26 PKI-01001 to PKI-07023
- PKI-01001
- Missing arguments in the command: {0}
- Category:
- Other
- Cause:
- An incomplete command was issued. For example, the wallet password or wallet location is missing.
- Action:
- Check the usage of the command-line tool and provide all required arguments.
- PKI-01002
- Invalid password.
- Category:
- Other
- Cause:
- Passwords must have a minimum length of eight characters and contain alphabetic characters combined with numbers or special characters.
- Action:
- Make sure the password policy is followed and try again.
- PKI-01003
- Passwords did not match.
- Category:
- Other
- Cause:
- When creating a wallet, the password entered the second time did not match the password entered the first time.
- Action:
- Enter the same password both times.
- PKI-01004
- Cannot specify both keysize and ecccurve options. Please specify keysize for RSA keys, and ecccurve for ECC keys.
- Category:
- Other
- Cause:
- Cannot specify both keysize and ecccurve options. Please specify keysize for RSA keys, and ecccurve for ECC keys.
- Action:
- Specify only one option either keysize or ecccurve
- PKI-02001
- A wallet already exists at: {0}
- Category:
- Other
- Cause:
- Attempted to create a new wallet at a location where a wallet already existed.
- Action:
- Remove the existing wallet, or create the new wallet at another location.
- PKI-02002
- Unable to open the wallet. Check password.
- Category:
- Other
- Cause:
- Wallet password may be wrong.
- Action:
- Try again with the correct password.
- PKI-02003
- Unable to load the wallet at: {0}
- Category:
- Other
- Cause:
- Possible causes include a wrong password, parsing errors, or the wallet file was not found.
- Action:
- Check that the wallet is present at the specified location and the password is correct.
- PKI-02004
- Unable to verify the wallet.
- Category:
- Other
- Cause:
- The wallet may be corrupted.
- Action:
- Make sure you have the right wallet. Try opening the wallet in enterprise manager or by orapki to make sure it is appropriate.
- PKI-02005
- Unable to delete the wallet at: {0}
- Category:
- Other
- Cause:
- Possible causes include insufficient permission or the wallet being used by another person.
- Action:
- Obtain the necessary permission and check that the wallet is not being used.
- PKI-02006
- The specified directory does not exist: {0}
- Category:
- Other
- Cause:
- Wallet creation failed because the specified directory did not exist.
- Action:
- Create the directory prior to the wallet creation.
- PKI-02007
- The specified location is not a directory: {0}
- Category:
- Other
- Cause:
- Wallet creation failed because the specified location was not a directory.
- Action:
- Create the wallet in an existing directory instead.
- PKI-02008
- Unable to modify a read-only Auto-login wallet.
- Category:
- Other
- Cause:
- Attempted to update a read-only Auto-login wallet.
- Action:
- Specify the associated Password-protected (.p12 file) wallet.
- PKI-02009
- Unable to create directory.
- Category:
- Other
- Cause:
- OS error in creating directory.
- Action:
- Check file permissions and disk space.
- PKI-02010
- Invalid MAC for Wallet. Wallet verification failed.
- Category:
- Other
- Cause:
- The wallet is possibly corrupted.
- Action:
- Restore the wallet from a backup or recreate it.
- PKI-02011
- Unable to set file permissions for wallet at {0}
- Category:
- Other
- Cause:
- Wallet permissions could not be set.
- Action:
- Try to save the wallet in a different directory.
- PKI-02012
- Unable to lock file at
- Category:
- Other
- Cause:
- May be file channel get closed or blocked while getting lock on p12 or sso file in wallet.
- Action:
- Try to achieve lock again on wallet.
- PKI-02013
- Unable to create/parse RSA credentials.
- Category:
- Other
- Cause:
- RSA algorithm to create key pair is missing.
- Action:
- A JCE implementation that supports RSA is required.
- PKI-02014
- Unable to create/parse ECC credentials.
- Category:
- Other
- Cause:
- ECC algorithm to create key pair is missing.
- Action:
- A JCE implementation that supports ECC is required.
- PKI-02015
- Trust Flags are not enabled for the wallet.
- Category:
- Other
- Cause:
- Trust flags are getting assigned to certificates but the wallet containing them are not permitted to have trust flags.
- Action:
- Wallet should be trust flag enabled before assigning trust flags to the certificates.
- PKI-02016
- Trust Flags are already enabled for the wallet.
- Category:
- Other
- Cause:
- Trying to enable wallet for trust flag but it is already enabled.
- Action:
- Wallet is already permitted for trust flags.Do not try to enable it again.
- PKI-02017
- Thread %d attempted to release non-existent lock
- Category:
- Other
- Cause:
- Lock does not exist.
