Appendix: Common errors
If you encounter an error, the KMES Series 3 displays an error message within Venafi TPP. Most functions provide a description of the error and the entire Excrypt API response containing the error provided by the KMES Series 3 Host API.
When troubleshooting error messages with the Futurex support team, providing the entire message displayed by TPP can speed up the diagnosis and resolution. The following list shows some common errors:
Error message
Description
X509 SIGNING NOT ALLOWED
Caused by a lack of upload permissions in the issuance policy.
NO PERMISSIONS
A general error resulting from a lack of permissions for that particular task.
INSUFFICIENT APPROVAL GROUP PERMISSION
A specific error for when a user has view permissions over an approval group but cannot use the approval group.
INVALID REQUEST IDS
This error occurs when the correct IDs are used but the approving group doesn’t have permission to view them, so the KMES Series 3 believes them to be invalid.
NOT ALLOWED TO APPROVE YOUR OWN UPLOAD
The same user is being used for both upload and approval. If this is intended, then you can relax the restriction in the issuance policy by selecting the Allow single group for upload and approval option in the KMES Series 3 configuration.
BAD LOGIN ATTEMPT
User credentials could not be validated. Possible causes include an incorrect or nonexistent username or incorrect permissions.