Download full document:

GENTOOL ERRORS

GENTOOL ERRORS

Error CodeError Code(Decimal)Error Code(Hex)Error Message
NSERR_SSL_CONFFILE16010x641Error in SSL conf file
NSERR_SSL_NOCONFFILE16020x642Unable to load SSL configuration info
NSERR_SSL_SIGFAIL16030x643Signing operation failed
NSERR_SSL_INVALFORMAT16040x644Invalid format
NSERR_SSL_OUTFILE16050x645Problem in writing output file
NSERR_SSL_VERIFY_FAIL16060x646Signature verification failed
NSERR_SSL_FILECREATE16070x647Unable to create output file
NSERR_SSL_MINKEYSIZE16080x648Key size less than 1024 is not supported on FIPS Firmware Version 1.1.
NSERR_SSL_INVALID_REQ16090x649Invalid certificate request
NSERR_SSL_GENTOOL16100x64AInternal failure in SSL cert/key generation tool
NSERR_SSL_PEM_ONLY16110x64BOnly PEM format private key can be encrypted
NSERR_SSL_PASSMISMATCH16120x64CPassword verification failed
NSERR_SSL_PASSREQ16130x64DPassword required for private key
NSERR_SSL_INVALPASS16140x64EInvalid password
NSERR_SSL_MAXKEYSIZE16150x64FMaximum allowed key size is 2048
NSERR_SSL_GNTOOLARG_MISSING16160x650Required argument missing
NSERR_SSL_INVAL_PUBEXP16170x651Invalid public exponent value
NSERR_SSL_INVALID_VALUE16180x652Invalid value
NSERR_SSL_MISSING_KVAL16190x653Value missing for the argument
NSERR_SSL_INVAL_DHGEN16200x654Invalid DH generator value
NSERR_SSL_NOFILE_CERTREQ16210x655No such certificate request file exists
NSERR_SSL_REQ_NOMATCH16220x656Certificate Request (CSR) and private key do not match
NSERR_SSL_PKCS1216230x657Problem in input PKCS12 file
NSERR_SSL_NOFILE_CAPVTKEY16240x658No such CA key file present
NSERR_SSL_NOFILE_CACERT16250x659No such CA certificate file exists
NSERR_SSL_NOFILE_SERIAL16260x65ANo such serial file exists
NSERR_SSL_NOFILE_PKCS1216270x65BNo such PKCS12 file exists
NSERR_SSL_READ_CACERT16280x65CIn reading input CA certficate file
NSERR_READ_CERT16290x65DError in reading input certficate file
NSERR_IMP_EXP_NOT_TOGETHER16300x65EImport and export can not be specified together
NSERR_NOFILE_CERT16310x65FNo such certificate file exists
NSERR_NOFILE_KEY16320x660No such key file exists
NSERR_CACERTPKEY_MISMATCH16330x661CA certificate not matching with CA private-key
NSERR_WRONG_REV_ENTRY16340x662Invalid revocation entry in CAs database
NSERR_WRONG_REV_DATE16350x663Invalid revocation data in CAs database
NSERR_WRONG_SERIAL_NO16360x664Invalid serial number in CAs database
NSERR_CREATE_DATABASE_ENTRY16370x665Revocation entry creation failed
NSERR_ALREADY_REVKD16380x666Certificate already revoked
NSERR_LOAD_PKEY16390x667Private key loading failed
NSERR_CERTPKEY_NEEDED16400x668Both certificate and private key are needed for export
NSERR_PKCS12_NEEDED16410x669PKCS12 file missing for import
NSERR_ERR_FILEEXISTS16420x66ACannot create output file. File already exists
NSERR_FIPSKEY_KEYFILE_OPTION16430x66BBoth -keyFileName and -fipsKeyName cannot be specified
NSERR_OUTFILELENBIG16440x66COutput file name too long
NSERR_SSL_DEFPATH16450x66DOutput filepath should be under the partitions default SSL directory
