The audit messages in this section are from the Cryptographic Security Platform Vault for Cryptographic APIs.

In the table below, we list many of the audit messages and show:

  • Whether an Alert is also generated.
  • The severity (L=Low, M=Medium, H=High).
  • What the resolution is if any action should be taken.

  • In the Message column, a value in braces, such as {user_name}, represents a placeholder that is replaced with an actual value. For example, in the following message:

    '{user_name}' created the policy '{policy_name}'

    The actual message will be displayed with the name of the user and policy, for example:

    'Fred' created the policy 'Default_Policy'



Msg ID

Message

Severity

Alert?

Category

300

'{user_name}' created the policy '{policy_name}'

M

false

Tokenization

301

'{user_name}' updated the policy '{policy_name}'. New policy version is {policy_version}.

M

false

Tokenization

302

'{user_name}' deleted the policy '{policy_name}'

M

false

Tokenization

303

'{user_name}' changed the current version of the policy '{policy_name}'. Current policy version is {policy_version}.

M

false

Tokenization

400

Cryptographic APIs Client Certificate '{name}' created

M

false

Tokenization

401

Cryptographic APIs Client Certificate '{name}' created using Certificate Signing Request

M

false

Tokenization

402

Cryptographic APIs Client Certificate '{name}' deleted

M

false

Tokenization

500

User '{user_name}' logged in successfully.

H

false

Tokenization

501

Active Directory login for '{username}' succeeded but failed to get information about user. The user might not belong to the Active Directory Domain {domain_name} or user/group Base DN in Active Directory configuration might be wrong. Please contact Token Administrator to validate the Active Directory setup.

H

false

Tokenization

502

Login failure for Active Directory user '{username}' from {client_ip}. Reason: {reason}

H

false

Tokenization

503

User '{user_name}' logged in successfully using Personal Access Token {token_name}.

H

false

Tokenization

504

'{user_name}' enabled authentication inheritance

M

false

Tokenization

505

Authentication settings for inheriting vault '{vault_name}' were '{action}' by the System Administrator.

M

false

Tokenization

600

'{user_name}' updated AD Setting '{ad_setting_name}'

M

false

Tokenization

601

'{user_name}' changed AD Domain from '{old_ad_setting_name}' to '{ad_setting_name}'

M

false

Tokenization

602

'{user_name}' added AD Setting '{ad_setting_name}'

M

false

Tokenization

800

'{user_name}' updated token '{token_name}' settings. 'degraded mode availability' {degraded_mode}. 'OIDC authentication' {oidc}. 'mTLS state' {mTLS}. 'audit alert distribution list' {audit_alert_dl}. 'alert read count' {alert_read_count}. 'email notify alerts' {email_notify_alerts}.

M

false

Tokenization

801

'{user_name}' renamed token '{old_name}' to '{token_name}'.

M

false

Tokenization

802

'{user_name}' updated tokenization '{token_name}' settings of authentication method to AD based authentication

M

false

Tokenization

803

'{user_name}' updated the CSP Compliance Manager settings for the CSP Vault for Cryptographic APIs '{token_name}' with CSP Compliance Manager IP '{kcm_ip}'.

M

false

Tokenization

804

'{user_name}' updated tokenization '{vault_name}' settings of authentication method to OIDC based authentication

M

false

Tokenization

900

'{user_name}' created the user '{name}'

M

false

Tokenization

901

'{user_name}' deleted the user '{name}'

M

false

Tokenization

902

'{user_name}' updated the user '{name}'

M

false

Tokenization

903

Account '{user_name}' locked for 5 minutes due to repeated login failures

M

false

Tokenization

904

Account '{user_name}' was disabled due to repeated login failures

M

false

Tokenization

905

Login failure for Local user '{username}' from {client_ip}. Reason: {reason}

H

false

Tokenization

906

Password successfully updated for user: '{username}'

H

false

Tokenization

907

Account '{user_name}' enabled Two-Factor Authentication

M

false

Tokenization

908

Account '{user_name}' disabled Two-Factor Authentication

M

false

Tokenization

909

'{user_name}' updated the Local user password policy

M

false

Tokenization

910

'{user_name}' enforced Two-Factor Authentication

M

false

Tokenization

911

'{user_name}' removed enforcement of Two-Factor Authentication

M

false

Tokenization

1000

'{user_name}' created keyset '{keyset}'

M

false

Tokenization

1001

'{user_name}' failed to create keyset: '{message}'

M

false

Tokenization

1002

'{user_name}' enabled HSM support for keyset '{keyset}'

M

false

Tokenization

1003

'{user_name}' failed to enable HSM support. Reason: '{message}'

M

false

Tokenization

1004

'{user_name}' disabled HSM support for keyset '{keyset}'

M

false

Tokenization

1005

'{user_name}' failed to disable HSM support. Reason: '{message}'

M

false

Tokenization

1100

'{user_name}' tokenized data using policy '{policy}'

M

false

Tokenization

1101

'{user_name}' detokenized data using policy '{policy}'

M

false

Tokenization

1102

'{user_name}' masked data using policy '{policy}'