- Action:
- Please check the existence of lock before releasing it.
- PKI-02018
- PKCS12 file does not exist.
- Category:
- Other
- Cause:
- PKCS12 file path is not valid or empty in given parameters while importing pkcs12 file.
- Action:
- PKCS12 file path should be valid before importing it.
- PKI-03001
- The entry already exists: {0}
- Category:
- Other
- Cause:
- Attempted to create a new entry with a previously used alias.
- Action:
- Try again with another alias or delete the existing entry.
- PKI-03002
- No entry found for the alias: {0}
- Category:
- Other
- Cause:
- The specified alias was not found in the secret store.
- Action:
- Check the alias name and try again.
- PKI-03003
- Secrets did not match.
- Category:
- Other
- Cause:
- The secret (password) entered the second time did not match the one entered the first time.
- Action:
- Enter the same secret both times.
- PKI-03004
- Unable to load the secret store.
- Category:
- Other
- Cause:
- Possible causes include a wrong password, the secret store file was not found or was corrupted.
- Action:
- Check that the secret store file is present at the specified location and the password is correct.
- PKI-03005
- Unable to load the Java keystore.
- Category:
- Other
- Cause:
- Possible causes include a wrong password, the Java keystore file was not found or was corrupted
- Action:
- Check that the Java keystore file is present at the specified location and the password is correct.
- PKI-03006
- An entry already exists for map {0} and key {1}
- Category:
- Other
- Cause:
- Credentials already exist in Secret store.
- Action:
- Different username and password to be used to store credentials in secret store.
- PKI-03007
- An entry does not exist for map {0} and key {1}
- Category:
- Other
- Cause:
- Credentials do not exist in Secret store.
- Action:
- Credentials need to be stored before modification can be done on them.
- PKI-03008
- The specified credential map name is invalid
- Category:
- Other
- Cause:
- Map name given is not valid.
- Action:
- Map name should be valid.
- PKI-03009
- The specified credential key name is invalid
- Category:
- Other
- Cause:
- Key name is not valid or present.
- Action:
- Key name should be valid.
- PKI-04001
- Invalid Certificate.
- Category:
- Other
- Cause:
- The given certificate did not follow the X509/DER, X509/BASE64, PKCS7/DER, or PKCS7/BASE64 format.
- Action:
- Use a valid certificate format.
- PKI-04002
- No valid key or certificate in the wallet.
- Category:
- Other
- Cause:
- Attempted to use a wallet for authentication/signatures/SSL, but no key or certificate was found in the wallet.
- Action:
- Import certificates into the wallet/keystore or use a self-signed wallet/keystore.
- PKI-04003
- The trusted certificate is already present in the wallet.
- Category:
- Other
- Cause:
- Attempted to import a trusted certificate that already existed in the wallet.
- Action:
- No action required. The trusted certificate is already present in the wallet.
- PKI-04004
- The user certificate is already installed in the wallet.
- Category:
- Other
- Cause:
- Attempted to install a user certificate that already existed in the wallet.
- Action:
- No action required. The user certificate is already installed in the wallet.
- PKI-04005
- No matching certificate request in the wallet.
- Category:
- Other
- Cause:
- Attempted to install a user certificate, but no matching certificate request was found in the wallet.
- Action:
- Make sure that the user certificate is being installed into the wallet where the certificate request was created.
- PKI-04006
- No matching private key in the wallet.
- Category:
- Other
- Cause:
- Attempted to install a user certificate, but no matching private key was found in the wallet.
- Action:
- Make sure that the user certificate is being installed to the wallet where the certificate request was created.
- PKI-04007
- No matching certificate in the wallet for the DN: {0}
- Category:
- Other
- Cause:
- Attempted to access a user certificate, but no matching certificate of the DN was found.
- Action:
- Make sure that a user certificate with the given DN exists in the wallet.
- PKI-04008
- An entry with the specified alias already exists in the wallet: {0}
- Category:
- Other
- Cause:
- Attempted to create a key or import a certificate with an alias, but the alias already existed in the wallet.
- Action:
- Try again with another alias.
- PKI-04009
- No matching private key or certificate request found for the alias: {0}
- Category:
- Other
- Cause:
- Attempted to install a user certificate into a wallet with an alias, but no matching private key / certificate request was found for this alias.
- Action:
- Make sure that the user certificate is being installed with the same alias as the private key / certificate request.
- PKI-04010
- No matching certificate found for the alias: {0}
- Category:
- Other
- Cause:
- Attempted to access a user certificate that is associated with an alias, but no matching certificate was found for this alias.
