The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
This appendix provides the list of system log messages supported in the SSL Services Module.
Error Message STE-2-IPC_HEALTH_PROBE: [chars]
Explanation This message indicates that the system did not receive a health probe response from the specified modules.
Recommended Action No action is required. The system resets itself automatically. If you continue to see this message after the system resets itself, contact your Cisco technical support representative.
Error Message STE-2-IPC_HEALTH_PROBE_HEAD: The following modules failed to respond to a health probe.
Explanation This message indicates that the system did not receive a health probe response from the specified modules.
Recommended Action No action is required. The system resets itself automatically. If you continue to see this message after the system resets itself, contact your Cisco technical support representative.
Error Message STE-2-IPC_HEALTH_PROBE_TAIL: Declaring the module dead.
Explanation This message indicates that the system did not receive a health probe response from the specified modules.
Recommended Action No action is required. The system resets itself automatically. If you continue to see this message after the system resets itself, contact your Cisco technical support representative.
Error Message STE-3-APP_IPC_STATUS_FAILED: Module (APP) got a response with status failed.
Explanation This message indicates that the module could not process the inter-process communications (IPC) message.
Recommended Action If you see this message when entering a command, reenter the command. If you do not see this message when entering a command, try rebooting the module to eliminate the problem.
Error Message STE-3-CRYPTO_IPC_FAILED: Failed to send IPC message to SSL Processor: [chars] [dec]
Explanation This message indicates that the cryptographic module encountered an error when sending an IPC message to one or more SSL processors.
Recommended Action Cancel and reenter the command. If this message recurs, copy the error message exactly as it appears on the console or in the system log, contact your Cisco technical support representative, and provide the representative with the gathered information.
Error Message STE-3-FDU_IPC_BUFFER_ALLOC_FAILED: Module (FDU) failed to get a buffer to send a IPC message.
Explanation This message indicates that the system failed to allocate a buffer to send IPC messages.
Recommended Action If you see this message when entering a command, reenter the command. If you do not see this message when entering a command, reboot the module.
Error Message STE-3-IPC_BUFFER_ALLOC_FAILED: Module (IPC) failed to get a buffer to send a IPC message.
Explanation This message indicates that the module is in a transient state or that a command failed.
Recommended Action If this message is related to the CLI, reenter the command. If this situation affects the functionality of the module, contact your Cisco technical support representative.
Error Message STE-3-IPC_INVALID_MID: IPC received a message with a invalid destination module id [dec]
Explanation This message indicates that a source module ID is not registered to receive IPC messages.
Recommended Action If this situation affects the functionality of the module, contact your Cisco technical support representative.
Error Message STE-3-IPC_INVALID_TYPE: IPC received a message with a invalid type [dec]
Explanation This message indicates that the system might have received a message that was not intended for it.
Recommended Action If this situation affects the functionality of the module, contact your Cisco technical support representative.
Error Message STE-3-IPC_NULL_RECEIVE_METHOD: IPC module received a message with NULL callback.
Explanation This message indicates that IPC received a message that does not have a valid callback set for it.
Recommended Action If this situation affects the functionality of the module, contact your Cisco technical support representative.
Error Message STE-3-IPC_NULL_RECEIVE_QUEUE: IPC module received a message with method QUEUE but queue is NULL.
Explanation This message indicates that IPC received a message that does not have a valid queue set for it.
Recommended Action If this situation affects the functionality of the module, contact your Cisco technical support representative.
Error Message STE-3-IPC_SEND_FOR_DATE_FAILED: Module (IPC) failed to send a IPC message to get date and time.
Explanation This message indicates that the daughter card is unable to synchronize with the clock on the supervisor engine because of a failure in the control channel. This situation sometimes occurs during bootup.
Recommended Action Set the clock manually by entering the set clock command.
Error Message STE-3-PKI_CERT_INSTALL_FAILED: Failed to install a certificate chain, trustpoint: [chars], proxy service: [chars], index: [dec]
Explanation This message indicates that the public key infrastructure (PKI) module failed to install a certificate chain for the specified proxy service. This error might be due to an unsupported key type or size.
