6.1 NICI and CCS Error Code Lists

These are the Novell International Cryptographic Infrastructure and Controlled Cryptographic Services error codes included in this section:

NICI Error Code List

CCS Error Code List

-1400 0xFA88 NICI E INTERNAL ERROR

Source: NICI
Explanation: An unspecified system error occurred.
Action: Contact a Novell Support Provider.

-1401 0xFA87 NICI E ALGORITHM INVALID

Source: NICI
Explanation: The algorithm identifier is invalid.

-1402 0xFA86 NICI E ALGORITHM NOT SUPPORTED

Source: NICI
Explanation: The algorithm is not supported by loaded cryptographic service modules.

-1403 0xFA85 NICI E ASN1 DECODE

Source: NICI
Explanation: An ASN.1 decoding failure occurred.

-1404 0xFA84 NICI E ASN1 ENCODE

Source: NICI
Explanation: An ASN.1 encoding failure occurred.

-1405 0xFA83 NICI E ATTRIBUTE READ ONLY

Source: NICI
Explanation: The specified attribute cannot be modified.

-1406 0xFA82 NICI E ATTRIBUTE SENSITIVE

Source: NICI
Explanation: The specified attribute is sensitive and cannot be revealed.

-1407 0xFA81 NICI E ATTRIBUTE TYPE INVALID

Source: NICI
Explanation: The specified attribute type is invalid.

-1408 0xFA80 NICI E ATTRIBUTE VALUE INVALID

Source: NICI
Explanation: The specified attribute value is invalid.

-1409 0xFA7F NICI E BUFFER OVERFLOW

Source: NICI
Explanation: The output buffer is too small to hold the output value.

-1410 0xFA7E NICI E CC COUNT

Source: NICI
Explanation: NICI could not allocate another cryptography context.

-1411 0xFA7D NICI E CC HANDLE INVALID

Source: NICI
Explanation: The cryptography context handle is invalid.

-1412 0xFA7C NICI E CERTIFICATE CHAIN

Source: NICI
Explanation: The issuer certificate required to generate or load another certificate is missing.

-1413 0xFA7B NICI E CERTIFICATE DATA INVALID

Source: NICI
Explanation: The certificate data is invalid.

-1414 0xFA7A NICI E CERTIFICATE DATA LEN RANGE

Source: NICI
Explanation: The certificate data length is out of range.

-1415 0xFA79 NICI E CRITICAL EXTENSION

Source: NICI
Explanation: The certificate to be loaded has an unknown extension marked as critical.

-1416 0xFA78 NICI E DATA INVALID

Source: NICI
Explanation: The input data is invalid.

-1417 0xFA77 NICI E DATA LEN RANGE

Source: NICI
Explanation: The input data length is out of range.

-1418 0xFA76 NICI E ENCRYPTED DATA INVALID

Source: NICI
Explanation: The encrypted data is invalid.

-1419 0xFA75 NICI E ENCRYPTED DATA LEN RANGE

Source: NICI
Explanation: The encrypted data length is out of range.

-1420 0xFA74 NICI E FLAGS INVALID

Source: NICI
Explanation: The input flags are invalid.

-1421 0xFA73 NICI E FUNCTION NOT SUPPORTED

Source: NICI
Explanation: An attempt was made to perform a function that is not supported by the cryptographic service modules that are loaded.

-1422 0xFA72 NICI E INVALID PARAMETER

Source: NICI
Explanation: An invalid algorithm parameter (NICI_PARAMETER_DATA record) was input.

-1423 0xFA71 NICI E INVALID USAGE

Source: NICI
Explanation: The flag value specified was not a valid key usage flag.

-1424 0xFA70 NICI E KEY HANDLE INVALID

Source: NICI
Explanation: The key handle is invalid.

-1425 0xFA6F NICI E KEY PAIR

Source: NICI
Explanation: The issuer public key required to generate a certificate for another key is missing.

-1426 0xFA6E NICI E KEY POLICY VIOLATION

Source: NICI
Explanation: The key attributes are not consistent with the usage policy.

-1427 0xFA6D NICI E KEY SENSITIVE

Source: NICI
Explanation: The key is sensitive and cannot be revealed.

-1428 0xFA6C NICI E KEY SIZE RANGE

Source: NICI
Explanation: The key size is out of range for the requested algorithm.

-1429 0xFA6B NICI E KEY TYPE INCONSISTENT

Source: NICI
Explanation: The key type is inconsistent with the mechanism.

