| |
Note: Error codes 06 - 99 are the reason codes
from the RACF® IRRSPX00 callable
service.
|
| 06 |
Request queue serialization timeout occurred. |
| 08 |
Request denied, not authorized. |
| 12 |
An internal error has occurred during RACF processing. |
| 20 |
Function code specified is not defined. |
| 28 |
Certificate generation provider not available
for specified CA domain |
| 32 |
Incorrect value specified for CA domain. |
| 40 |
Incorrect Reason Specified. |
| 52 |
Parameter has an incorrect value. |
| 56 |
Required field is missing from request. |
| 60 |
Certificate generation provider error. |
| 64 |
SerialNum has an incorrect length. |
| 72 |
The status of the certificate has been changed
by another process. |
| 76 |
Conflicting fields names in CertPlist. |
| 99 |
General error for other RACF callable service IRRSPX00 errors. |
| 510 |
(510) Base64 decode of input message failed,
error=error-code |
| 511 |
(511) Base64 encode of output message failed,
error=0xhex-error code |
| 512 |
(512) Storage allocation failed (client certificate
storage:error-code) |
| 513 |
(513) Error occurred, HTTP access is forbidden. |
| 514 |
(514) Error occurred, HTTP method was HTTP
method name instead of POST. |
| 515 |
(515) Failed to create CMP response message. |
| 516 |
(516) Unsupported TCP Message protocol version. |
| 517 |
(517) Unsupported TCP Message message type. |
| 518 |
(518) Error occurred attempting to read the
HTTP input message |
| 519 |
(519) Unsupported CMP message type: CMP
message type specified |
| 520 |
(520) Key size (envar name envar)
of envar value is not a multiple of {2
| 256}. |
| 521 |
(521) Key size (envar name envar)
of envar value is not valid for {RSA | secure
RSA | NISTECC | BPECC} keys, must be {between 512-4096 | 1024-4096 | 192, 224, 256, 384, or 521 | 160, 192,
224, 256, 320, 384, or 512}. |
| 522 |
(522) Storage allocation failed element:size |
| 523 |
(523) HonorClientDates (envar name envar)
value of envar value is not numeric. |
| 524 |
(524) HonorClientDates (envar name envar)
value of envar value is not valid, expected 0 or
1. |
| 525 |
(525) notBefore (envar name envar)
value of envar value is not numeric. |
| 526 |
(526) notAfter (envar name envar)
value of envar value is not numeric. |
| 527 |
(527) HonorClientCerts (envar name envar)
value of envar value is not numeric. |
| 528 |
(528) HonorClientCerts (envar name envar)
value of envar value invalid, should be 0-5. |
| 529 |
(529) HonorClientExts (envar name envar)
value of envar value is not numeric. |
| 530 |
(530) HonorClientExts (envar name envar)
value of envar value invalid, should be 0 or 1. |
| 531 |
(531) CMP Envar envar name value is not
valid, expected {valid values} |
| 533 |
(533) CMP Envar envar name missing
in config file. |
| 534 |
(534) CMP Envar envar name value
of envar value is not numeric. |
| 535 |
(535) CMP Envar envar1 name with
value of envar1 value <= envar2 name with
value of envar2 value. |
| 536 |
(536) Key size (envar name envar)not
specified, defaulting to default key size value. |
| 537 |
(537) Key size (envar name envar)
of Key size value specified is not numeric. |
| 538 |
(538) KeyType (envar name envar)
of KeyType value specified is not valid. |
| 539 |
(539) envar name envar value
length is greater than the maximum length of maximum length. |
| 543 |
(543) request.extraCerts[index value].write()
failed, status=error code |
| 544 |
(544) gsk_decode_certificate failed, error code=0xSystem
SSL error code - System SSL brief error description |
| 545 |
(545) gsk_decode_base64 failed, error code=0xSystem
SSL error code - System SSL brief error description |
| 547 |
(547) gsk_open_keyring() failed: Error 0xSystem
SSL error code - System SSL brief error description |
| 548 |
(548) gsk_decode_certificate failed, error code=0xSystem
SSL error code - System SSL brief error description |
| 549 |
(549) gsk_get_record_by_index() failed: Error
0xSystem SSL error code - System SSL brief