Recommended Action Check the configuration and state of the key pair associated with the trustpoint assigned to the specified proxy service. Correct the key type or size, and reenroll the certificate. Remove the trustpoint assigned to the proxy service, and reassign it. If this message recurs, copy the error message exactly as it appears on the console or in the system log, contact your Cisco technical support representative, and provide the representative with the gathered information.
Error Message STE-3-PKI_CERT_ROLLOVER_FAILED: The process of rolling over the certificate without the sudden loss of services has failed for the proxy service [chars], trustpoint [chars]
Explanation This message indicates that the rollover process cannot be completed because of an error that was encountered when installing the new certificate. This error might be due to an unsupported key type or size.
Recommended Action Check the current configuration and state of the key pair associated with the trustpoint assigned for the proxy service. Correct the key type or size, and reenroll the certificate. Remove the trustpoint assigned to the service, and reassign it. Enter the show ssl-proxy service command to display information about keys and certificates associated with the proxy service.
Error Message STE-3-PKI_INVALID_IPC_MSG: Invalid PKI IPC messages: [chars]
Explanation This message indicates that the public key infrastructure module received an invalid IPC message.
Recommended Action If this message recurs, copy the error message exactly as it appears on the console or in the system log, contact your Cisco technical support representative, and provide the representative with the gathered information.
Error Message STE-3-PKI_IPC_FAILED: Failed to send IPC message to SSL Processor: [chars] [chars] [dec]
Explanation This message indicates that the public key infrastructure module encountered an error when the module sent an IPC message to one or more SSL processors.
Recommended Action Remove the certificate that is assigned to the proxy services. Reassign the certificate to trigger IPC again. If this message recurs, copy the error message exactly as it appears on the console or in the system log, contact your Cisco technical support representative, and provide the representative with the gathered information.
Error Message STE-3-PKI_KEY_INSTALL_FAILED: Failed to install a key pair: [chars], trustpoint: [chars], proxy service: [chars], index: [dec]
Explanation This message indicates that the Public Key Infrastructure module failed to install a key pair for the specified proxy service.
Recommended Action Check that the key pair of the trust point assigned to the proxy service is in the IOS key chain by entering the show crypto key mypub rsa command. Remove the certificate that was assigned to the proxy service. Reassign the certificate to reinstall it. If this message recurs, copy the error message exactly as it appears on the console or in the system log, contact your Cisco technical support representative, and provide the representative with the gathered information
Error Message STE-3-PKI_MISCONFIGURED_KEY_TYPE: Trustpoint [chars] key type [chars] does not match type for SSL proxy service.
Explanation This message indicates that the key type of the trust point must be the same as what was configured for the SSL proxy service.
Recommended Action Regenerate a key pair of the same type configured for the SSL proxy service. Enroll for a new certificate.
Error Message STE-3-PKI_MISMATCHED_CERT_KEY_TYPE: Certificate key type [chars] does not match type for SSL proxy service [chars].
Explanation This message indicates that the specified key type of the certificate must be the same as what was configured for the SSL proxy service.
Recommended Action Regenerate a key pair of the same type configured for the SSL proxy service. Enroll for a new certificate.
Error Message STE-3-PKI_OP_FAILURE: [chars] [chars] [dec]
Explanation This message indicates that a public key infrastructure operation failed. The failure might have occurred because of a lack of resources.
Recommended Action If this message recurs, copy the error message exactly as it appears on the console or in the system log, contact your Cisco technical support representative, and provide the representative with the gathered information.
Error Message STE-3-PKI_UNSUPPORTED_KEY_ALGORITHM: Algorithm of key pair [chars] is unsupported.
Explanation This message indicates that the key algorithm is unsupported. The supported key type is RSA.
Recommended Action Regenerate a key pair of the supported type.
Error Message STE-3-PKI_UNSUPPORTED_KEY_SIZE: Trustpoint [chars] key size is not supported. Supported sizes are: 512, 678, 1024, 1536, 2048-bit
Explanation This message indicates that the trust point key size is not supported.
Recommended Action Regenerate a key pair of supported size for the trust point. Enroll for a new certificate.
Error Message STE-3-PKI_UNSUPPORTED_KEY_TYPE: Trustpoint [chars] key type [chars] is unsupported.
Explanation This message indicates that the specified key type is unsupported. Supported key types are RSA key pairs and general purpose key pairs.