-1430 0xFA6A NICI E KM STRENGTH INVALID

Source: NICI
Explanation: The NICI_ KM_STRENGTH value input is invalid.

-1431 0xFA69 NICI E MEMORY

Source: NICI
Explanation: Not enough memory.

-1432 0xFA68 NICI E NULL INVALID

Source: NICI
Explanation: The required output buffer pointer is null.

-1433 0xFA67 NICI E OBJECT CLASS INCONSISTENT

Source: NICI
Explanation: The object class is inconsistent with the algorithm.

-1434 0xFA66 NICI E OBJECT CLASS INVALID

Source: NICI
Explanation: The object class is invalid.

-1435 0xFA65 NICI E OBJECT CLASS NOT SUPPORTED

Source: NICI
Explanation: The object class is not supported.

-1436 0xFA64 NICI E OBJECT COUNT

Source: NICI
Explanation: The limit on the total number of objects has been reached.

-1437 0xFA63 NICI E OBJECT HANDLE INVALID

Source: NICI
Explanation: The object handle is invalid.

-1438 0xFA62 NICI E OBJECT PERMANENT

Source: NICI
Explanation: An attempt was made to delete a permanent object.

-1439 0xFA61 NICI E OPERATION ACTIVE

Source: NICI
Explanation: Another operation is already active in the same cryptography context.

-1440 0xFA60 NICI_E_OPERATION_INCONSISTENT

Source: NICI
Explanation: The requested operation is inconsistent with the interface.

-1441 0xFA5F NICI E OPERATION NOT INITIALIZED

Source: NICI
Explanation: The operation has not been initialized.

-1442 0xFA5E NICI E RESOURCE

Source: NICI
Explanation: The operating system does not have available an unspecified operating system resource.

-1443 0xFA5D NICI E SIGNATURE INVALID

Source: NICI
Explanation: An attempt was made to use a signature that is invalid.

-1444 0xFA5C NICI E SIGNATURE LEN RANGE

Source: NICI
Explanation: An attempt was made to use a signature length that is out of range.

-1445 0xFA5B NICI E TEMPLATE INCOMPLETE

Source: NICI
Explanation: The template for input-attributes is incomplete.

-1446 0xFA5A NICI E TEMPLATE INCONSISTENT

Source: NICI
Explanation: The template for input-attributes is inconsistent.

-1447 0xFA59 NICI E UNAVAILABLE

Source: NICI
Explanation: The NICI functions are disabled and unavailable.

-1448 0xFA58 NICI E UNWRAPPING KEY HANDLE INVALID

Source: NICI
Explanation: The unwrapping key handle is invalid.

-1449 0xFA57 NICI E UNWRAPPING KEY SIZE RANGE

Source: NICI
Explanation: The unwrapping key size is out of range.

-1450 0xFA56 NICI E UNWRAPPING KEY TYPE INCONSISTENT

Source: NICI
Explanation: The unwrapping key type is inconsistent with the algorithm.

-1451 0xFA55 NICI E VALIDITY EXPIRED

Source: NICI
Explanation: The certificate or key validity period expired.

-1452 0xFA54 NICI E WRAPPED KEY INVALID

Source: NICI
Explanation: The wrapped key is invalid.

-1453 0xFA53 NICI E WRAPPED KEY LEN RANGE

Source: NICI
Explanation: The wrapped key size is out of range.

-1454 0xFA52 NICI E WRAPPING KEY HANDLE INVALID

Source: NICI
Explanation: The wrapping key handle is invalid.

-1455 0xFA51 NICI E WRAPPING KEY SIZE RANGE

Source: NICI
Explanation: The wrapping key size is out of range.

-1456 0xFA50 NICI E WRAPPING KEY TYPE INCONSISTENT

Source: NICI
Explanation: The wrapping key type is inconsistent with the algorithm.

-1457 0xFA4F NICI E WRONG ORDER

Source: NICI
Explanation: The operation was attempted in an improper order or sequence.

-1458 0xFA4E NICI E XS HANDLE INVALID

Source: NICI
Explanation: An internal error occurred in system resource management.

-1459 0xFA4D NICI E XS RESOURCE

Source: NICI
Explanation: An internal error occurred in system resource management.

-1460 0xFA4C NICI E NOT FOUND

Source: NICI
Explanation: NICI itself was not found, or the requested object was not found.
Possible Cause: NICI is not properly installled on the client workstation.
Action: Make sure that the client NICI is properly installed on the workstation.

