CTGKS0070E Client authentication fails because server does not trust the client certificate. Check the logs for more information. Fix the problem and restart the server.

Explanation

Client authentication fails because the server does not trust the certificate sent by the client. This error can happen only if clientAuthentication is set to 2 (required) in the SKLMConfig.properties file for key server. Note that for the KMIP protocol, clientAuthentication is always set to required.

System action

TLS handshake fails and TLS connection cannot be established.

Administrator response

The certificate is not trusted by the server. Use the Pending Client Certificate REST Service to list the pending client certificates and the Pending Client Certificate Accept REST Service to accept the client certificates. Also, refer to the logs for more information. Correct the problem and restart the server.