- Action:
- Make sure that a user certificate exists in the wallet with the given alias.
- PKI-04011
- Cannot remove the certificate request if its associated user certificate is still present in the wallet.
- Category:
- Other
- Cause:
- Attempted to remove a certificate request, but its associated user certificate was still present in the wallet.
- Action:
- Remove the associated user certificate first.
- PKI-04012
- Incomplete certificate chain
- Category:
- Other
- Cause:
- Attempted to install a user certificate whose trusted certificate was not present in the wallet.
- Action:
- Ensure that the CA certificate/Certificate Chain that issued the user certificate is present as trusted certificate in the wallet.
- PKI-04013
- Entry with matching alias not trusted cert.
- Category:
- Other
- Cause:
- Failed to add a trusted certificate into the wallet because the entry with that alias in the keystore was not a trusted cert.
- Action:
- Specify a different alias.
- PKI-04014
- No entry with matching alias is present in wallet/keystore.
- Category:
- Other
- Cause:
- Failed to delete an entry in wallet/keystore because no entry with that alias was present.
- Action:
- Specify the correct alias.
- PKI-04015
- Trusted cert cannot be removed.
- Category:
- Other
- Cause:
- The trusted cert is being used in a certificate chain.
- Action:
- The user cert that has the trusted cert in its certificate chain should be removed first.
- PKI-04016
- No user certificate found in the wallet.
- Category:
- Other
- Cause:
- No user certificate that can be used with SSL was found.
- Action:
- Install a user certificate into the wallet.
- PKI-04017
- Entry identified by alias is not a key entry.
- Category:
- Other
- Cause:
- No entry in wallet/keystore had matching alias.
- Action:
- Use a correct alias.
- PKI-04018
- User cert does not match private key for input alias.
- Category:
- Other
- Cause:
- The private key with matching alias did not match the user certificate.
- Action:
- Use a correct alias.
- PKI-04019
- Certificate uses unsupported Public Key Algorithm %s.
- Category:
- Other
- Cause:
- Key algorithm used is different than RSA or ECC.
- Action:
- RSA and ECC are only supported
- PKI-04020
- The certificate already exists in the given path
- Category:
- Other
- Cause:
- Certificate already exists at given path.
- Action:
- Path should be valid to create a new certificate.
- PKI-04021
- Invalid value(s) of Trust Flags provided.
- Category:
- Other
- Cause:
- Trust flag value(s) provided is/are not according to given ones.
- Action:
- Trust Flags value should be valid one.
- PKI-04022
- Invalid value of Serial Number provided.
- Category:
- Other
- Cause:
- Serial number is not valid. It does not consist of numeric value
- Action:
- Serial number should be valid.
- PKI-04023
- No Matching certificate found for given input parameters.
- Category:
- Other
- Cause:
- No certificate is found for given subject.
- Action:
- Subject should be valid of a existing certificate.
- PKI-04024
- Cannot assign Trust Flags while importing a certificate chain.
- Category:
- Other
- Cause:
- Same Trust flag is getting assigned to all certificates in chain.
- Action:
- All certificates in chain cannot be assigned same trust flag .Correct trust flags need to be assigned.
- PKI-04025
- Unique certificate cannot be identified.
- Category:
- Other
- Cause:
- Multiple certificates with matching parameters exist.
- Action:
- There should be single certificate of matching subject to do modifications on it
- PKI-04026
- Certificate of cert or CRL's signer has expired.
- Category:
- Other
- Cause:
- Certificate has been expired.
- Action:
- Certificate should be valid before getting added to CRL.
- PKI-05001
- Unable to read CRL at: {0}
- Category:
- Other
- Cause:
- CRL was not present at the specified location or CRL was corrupted.
- Action:
- Check the CRL file at the given location.
- PKI-05002
- Unable to write CRL
- Category:
- Other
- Cause:
- Insufficient file permission or insufficient disk space.
- Action:
- Ensure that a file can be created at the specified location.
- PKI-05003
- Untrusted or expired CRL
- Category:
- Other
- Cause:
- The CRL at the user-given location expired or was not signed by a trusted authority.
- Action:
- Get a valid or recent CRL from the CA.
- PKI-05004
- No CRL found for the issuer: {0}
- Category:
- Other
- Cause:
- No CRL issued by the CA was found at the specified CRL location.
- Action:
- Import the specified CA's CRL into the specified location.
- PKI-05005
- CRL symlink failed with the error: {0}
- Category:
- Other
- Cause:
- Failed to set up a symlink for the CRL file.
- Action:
- Make sure that the target CRL file exists and try again.
- PKI-05006
- Unable to find signer for CRL.