Recommended Action Regenerate a key pair of a supported type for the trust point. Enroll for a new certificate.
Error Message STE-3-SSL_IPC_BUFFER_ALLOC_FAILED: Module (SSL) failed to get a buffer to send a IPC message.
Explanation This message indicates that the system failed to allocate a buffer to send IPC messages.
Recommended Action If you see this message when entering a command, reenter the command. If you do not see this message when entering a command, try rebooting the module to eliminate the problem.
Error Message STE-3-SSL_IPC_SEND_FAILED: Module (SSL) failed to send a IPC message because of a lack of resources
Explanation This message indicates that the system failed to allocate a buffer to send IPC messages.
Recommended Action If you see this message when entering a command, reenter the command. If you do not see this message when entering a command, try rebooting the module to eliminate the problem.
Error Message STE-3-TCP_IPC_BUFFER_ALLOC_FAILED: Module (TCP) failed to get a buffer to send a IPC message.
Explanation This message indicates that the system failed to allocate a buffer to send IPC messages.
Recommended Action If you see this message when entering a command, reenter the command. If you do not see this message when entering a command, try rebooting the module to eliminate the problem.
Error Message STE-3-TCP_IPC_STATUS_FAILED: Module (TCP) got a response with status failed.
Explanation This message indicates that the module could not process the IPC message.
Recommended Action If you see this message when entering a command, reenter the command. If you do not see this message when entering a command, try rebooting the module to eliminate the problem.
Error Message STE-4-PKI_WEAK_KEY: Trustpoint [chars] key size is weak. Recommended sizes are: 1024, 1536 and 2048-bit
Explanation This message indicates that the key size is either 512 bits or 768 bits. We recommend stronger keys.
Recommended Action Regenerate a stronger key pair for the trust point and enroll for a new certificate.
Error Message STE-5-PKI_NO_ENTRY: No free key and certificate table entries. [dec] entries in use.
Explanation This message indicates that all entries in the proxy service key and certificate table are now in use. New proxy services cannot be supported.
Recommended Action Enter the show ssl-proxy stats pki command to display the counters. If long-lived connections still remain after rollover, some entries might still be used by old certificates. Clear the connections and restart the service.
Error Message STE-5-UPDOWN:ssl-proxy service [chars] changed state to [chars]
Explanation This message indicates that the SSL proxy service state changed.
Recommended Action No action is required.
Error Message STE-6-CRYPTO_SELFTEST_RUNNING: Cryptographic self-tests have started to run on the SSL Processor(s).
Explanation This message indicates that the cryptographic algorithm test cases are running in the background with a time interval of 1 to 8 seconds. These self-tests are run on each cryptographic device in turn. Data traffic performance might be impacted.
Recommended Action Enter the show ssl-proxy status crypto command to display test results. These tests are for troubleshooting purposes only. You do not need to continually run these tests in the background.
Error Message STE-6-CRYPTO_SELFTEST_STATS_CLEARED: Cryptographic self-tests statistics have been cleared.
Explanation This message indicates that statistics for the cryptographic self-tests have been cleared.
Recommended Action No action is required.
Error Message STE-6-CRYPTO_SELFTEST_STOPPED: Cryptographic self-tests have stopped to run on the SSL Processor(s).
Explanation This message indicates that the cryptographic algorithm tests are no longer running on the SSL processor.
Recommended Action No action is required.
Error Message STE-6-IPC_UNSUPPORTED_VERSION: Unsupported IPC Version number [dec]
Explanation This message indicates that the system received an IPC message with an invalid version number. Only IPC version 1.0 is supported.
Recommended Action No action is required. IPC retries sending the message. If you continue to see this message, contact your Cisco technical support representative.
Error Message STE-6-NVRAM_DOWNGRADE_NOT_READY
Explanation This message indicates that the configuration will not be saved when you downgrade the SSL module software to an earlier version.
Recommended Action If you plan to downgrade the SSL module software to an earlier version, issue the copy running-config startup-config command one more time. This action will prepare the configuration for the image downgrade. If you do not plan to downgrade the image, no action is required.
Error Message STE-6-NVRAM_DOWNGRADE_READY
Explanation This message indicates that the configuration will be save when you downgrade the SSL module software to an earlier version.