M

false

Tokenization

1103

'{user_name}' detokenized and masked data using policy '{policy}'

M

false

Tokenization

1104

'{user_name}' encrypted data using key '{key}'

M

false

Tokenization

1105

'{user_name}' decrypted data using key '{key}'

M

false

Tokenization

1106

'{user_name}' failed to tokenize data: '{message}'

M

false

Tokenization

1107

'{user_name}' failed to detokenize data: '{message}'

M

false

Tokenization

1108

'{user_name}' failed to mask data: '{message}'

M

false

Tokenization

1109

'{user_name}' failed to detokenize and mask data: '{message}'

M

false

Tokenization

1110

'{user_name}' failed to encrypt data: '{message}'

M

false

Tokenization

1111

'{user_name}' failed to decrypt data: '{message}'

M

false

Tokenization

1112

'{user_name}' rekeyed data using policy '{policy}'

M

false

Tokenization

1113

'{user_name}' batch tokenized data using policy '{policy}'

M

false

Tokenization

1114

'{user_name}' batch detokenized data using policy '{policy}'

M

false

Tokenization

1115

'{user_name}' batch masked data using policy '{policy}'

M

false

Tokenization

1116

'{user_name}' batch rekeyed data using policy '{policy}'

M

false

Tokenization

1117

'{user_name}' failed to rekey data using policy '{policy}'

M

false

Tokenization

1118

'{user_name}' failed to batch tokenize data using policy '{policy}'

M

false

Tokenization

1119

'{user_name}' failed to batch detokenize data using policy '{policy}'

M

false

Tokenization

1120

'{user_name}' failed to batch mask data using policy '{policy}'

M

false

Tokenization

1121

'{user_name}' failed to batch rekey data using policy '{policy}'

M

false

Tokenization

1122

'{user_name}' signed data using key '{key}'

M

false

Tokenization

1123

'{user_name}' verified signature using key '{key}'

M

false

Tokenization

1124

'{user_name}' failed to sign data: '{message}'

M

false

Tokenization

1125

'{user_name}' failed to verify signature: '{message}'

M

false

Tokenization

1126

'{user_name}' wrapped key using key '{key}'

M

false

Tokenization

1127

'{user_name}' unwrapped key using key '{key}'

M

false

Tokenization

1128

'{user_name}' failed to wrap key: '{message}'

M

false

Tokenization

1129

'{user_name}' failed to unwrap key: '{message}'

M

false

Tokenization

1130

'{user_name}' generated MAC using key '{key}'

M

false

Tokenization

1131

'{user_name}' verified MAC using key '{key}'

M

false

Tokenization

1132

'{user_name}' failed to generate MAC: '{message}'

M

false

Tokenization

1133

'{user_name}' failed to verify MAC: '{message}'

M

false

Tokenization

1134

'{user_name}' generated message digest

M

false

Tokenization

1135

'{user_name}' failed to generate message digest: '{message}'

M

false

Tokenization

1136

'{user_name}' batch encrypted data using keys '{keys}'

M

false

Tokenization

1137

'{user_name}' batch decrypted data using keys '{keys}'

M

false

Tokenization

1138

'{user_name}' failed to batch encrypt data using keys '{keys}' with error: '{message}'

M

false

Tokenization

1139

'{user_name}' failed to batch decrypt data using keys '{keys}' with error: '{message}'

M

false

Tokenization

1140

'{user_name}' batch encrypted-decrypted data using keys '{keys}'

M

false

Tokenization

1141

'{user_name}' failed to batch encrypt-decrypt data using keys '{keys}' with error: '{message}'

M

false

Tokenization

1200

'{user_name}' created tokenization policy: '{policy}'

M

false

Tokenization

1201

'{user_name}' deleted tokenization policy: '{policy}'

M

false

Tokenization

1202

'{user_name}' updated tokenization policy: '{policy}'

M

false

Tokenization

1203

'{user_name}' created masking policy: '{policy}'

M

false

Tokenization

1204

'{user_name}' deleted masking policy: '{policy}'

M

false

Tokenization

1205

'{user_name}' updated masking policy: '{policy}'

M

false

Tokenization

1207

'{user_name}' deleted encryption policy: '{policy}'

M

false

Tokenization

1209

'{user_name}' failed to create tokenization policy. Reason: '{message}'

M

false

Tokenization

1210

'{user_name}' failed to delete tokenization policy. Reason: '{message}'

M

false

Tokenization

1211

'{user_name}' failed to update tokenization policy. Reason: '{message}'

M

false

Tokenization

1212

'{user_name}' failed to create masking policy. Reason: '{message}'

M

false

Tokenization

1213

'{user_name}' failed to delete masking policy. Reason: '{message}'

M

false

Tokenization

1214

'{user_name}' failed to update masking policy. Reason: '{message}'

M

false

Tokenization

1216

'{user_name}' failed to delete encryption policy. Reason: '{message}'

M

false

Tokenization

1300

'{user_name}' created the key: '{key_name}'

M

false

Tokenization

1301

'{user_name}' failed to create key: '{key_name}'. Reason: '{message}'

M

false

Tokenization

1302

'{user_name}' updated details of key: '{key_name}'