Possible Cause: If programming, a call was made for the NICI client, but the requested object (NICI) was not found.
Action: Make sure that the program uses the correct code when calling the client NICI.

-1461 0xFA4B NICI E VERSION MISMATCH

Source: NICI
Explanation: A different version of a NICI library or NICI system files is required.
Possible Cause: An application using the NICI system files does not match the installed NICI system files.
Action: Obtain a the latest or matching version of the NICI library or NICI system files or the application using the files.

-1470 0xFA42 NICI E FIPS140CNRG ERR

Source: NICI
Explanation: This is an internal error generated by NICI as defined by FIPS 140. NICI will try to recover from this error and returns this error if it can’t.
Action: Retry the operation again, or reload or restart the application.

-1471 0xFA41 NICI E SELF VERIFICATION

Source: NICI
Explanation: This error was introduced with the FIPS 140 certified NICI and is present regardless of the certification level of NICI on non-NetWare platforms. Upon loading or being instantiated by a process, NICI runs a set of tests for module integrity as well as cryptographic process integrity. If one of these tests fail, NICI puts itself in an inoperable state and returns this error.
Possible Cause: The typical cause of this problem is module verification failure.
Action: Reinstall NICI, or remove and then reinstall NICI.

-1472 FFFFFA40 NICI E CRYPTO DOWNGRADE

Source: NICI
Explanation: This error is introduced in NICI version 2.0.1. The most likely cause is installation of weak NICI version on a strong NICI installed base.
Possible Cause: Novell started shipping the strong NICI worldwide, and stopped shipping the import restricted version with limited key sizes. We don’t anticipate seeing this error anymore.
Action: Install strong NICI.

-1494 FFFFFA2A CCS E NOT INITIALIZED

Source: NICI
Explanation: Similar to error -1497, this error is typically caused by the lack of NICI license materials or configuration files.
Action: Reinstalling NICI typically solves the problem. If it does not, first try removing the NICI registry key on Microsoft* Windows*, deleting the UNIX* configuration file /etc/nici.cfg, and then installing NICI. Reinstalling NICI does not remove existing keys. If this doesn’t solve the problem and you don’t lose data by deleting the NICI configuration files and keys, delete the NICI configuration directory together with the registry on Microsoft Windows or UNIX configuration file, then reinstall NICI.

-1495 0xFA29 CSS E NO SERVER KEY

Source: NICI
Explanation: No server key files were found.
Action: Contact a Novell Support Provider.

-1496 0xFA28 CCS E NOT AUTHENTICATED

Source: CCS
Explanation: Another CCS call was made before initialization via CCS_Init().

-1497 0xFA27 CCS E AUTHENTICATION FAILURE

Source: CCS
Explanation: The CCS library could not authenticate one or more CCS modules.
Action: Follow instructions in Technical Information Document 10054434 located in the Novell support knowledgebase on the Web at http://support.novell.com/search/kb_index.htm.
Possible Cause: This error can be caused by a lack of NICI licensing materials (.nfk file copied to nicifk file). NICI on servers (NetWare, DHost, or equivalent environment on other platforms) must have a NICI foundation key file in order to initialize key materials. NICI license materials are part of an eDirectory license.

Earlier NetWare installs had the option of installing directory without licenses that basically disabled NICI. With the new directory services introduced with eDirectory for the first time, eDirectory is using NICI for a variety of cryptographic functionality. So, a simple upgrade from an earlier version of eDirectory to a newer version would render eDirectory unusable due to NICI. This is not a bug, per se, but an installation deficiency. NICI will not operate without a NICI licensing materials, or a proper configuration file.

Action: Install a license (can be the installation of the same license), or copy the .nfk file from the license diskette to nicifk file, and then reboot the server or restart the DHost process.
Possible Cause: The error can also be caused by the lack of or corrupted NICI configuration files, especially on NetWare servers. A corrupted NICI configuration file is not fixable; it is thrown away. An effort was made to minimize this problem starting with NICI version 1.3.x. It is less likely for this to occur especially with NICI 2.x or later.

Action: Contact a Novell support provider.
Possible Cause: Cryptography module downgrade.

Action: Contact a Novell support provider

-1498 0xFA26 CCS E ALREADY AUTHENTICATED

Source: CCS
Explanation: The module handle is already in use by the CCS library in another module.

-1499 0xFA25 CCS E EXPIRED

Source: CCS
Explanation: One or more CCS authentication certificates is expired.