error description |
| 550 |
(550) Specified Keyring Keyring name contains
no certificates |
| 553 |
(553) gsk_decode_import_certificate failed,
error code=0xSystem SSL error code - System
SSL brief error description |
| 554 |
(554) gsk_encode_private_key, error code=0xSystem
SSL error code - System SSL brief error description |
| 555 |
(555) gsk_make_enveloped_data_msg_extended failed,
error code=0xSystem SSL error code - System
SSL brief error description |
| 556 |
(556) gsk_encode_export_certificate failed,
error code=0xSystem SSL error code - System
SSL brief error description |
| 557 |
(557) gsk_construct_private_key_rsa failed, error code=0xSystem
SSL error code - System SSL brief error description |
| 558 |
(558) gsk_construct_public_key[ECC] failed, error code=0xSystem
SSL error code - System SSL brief error description |
| 559 |
(559) gsk_modify_pkcs11_key_label failed, error code=0xSystem
SSL error code - System SSL brief error description |
| 560 |
(560) gsk_make_enveloped_private_key_msg error failed, error
code=0xSystem SSL error code -System SSL
brief error description |
| 562 |
(562) Triple Des Algorithm not available, using
Single Des. |
| 563 |
(563) Gencert succeeded, But no Transaction
ID returned. |
| 573 |
(573) Could not decode CMP message. |
| 576 |
(576) Missing ImplicitConfirm in PKIHeader. |
| 577 |
(577) {NotBefore | NotAfter} date supplied is
invalid({cannot compute seconds since epoch | date is before today}). |
| 581 |
(581) Validity supplied when not configured
to honor client dates. |
| 582 |
(582) No CA domain found for issuer Issuer
Distinguished name. |
| 584 |
(584) Number of extraCerts > HonorClientCerts
(envar name envar) value of envar value. |
| 587 |
(587) Critical crl extension oid=Extension
OID value is not supported. |
| 588 |
(588) crlReason extension value is not valid;
decode error error-code. |
| 589 |
(589) Serial number required in certTemplate. |
| 590 |
(590) {Revoke/Suspend | Resume} of
serial number decimal-serial-number(0xhex-serial-number)
failed for CA Domain Domain name. |
| 600 |
(600) Error encountered while encoding response
body(failing element[:error code]) |
| 601 |
(601) Error encountered while encoding response
header(failing element[:error code]) |
| 602 |
(602) {Attributes | Extensions} supplied when
not configured to honor client extensions. |
| 603 |
(603) Base64 encode of CertificationRequest
failed, error=error-code. |
| 604 |
(604) CertReqMsg with publicKey has missing
or unsupported ProofOfPossesion |
| 606 |
(606) Error encountered while encoding CertReqMsg(failing
element[:error code]). |
| 607 |
(607) Error obtaining the current time of day(failing
step:error code). |
| 608 |
(608) Error retrieving information from the
CMP request (failing element[:error code]) |
| 609 |
(609) {cr | rr} message does not contain only
one {CertReqMsg | RevDetails}. |
| 610 |
(610) Subject name absent from CertTemplate
for a cr message |
| 611 |
(611) Unsupported CMP message version (version
specified not equal 2) |
| 612 |
(612) Error initializing PKI Services configuration
file (configuration-file-name) |
| 613 |
(613) CA domain domain-name does
not have CMP support enabled |
| 614 |
(614) Error retrieving CMP environment variables |
| 620 |
(620) Key type {[null] | specified
KEYTYPE value} is not valid. |
| 621 |
(621) Cannot initialize ICSF PKCS#11 interfaces
(C_Initialize return code 0xhex-return-code) |
| 622 |
(622) Error encountered while destroying a {Publik | Private}
key object (return code 0xhex-return-code) |
| 623 |
(623) Internal PKCS#11 API failure (PKCS
#11 API) return code 0xhex-return-code |
| 624 |
(624) {RSA | ECC} key generation failure (C_GenerateKeyPair
return code 0xhex-return-code) |
| 464453637 |
VSAM contention caused the request to fail.
Retry the request. |
| 464453634 |
VSAM contention caused the request to fail.
Retry the request. |
z/OS Cryptographic Services PKI Services Guide and Reference
Copyright IBM Corporation 1990, 2014