Recommended Action No action is required.
Error Message STE-6-PKI_CA_CERT_DELETE: [chars], Subject Name: [chars], Serial#: [chars], Index: [dec]
Explanation This message indicates that a certificate authority certificate was deleted because no proxy services use it.
Recommended Action No action is required. A record of this deletion can be archived for reference or auditing.
Error Message STE-6-PKI_CA_CERT_INSTALL: [chars], Subject Name: [chars], Serial#: [chars], Index: [dec]
Explanation This message indicates that a certificate authority certificate was installed for use by proxy services.
Recommended Action No action is required. A record of this certificate authority certificate can be archived for reference or auditing.
Error Message STE-6-PKI_CERT_HIST_CLEARED: [dec] certificate history records have been cleared from memory.
Explanation This message indicates that the specified number of certificate history records were cleared from the system memory.
Recommended Action No action is required.
Error Message STE-6-PKI_CERT_HIST_DISABLED: Certificate history of proxy services has been disabled.
Explanation This message indicates that the proxy service certificate history function was disabled. Certificate installation and deletion records will be cleared from memory. No new history records will be written into memory.
Recommended Action No action is required.
Error Message STE-6-PKI_CERT_HIST_ENABLED: Proxy Service Certificate History has been enabled.
Explanation This message indicates that the proxy service certificate history function was enabled. Certificate installation and deletion records will be written into memory.
Recommended Action Enter the show ssl-proxy certificate-history command to display certificate history records. Save the output of this command to a file for archiving.
Error Message STE-6-PKI_CERT_HIST_RECORD_THRESHOLD: [dec] certificate history records have been logged to memory\n. Maximum of [dec] can be logged before the oldest ones are overwritten.
Explanation This message indicates that there is maximum number of certificate history records that can be saved to memory. The maximum number will be reached soon. Older records will be overwritten.
Recommended Action Enter the show ssl-proxy certificate-history command to display certificate history records. To prevent the loss of older records, save the output of this command to a file for archiving.
Error Message STE-6-PKI_CERT_ROLLOVER_BEGIN: The process of rolling over the certificate without the sudden loss of services has begun for the proxy service: [chars], trustpoint: [chars]
Explanation This message indicates that the key pair, the certificate, or the trustpoint assigned to the specified proxy service has been modified. Until the new certificate is received, the old certificate will be used.
Recommended Action Finish the rollover process by enrolling or importing the modified trustpoint. Enter the show ssl-proxy service command to display information about certificates, key pairs, and trustpoints associated with the specified proxy service.
Error Message STE-6-PKI_CERT_ROLLOVER_END: The process of rolling over the certificate without the sudden loss of services has ended for the proxy service: [chars], trustpoint: [chars]
Explanation This message indicates that a new certificate has been received for the specified proxy service. The old certificate will be deleted when all connections using it are finished.
Recommended Action No action is required. Enter the show ssl-proxy service command to display more information about new and old certificates.
Error Message STE-6_PKI_SERVER_CERT_DELETE: Proxy: [chars], Trustpoint [chars], Key [chars], Serial#: [chars], Index: [dec]
Explanation This message indicates that a certificate was deleted for a proxy service.
Recommended Action No action is required. A record of this deletion can be archived for reference or auditing.
Error Message STE-6-PKI_SERVER_CERT_INSTALL: Proxy: [chars], Trustpoint: [chars], Key: [chars], Serial#: [chars], Index: [dec]
Explanation This message indicates that a certificate was installed for a proxy service.
Recommended Action No action is required. A record of this certificate can be archived for reference or auditing.
Error Message STE-6-PKI_TEST_CERT_INSTALL: Test key and certificate was installed into NVRAM in a PKCS#12 file.
Explanation This message indicates that a PKCS12 file, containing a key pair and a certificate chain that can be used for testing purposes, was copied from memory into the NVRAM device.
Recommended Action No action is required.
Error Message STE-7-IPC_REQUEST_RESPONSE_MISMATCH: IPC module received a message where the request and response do not match.
Explanation This message indicates that IPC received a message that does not have a corresponding valid request.
Recommended Action If this situation is impacting the functionality of the module, contact your Cisco technical support representative.