M

false

Tokenization

1303

'{user_name}' changed state of the key: '{key_name}' to '{state}'

M

false

Tokenization

1304

'{user_name}' scheduled deletion of key: '{key_name}'

M

false

Tokenization

1305

'{user_name}' cancelled scheduled deletion of key: '{key_name}'

M

false

Tokenization

1306

'{user_name}' failed to schedule or cancel scheduled deletion of key: '{key_name}'. Reason: '{message}'

M

false

Tokenization

1307

'{user_name}' purged key: '{key_name}'

M

false

Tokenization

1308

'{user_name}' failed to purge key: '{key_name}'. Reason: '{message}'

M

false

Tokenization

1309

'{user_name}' rotated key: '{key_name}'

M

false

Tokenization

1310

'{user_name}' failed to rotate key: '{key_name}'. Reason: '{message}'

M

false

Tokenization

1311

'{user_name}' retrieved clear value of key: '{key_name}'

M

false

Tokenization

1312

'{user_name}' failed to retrieve the clear value of key: '{key_name}'. Reason: '{message}'

M

false

Tokenization

1313

'{user_name}' exported key: '{key_name}'

M

false

Tokenization

1314

'{user_name}' failed to export key: '{key_name}'. Reason: '{message}'

M

false

Tokenization

1315

'{user_name}' generated a key and CSR for '{key_name}'

M

false

Tokenization

1316

'{user_name}' failed to generate a key and CSR for '{key_name}'. Reason: '{message}'

M

false

Tokenization

1317

'{user_name}' exported public key: '{key_name}'

M

false

Tokenization

1318

'{user_name}' failed to export public key: '{key_name}'. Reason: '{message}'

M

false

Tokenization

1319

'{user_name}' imported key: '{key_name}'

M

false

Tokenization

1320

'{user_name}' failed to import key: '{key_name}'. Reason: '{message}'

M

false

Tokenization

1321

'{user_name}' successfully rebuilt keys database

M

false

Tokenization

1322

'{user_name}' failed to rebuild keys database. Reason: '{message}'

M

false

Tokenization

1323

'{user_name}' imported clear key: '{key_name}'

M

false

Tokenization

1324

'{user_name}' failed to import clear key: '{key_name}'. Reason: '{message}'

M

false

Tokenization

1400

'{user_name}' created Personal Access Token {token_name}

M

false

Tokenization

1401

'{user_name}' {update_info} Personal Access Token {token_name}

M

false

Tokenization

1402

'{user_name}' deleted Personal Access Token {token_name}

M

false

Tokenization

1500

'{user_name}' created OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Tokenization

1501

'{user_name}' failed to create OIDC user {oidc_user_email}

M

false

Tokenization

1502

'{user_name}' updated OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Tokenization

1503

'{user_name}' failed to update OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Tokenization

1504

'{user_name}' deleted OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Tokenization

1505

'{user_name}' failed to delete OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Tokenization

1506

'{user_name}' created registration link for OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Tokenization

1507

'{user_name}' failed to create registration link for OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Tokenization

1508

Login failure for OIDC user '{username}' from {client_ip}. Reason: {reason}

M

false

Tokenization

1600

'{user_name}' cleared cache

M

false

Tokenization

1601

'{user_name}' failed to clear cache. Reason: '{message}'

M

false

Tokenization

1602

'{user_name}' changed caching state

M

false

Tokenization

1603

'{user_name}' failed to change caching state. Reason: '{message}'

M

false

Tokenization

1604

'{user_name}' fetched caching status

M

false

Tokenization

1605

'{user_name}' failed to get caching status. Reason: '{message}'

M

false

Tokenization

1606

'{user_name}' fetched caching settings

M

false

Tokenization

1607

'{user_name}' failed to get caching settings. Reason: '{message}'

M

false

Tokenization

1608

'{user_name}' set caching settings

M

false

Tokenization

1609

'{user_name}' failed to set caching settings. Reason: '{message}'

M

false

Tokenization

1700

'{user_name}' created SCIM Token {token_id} expiring on {expiry_date}

M

false

Tokenization

1701

User {oidc_user_name} ({oidc_user_email}: {oidc_user_guid}) deleted by SCIM

M

false

Tokenization

1702

User {oidc_user_name} ({oidc_user_email}: {oidc_user_guid}) created by SCIM and added to policy {policy_name}

M

false

Tokenization

1703

User ({oidc_user_email}: {oidc_user_guid}) updated by SCIM from '{old_name}' to '{new_name}'

M

false

Tokenization

1704

'{user_name}' deleted SCIM Token

M

false

Tokenization

1800

'{user_name}' updated OIDC configuration on vault '{vault_name}'

H

true

Tokenization

1801

'{user_name}' updated OIDC CA certificate for vault '{vault_name}'

H

true

Tokenization

1900

Client certificate '{cert_name}' has expired. Clients using this certificate will no longer be able to access the vault. Please create a new certificate.

H

true

Tokenization

1901

Client certificate '{cert_name}' will expire in {days} days, {hours} hours and {minutes} minutes. Please create a new certificate before it expires.

H

true

Tokenization