (CASH) Errors (Continued)
Code # CASH Errors
Hex Decimal
Chapter 2 CA Key Management Tool Error Codes
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 133
0x642 1602 kCASH_CERT_HAS_CRL_EXTENSION
Cause: Certificate extensions list includes CRL extension
0x643 1603 kCASH_CRL_HAS_CERT_EXTENSION
Cause: CRL extensions list includes certificate extension
0x644 1604 kCASH_SECRET_SHARE_VERSION
Cause: Error reading the secret share. It may not be of
version 1.0
CA Key Management Tool (CASH) Errors (Continued)
Code # CASH Errors
Hex Decimal
CA Key Management Tool LUNA Errors
Code # LUNA Errors
Hex Decimal
kLUNA_BAD_KEYPAIR
Cause: The corresponding Luna public key is not found.
Action: Confirm that the currently active Luna token contains the
correct Issuer.
kLUNA_MORE_THAN_ONE_CA_KEY
Cause: There are more than one keys for the same Luna signer.
Action: Use the Issuer Manager to clone the duplicate key to
another Luna token, then delete the duplicate key.
TE_CA_STATUS_UPDATED
Cause: The certificates and CRLs cache has been updated.
Please reactivate the current issuer.
Action: Logout and login to reactivate the Luna card.
TE_DUPLICATE_EXTENSION
Cause: One of the extension is already included in the extensions
list.
Error Codes and Messages
134 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x0002 2 CKR_HOST_MEMORY
Cause: Luna: Insufficient memory.
0x0003 3 CKR_SLOT_ID_INVALID
Cause: Slot number invalid.
0x0020 32 CKR_DATA_INVALID
Cause: Luna: data is invalid.
0x0021 33 CKR_DATA_LEN_RANGE
Cause: Luna: data length is invalid.
0x0032 50 CKR_DEVICE_ERROR
Cause: Luna: device error
0x0031 49 CKR_DEVICE_MEMORY
Cause: Luna: Insufficient device memory
0x0032 50 CKR_DEVICE_REMOVED
Cause: Luna: token is removed
0x0060 96 CKR_KEY_HANDLE_INVALID
Cause: Luna: Key handle is invalid
0x0070 112 CKR_MECHANISM_INVALID
Cause: Luna: Mechanism is invalid
0x0071 113 CKR_MECHANISM_PARAM_INVALID
Cause: Luna: Mechanism parameter is invalid
0x00a0 160 CKR_PIN_INCORRECT
Cause: Luna: PIN is incorrect
0x00a1 161 CKR_PIN_INVALID
Cause: Luna: PIN is invalid
0x00b1 177 CKR_SESSION_CLOSED
Cause: Luna: Session is closed
CA Key Management Tool LUNA Errors (Continued)
Code # LUNA Errors
Hex Decimal
Chapter 2 CA Key Management Tool Error Codes
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 135
0x00b3 179 CKR_SESSION_HANDLE_INVALID
Cause: Luna: Session handle is invalid
0x00b4 180 CKR_SESSION_PARALLEL_NOT_SUPPORTED
Cause: Luna: Parallel session is not supported
0x00b5 181 CKR_SESSION_READ_ONLY
Cause: Luna: Session is read only
0x00c0 192 CKR_SIGNATURE_INVALID
Cause: Luna: Signature is invalid
0x00c1 193 CKR_SIGNATURE_LEN_RANGE
Cause: Luna: Invalid signature length
0x00e0 224 CKR_TOKEN_NOT_PRESENT
Cause: Luna: Token is not present
0x00e1 225 CKR_TOKEN_NOT_RECOGNIZED
Cause: Luna: Token is not recognized
0x00e2 226 CKR_TOKEN_WRITE_PROTECTED
Cause: Luna: Token is write protected
0x0100 256 CKR_USER_ALREADY_LOGGED_IN
Cause: Luna: User already logged in
0x0102 258 CKR_USER_PIN_NOT_INITIALIZED
Cause: Luna: User PIN is not initialized
0x0101 257 CKR_USER_NOT_LOGGED_IN
Cause: Luna: User is not logged in
0x0103 259 CKR_USER_TYPE_INVALID
Cause: Luna: User type is invalid
0x8000 32768 CKR_VENDOR_DEFINED
Cause: Luna: Vender defined error
CA Key Management Tool LUNA Errors (Continued)
Code # LUNA Errors
Hex Decimal
Error Codes and Messages
136 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5
0x8001 32769 CKR_GENERAL_ERROR
Cause: Luna: General error
0x00a2 162 CKR_PIN_LEN_RANG
Cause: Luna: PIN length is invalid
CA Key Management Tool LUNA Errors (Continued)
Code # LUNA Errors
Hex Decimal
CA Key Management Tool WAP Errors
Code # CASH WAP Errors
Hex Decimal
0x1000 4096 WE_INVALID_PEM_HEADER
Cause: Invalid PEM header
0x1001 4097 WE_INVALID_PEM_FOOTER
Cause: Invalid PEM footer
0x1002 4098 WE_WAP_REQ_VERSION
Cause: Invalid certificate request version
0x1003 4099 WE_INVALID_ENCRYPTION_BLOCK
Cause: Invalid block type 1
0x1004 4100 WE_INVALID_SIGNATURE
Cause: Invalid signature
0x1005 4101 WE_DATA_NOT_AVAILABLE
Cause: Not enough information to finish the task
0x1006 4102 WE_INVALID_ISSUER
Cause: Issuer either has changed or does not match
0x1007 4103 WE_REQ_POP_HEADER
Cause: Invalid certificate request signature header
0x1008 4104 WE_REQ_POP_FOOTER
Cause: Invalid certificate request signature footer
Chapter 2 CA Key Management Tool Error Codes
VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5 137
0x1009 4105 WE_REQ_INVALID_FORMAT
Cause: Invalid certificate request
0x1010 4112 WE_REQ_INVALID_SUBJECT_NAME
Cause: Invalid subject name
CA Key Management Tool WAP Errors
Code # CASH WAP Errors
Hex Decimal
Error Codes and Messages
138 VeriSign, Inc. DOC-ENT-ONS-ERR-0001/Rev.5