- Category:
- Other
- Cause:
- No CA certificate in wallet for the CRL issuer was found.
- Action:
- Add CA certificates from CRL issuer to wallet.
- PKI-05007
- Given CRL already Exists.
- Category:
- Other
- Cause:
- CRL is already present at given path
- Action:
- Valid CRL path should be given to create.
- PKI-07001
- Unable to login to the LDAP server.
- Category:
- Other
- Cause:
- The username or password may be invalid.
- Action:
- Try again with the correct credentials.
- PKI-07002
- Unable to find the LDAP subtree: {0}
- Category:
- Other
- Cause:
- Attempted to search for CRLs from an LDAP server, but the subtree was not found.
- Action:
- Confirm that the CRL file is present at the specified location.
- PKI-07003
- Insufficient privilege to perform the operation in the LDAP server: {0}
- Category:
- Other
- Cause:
- Attempted to perform some operation in the LDAP server for which the user did not have permission.
- Action:
- Obtain the necessary authorization or have an authorized user perform the operation.
- PKI-07004
- Peer sent no certificates.
- Category:
- Other
- Cause:
- The peer sent no certificates (which was needed during handshake).
- Action:
- Check peer configuration.
- PKI-07005
- Untrusted certificate chain.
- Category:
- Other
- Cause:
- No trusted certificate in wallet/keystore for peer certificate was found.
- Action:
- Peer should use a different certificate or import the peer's CA certificate into your wallet.
- PKI-07006
- Invalid certificate signature.
- Category:
- Other
- Cause:
- Certificate signature check failed.
- Action:
- Use a different user certificate/certificate chain on peer.
- PKI-07007
- Certificate is revoked.
- Category:
- Other
- Cause:
- The peer's certificate has been revoked.
- Action:
- Use a different user certificate/certificate chain on peer.
- PKI-07008
- Keysize must be 512 or 768 or 1024 or 2048 or 4096.
- Category:
- Other
- Cause:
- Keysize value given for certificate is not from recommended ones.
- Action:
- Keysize value for RSA should be either 512 or 768 or 1024 or 2048 or 4096.
- PKI-07009
- The elliptic curve name must be one of the fifteen NIST recommended ones.
- Category:
- Other
- Cause:
- elliptic curve values given for certificate is not from supported ones.
- Action:
- Elliptic curve values should be one of recommended ones.
- PKI-07010
- A key size must be specified when creating an RSA key.
- Category:
- Other
- Cause:
- Keysize value has not been provided for RSA key algorithm.
- Action:
- Keysize value is required for RSA key algorithm
- PKI-07011
- A curve name must be specified when creating an EC key.
- Category:
- Other
- Cause:
- Curve name is missing for ECC key algorithm.
- Action:
- Curve name should be provided for ECC key algorithm
- PKI-07012
- Unable to migrate to jks.Trust store password is null.
- Category:
- Other
- Cause:
- Trust store password is missing.
- Action:
- Trust store password is required during jks migration.
- PKI-07013
- Unable to migrate to jks.Key store password or location is null.
- Category:
- Other
- Cause:
- Key store password or location is missing while migrating jks.
- Action:
- Key store password and location are required.
- PKI-07014
- Unable to import private key.
- Category:
- Other
- Cause:
- Error occurred while importing private key to the wallet.
- Action:
- Importing private key is not successful.
- PKI-07015
- Unable to import private key.
- Category:
- Other
- Cause:
- Certificate is missing of which private key needs to be imported.
- Action:
- Certificate is required.
- PKI-07016
- Unable to export private key.
- Category:
- Other
- Cause:
- Private key is not present in wallet for this alias.
- Action:
- Alias should be valid.
- PKI-07018
- Operation is unsuccessful. Alias is missing.
- Category:
- Other
- Cause:
- Alias is missing in given parameters to search certificate
- Action:
- Alias is required.
- PKI-07019
- Unable to export certificate chain
- Category:
- Other
- Cause:
- File to which certificate chain needs to be exported is not present.
- Action:
- File path should be present and be valid.
- PKI-07019
- Unable to export certificate chain.Certificate chain file is not present.
- Category:
- Other
- Cause:
- File to which certificate chain needs to be exported is not present.
- Action:
- File path should be present and be valid.
- PKI-07020
- Unable to export certificate chain. Certificate chain is not present in wallet.
- Category:
- Other
- Cause:
- Given parameters do not match with any certificate in wallet.
- Action:
- All input parameters to detect certificate chain should be valid and present.
- PKI-07021
- Keysize cannot be null or empty.
- Category:
- Other
- Cause:
- Keysize would be either null or empty.
- Action:
- Keysize is required.