The audit messages in this section are from the Cryptographic Security Platform Vault for Cryptographic APIs.

In the table below, we list many of the audit messages and show:

  • Whether an Alert is also generated.
  • The severity (L=Low, M=Medium, H=High).
  • What the resolution is if any action should be taken.
  • In the Message column, a %s represents a string value. For example, in the following message:

    Added user %s to group %s

    The actual message will be displayed with the name of the user and group, for example:

    Added user fred to group IT

Msg ID

Message

Severity

Alert?

Category

300

{user_name} created the policy '{policy_name}'

M

false

Tokenization

301

{user_name} updated the policy '{policy_name}'. New policy version is {policy_version}.

M

false

Tokenization

302

{user_name} deleted the policy '{policy_name}'

M

false

Tokenization

303

{user_name} changed the current version of the policy '{policy_name}'. Current policy version is {policy_version}.

M

false

Tokenization

500

User '{user_name}' logged in successfully.

H

false

Tokenization

400

Cryptographic APIs Client Certificate '{name}' created

M

false

Tokenization

401

Cryptographic APIs Client Certificate '{name}' created using Certificate Signing Request

M

false

Tokenization

402

Cryptographic APIs Client Certificate '{name}' deleted

M

false

Tokenization

501

Active Directory login for {username} succeeded but failed to get information about user. The user might not belong to the Active Directory Domain {domain_name} or user/group base dn in Active Directory configuration might be wrong. Please contact Token Administrator to validate the Active Directory setup.

H

false

Tokenization

502

Login failure for Active Directory user {username} from {client_ip}. Reason: {reason}

H

false

Tokenization

503

User '{user_name}' logged in successfully using Personal Access Token {token_name}.

H

false

Tokenization

504

{user_name} enabled authentication inheritance

M

false

Tokenization

505

Authentication settings for inheriting vault {vault_name} {action} by System Admin

M

false

Tokenization

600

{user_name} updated AD Setting '{ad_setting_name}'

M

false

Tokenization

601

{user_name} changed AD Domain from '{old_ad_setting_name}' to '{ad_setting_name}'

M

false

Tokenization

602

{user_name} added AD Setting '{ad_setting_name}'

M

false

Tokenization

800

{user_name} updated token '{token_name}' settings. 'degraded mode availability' {degraded_mode}. 'OIDC authentication' {oidc}.

M

false

Tokenization

801

{user_name} renamed token '{old_name}' to '{token_name}'.

M

false

Tokenization

802

{user_name} updated tokenization '{token_name}' settings of authentication method to AD based authentication

M

false

Tokenization

803

{user_name} updated tokenization vault '{token_name}' settings about KCM information with 'kcm ip: ' {kcm_ip}.

M

false

Tokenization

804

{user_name} updated tokenization '{vault_name}' settings of authentication method to OIDC based authentication

M

false

Tokenization

900

{user_name} created the user '{name}'

M

false

Tokenization

901

{user_name} deleted the user '{name}'

M

false

Tokenization

902

{user_name} updated the user '{name}'

M

false

Tokenization

903

Account {user_name} locked for 5 minutes due to repeated login failures

M

false

Tokenization

904

Account {user_name} disabled due to repeated login failures

M

false

Tokenization

905

Login failure for Local user {username} from {client_ip}. Reason: {reason}

H

false

Tokenization

906

Successfully updated password for user: {username}

H

false

Tokenization

907

Account {user_name} enabled Two-factor authentication

M

false

Tokenization

908

Account {user_name} disabled Two-factor authentication

M

false

Tokenization

909

{user_name} updated the local user password policy

M

false

Tokenization

910

{user_name} enforced Two-factor authentication

M

false

Tokenization

911

{user_name} enforced Two-factor authentication {user_name} removed enforcement of Two-factor authentication

M

false

Tokenization

1000

{user_name} created keyset '{keyset}'

M

false

Tokenization

1001

{user_name} failed to create keyset: '{message}

M

false

Tokenization

1002

{user_name} enabled HSM for keyset '{keyset}'

M

false

Tokenization

1003

{user_name} failed to enable HSM. Reason: '{message}'

M

false

Tokenization

1004

{user_name} disabled HSM for keyset '{keyset}'

M

false

Tokenization

1005

{user_name} failed to disable HSM. Reason: '{message}'