NSERR_SSL_CRL_DEFPATH16460x66EOutput CRL filepath should be under the partitions default CRL directory
NSERR_SSL_DEFLOCATION16470x66FInput file(s) not present or not accessible in current partition
NSERR_SSL_DNS_DEFPATH16480x670Output filepath should be under the partitions default DNS directory
NSERR_DHREQD17910x6FFDH required
NSERR_SSL_CRL_DEFLOCATION16500x672Input CRL file not present or not accessible in current partition
NSERR_SSL_NOFIPS_KEY16510x673No such FIPS key
NSERR_SSL_IMPROPER_SERIALFILE16520x674Invalid serial file
NSERR_SSL_SERIAL_NUM_REVOKED16530x675Certificate serial number match with another certificate already revoked in the CRL
NSERR_SSL_MAXRSAKEYSIZE16540x676Maximum allowed key size is 4096
NSERR_SSL_MUSTBEPEM16550x677The input file must be in PEM or SIM format.
NSERR_SSL_CANTBEPEM16560x678The input file cannot be in PEM format.
NSERR_SSL_BAD_LABEL16570x679The keylabel cannot be publicor private.
NSERR_SSL_HSMKEY_LOAD16640x680Unable to Load Key in external Hardware Security Module (HSM).
NSERR_SSL_HSMKEY_PPE16650x681Internal error while adding HSM key.
NSERR_ERR_SSL_HSMKEY_EXISTS16660x682HSM Key already exists.
NSERR_ERR_SSL_HSMKEY_DELETE16670x683Unable to Delete Key in external Hardware Security Module (HSM).
NSERR_ERR_SSL_HSMKEY_NOENT16680x684No such resource.
NSERR_ERR_SSL_HSMKEY_REFEXT16690x685The HSM key is referenced by a certificate
NSERR_ERR_SSL_HSMKEY_NOTEXISTS16700x686No such HSM key.
NSERR_ERR_SSL_HSMKEY16710x687HSM Key Unknown Error, Probably debugging.
NSERR_ERR_SSL_GW_NOTUP16720x688Gateway daemon is booting up please wait for 20 to 30 secs.
NSERR_ERR_SSL_HSMKEY_FIPS16730x689Operation not permitted on a MPX-FIPS System.
NSERR_ERR_SSL_SANCERT_DUP16740x68ADuplicate domain cert cannot be added.
NSERR_SSL_ECDSA_SUPPORT16750x68BECDSA certificates are not supported for this entity/platform.
NSERR_SSL_ECDSA_CURVE_SUPPORT16760x68CThe EC curve in the ECDSA certificate is not supported.
NSERR_SSL_LINK_LOOP16770x68DCertificate cant be linked. This is creating a loop.
NSERR_SSL_N3FIPSREBOOT16780x68EN3FIPS InitHSM is not done, Please reboot again
NSERR_SSL_N3FIPS_FILECREATE16790x68FFIPS config folder /nsconfig/fips is not present, please create it manually and reboot the system, after reboot reset and set fips again
NSERR_SSL_SIGHASH_SUPPORT16800x690List contains unsupported SigHash type for this entity/platform.
NSERR_SSL_SAN_CERT_ENTRY16810x691Unsupported OID for SAN entry in certificate
NSERR_CIPHER_BACKEND16820x692The cipher alias cannot be bound to this entity. It is only applicable for a SSL backend service or a SSL serviceGroup
NSERR_SSL_CIPHER_NOT_SUPPORTED_ON_PLATFORM16830x693This Cipher/CipherAlias is not supported on this platform.
NSERR_DTLS_CIPHER_SUPPORT16850x695This cipher alias cannot be bound. DTLS vServer/Service only supports DEFAULT_DTLS/DEFAULT_DTLS_BACKEND ciphers respectively.
NSERR_DTLS_CIPHER_BACKEND16860x696The cipher alias cannot be bound to this entity. It is only applicable for a DTLS backend service or a DTLS serviceGroup.
NSERR_SSL_I2D_X509_NAME_FAILURE16840x694Failed to encode X509_NAME into DER format