M

false

Tokenization

1100

{user_name} tokenized data using policy '{policy}'

M

false

Tokenization

1101

{user_name} detokenized data using policy '{policy}'

M

false

Tokenization

1102

{user_name} masked data using policy '{policy}'

M

false

Tokenization

1103

{user_name} detokenized and masked data using policies '{policy}'

M

false

Tokenization

1104

{user_name} encrypted data using key '{key}'

M

false

Tokenization

1105

{user_name} decrypted data using key '{key}'

M

false

Tokenization

1106

{user_name} failed to tokenize data: '{message}'

M

false

Tokenization

1107

{user_name} failed to detokenize data: '{message}'

M

false

Tokenization

1108

{user_name} failed to mask data: '{message}'

M

false

Tokenization

1109

{user_name} failed to detokenize and mask data: '{message}'

M

false

Tokenization

1110

{user_name} failed to encrypt data: '{message}'

M

false

Tokenization

1111

{user_name} failed to decrypt data: '{message}'

M

false

Tokenization

1112

{user_name} rekeyed data using policies '{policy}'

M

false

Tokenization

1113

{user_name} batch tokenized data using policies '{policy}'

M

false

Tokenization

1114

{user_name} batch detokenized data using policies '{policy}'

M

false

Tokenization

1115

{user_name} batch masked data using policies '{policy}'

M

false

Tokenization

1116

{user_name} batch rekeyed data using policies '{policy}'

M

false

Tokenization

1117

{user_name} failed to rekey data using policies '{policy}'

M

false

Tokenization

1118

{user_name} failed to batch tokenize data using policies '{policy}'

M

false

Tokenization

1119

{user_name} failed to batch detokenize data using policies '{policy}'

M

false

Tokenization

1120

{user_name} failed to batch mask data using policies '{policy}'

M

false

Tokenization

1121

{user_name} failed to batch rekey data using policies '{policy}'

M

false

Tokenization

1122

{user_name} signed data using key '{key}'

M

false

Tokenization

1123

{user_name} verified signature using key '{key}'

M

false

Tokenization

1124

{user_name} failed to sign data: '{message}'

M

false

Tokenization

1125

{user_name} failed to verify signature: '{message}'

M

false

Tokenization

1126

{user_name} wrapped key using key '{key}'

M

false

Tokenization

1127

{user_name} unwrapped key using key '{key}'

M

false

Tokenization

1128

{user_name} failed to wrap key: '{message}'

M

false

Tokenization

1129

{user_name} failed to unwrap key: '{message}'

M

false

Tokenization

1130

{user_name} generated mac using key '{key}'

M

false

Tokenization

1131

{user_name} verified mac using key '{key}'

M

false

Tokenization

1132

{user_name} failed to generate mac: '{message}'

M

false

Tokenization

1133

{user_name} failed to verify mac: '{message}'

M

false

Tokenization

1134

{user_name} has generated message digest

M

false

Tokenization

1135

{user_name} failed to generate message digest: '{message}'

M

false

Tokenization

1136

{user_name} batch encrypted data using keys '{keys}'

M

false

Tokenization

1137

{user_name} batch decrypted data using keys '{keys}'

M

false

Tokenization

1138

{user_name} failed to batch encrypt data using keys '{keys}' with error: '{message}'

M

false

Tokenization

1139

{user_name} failed to batch decrypt data using keys '{keys}' with error: '{message}'

M

false

Tokenization

1140

{user_name} batch encrypted-decrypted data using keys '{keys}'

M

false

Tokenization

1141

{user_name} failed to batch encrypt-decrypt data using keys '{keys}' with error: '{message}'

M

false

Tokenization

1200

{user_name} created tokenization policy: '{policy}'

M

false

Tokenization

1201

{user_name} deleted tokenization policy: '{policy}'

M

false

Tokenization

1202

{user_name} updated tokenization policy: '{policy}'

M

false

Tokenization

1203

{user_name} created masking policy: '{policy}'

M

false

Tokenization

1204

{user_name} deleted masking policy: '{policy}'

M

false

Tokenization

1205

{user_name} updated masking policy: '{policy}'

M

false

Tokenization

1207

{user_name} deleted encryption policy: '{policy}'

M

false

Tokenization

1209

{user_name} failed to create tokenization policy. Reason: '{message}'

M

false

Tokenization

1210

{user_name} failed to delete tokenization policy. Reason: '{message}'

M

false

Tokenization

1211

{user_name} failed to update tokenization policy. Reason: '{message}'

M

false

Tokenization

1212

{user_name} failed to create masking policy. Reason: '{message}'

M

false

Tokenization

1213

{user_name} failed to delete masking policy. Reason: '{message}'

M

false

Tokenization

1214

{user_name} failed to update masking policy. Reason: '{message}'

M

false

Tokenization

1216

{user_name} failed to delete encryption policy. Reason: '{message}'

M

false

Tokenization

1300

{user_name} created the key: '{key_name}'

M

false

Tokenization

1301

{user_name} failed to create key: '{key_name}'. Reason: '{message}'

M

false

Tokenization

1302

{user_name} updated details of key: '{key_name}'

M

false

Tokenization

1303

{user_name} changed state of the key: '{key_name}' to '{state}'

M

false

Tokenization

1304

{user_name} scheduled deletion of key: '{key_name}'

M

false

Tokenization

1305

{user_name} cancelled scheduled deletion of key: '{key_name}'

M

false

Tokenization

1306

{user_name} failed to schedule or cancel schedule deletion of key: '{key_name}'

M

false

Tokenization

1307

{user_name} purged key: '{key_name}'

M

false

Tokenization

1308

{user_name} failed to purge key: '{key_name}'

M

false

Tokenization

1309

{user_name} rotated key: '{key_name}

M

false

Tokenization

1310

{user_name} failed to rotate key: '{key_name}'

M

false

Tokenization

1311

{user_name} fetched clear value of key: '{key_name}'

M

false

Tokenization

1312

{user_name} failed fetch clear value of key: '{key_name}'

M

false

Tokenization

1313

{user_name} exported key: '{key_name}'

M

false

Tokenization

1314

{user_name} failed to export key: '{key_name}'

M

false

Tokenization

1315

{user_name} generated {key_name} key and CSR

M

false

Tokenization

1316

{user_name} failed to generate {key_name} key and CSR. Reason: '{message}'

M

false

Tokenization

1317

{user_name} exported public key: '{key_name}'

M

false

Tokenization

1318

{user_name} failed to export public key: '{key_name}'

M

false

Tokenization

1319

{user_name} imported key: '{key_name}'

M

false

Tokenization

1320

{user_name} failed to import key: '{key_name}'

M

false

Tokenization

1321

{user_name} has successfully rebuilt keys database

M

false

Tokenization

1322

{user_name} has failed to rebuild keys database. Reason: '{message}'

M

false

Tokenization

1323

{user_name} imported clear key: '{key_name}'

M

false

Tokenization

1324

{user_name} failed to import clear key: '{key_name}'

M

false

Tokenization

1400

{user_name} created Personal Access Token {token_name}

M

false

Tokenization

1401

{user_name} {update_info} Personal Access Token {token_name}

M

false

Tokenization

1402

{user_name} deleted Personal Access Token {token_name}

M

false

Tokenization

1500

{user_name} created OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Tokenization

1501

{user_name} failed to create OIDC user {oidc_user_email}

M

false

Tokenization

1502

{user_name} updated OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Tokenization

1503

{user_name} failed to update OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Tokenization

1504

{user_name} deleted OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Tokenization

1505

{user_name} failed to delete OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Tokenization

1506

{user_name} created registration link for OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Tokenization

1507

{user_name} failed to create registration link for OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Tokenization

1508

Login failure for OIDC user {username} from {client_ip}. Reason: {reason}

M

false

Tokenization

1600

{user_name} cleared cache

M

false

Tokenization

1601

{user_name} failed to clear cache. Reason: '{message}'

M

false

Tokenization

1602

{user_name} changed caching state

M

false

Tokenization

1603

{user_name} failed to change caching state. Reason: '{message}'

M

false

Tokenization

1604

{user_name} fetched caching status

M

false

Tokenization

1605

{user_name} failed to get caching status. Reason: '{message}'

M

false

Tokenization

1606

{user_name} fetched caching settings

M

false

Tokenization

1607

{user_name} failed to get caching settings. Reason: '{message}'

M

false

Tokenization

1608

{user_name} set caching settings

M

false

Tokenization

1609

{user_name} failed to set caching settings. Reason: '{message}'

M

false

Tokenization