Validation Information The Validation Information base object is a structure that contains details of a formal validation. Specific fields MAY pertain only to certain types of validations. Object Encoding REQUIRED Validation Information Structure Validation Authority Type Enumeration, see 9.1.3.2.40 Yes Validation Authority Country Text String No Validation Authority URI Text String No Validation Version Major Integer Yes Validation Version Minor Integer No Validation Type Enumeration, see 0 Yes Validation Level Integer Yes Validation Certificate Identifier Text String No Validation Certificate URI Text String No Validation Vendor URI Text String No Validation Profile Text String (MAY be repeated) No Table 41: Validation Information Structure The Validation Authority along with the Validation Version Major, Validation Type and Validation Level SHALL be provided to uniquely identify a validation for a given validation authority. If the Validation Certificate URI is not provided the server SHOULD include a Validation Vendor URI from which information related to the validation is available. The Validation Authority Country is the two letter ISO country code. Capability Information The Capability Information base object is a structure that contains details of the supported capabilities.
Request Payload Object REQUIRED Description Unique Identifier, see 3.1 No Determines the object whose attributes are being deleted. If omitted, then the ID Placeholder value is used by the server as the Unique Identifier. Attribute Name, see 2.1.1 Yes Specifies the name of the attribute associated with the object to be deleted. Attribute Index, see 2.1.1 No Specifies the Index of the Attribute. Table 204: Delete Attribute Request Payload Response Payload Object REQUIRED Description Unique Identifier, see 3.1 Yes The Unique Identifier of the object. Attribute, see 2.1.1 Yes The deleted attribute associated with the object. Table 205: Delete Attribute Response Payload Obtain Lease This operation requests the server to obtain a new Lease Time for a specified Managed Object. The Lease Time is an interval value that determines when the client's internal cache of information about the object expires and needs to be renewed. If the returned value of the lease time is zero, then the server is indicating that no lease interval is effective, and the client MAY use the object without any lease time limit. If a client's lease expires, then the client SHALL NOT use the associated cryptographic object until a new lease is obtained. If the server determines that a new lease SHALL NOT be issued for the specified cryptographic object, then the server SHALL respond to the Obtain Lease request with an error. The response payload for the operation contains the current value of the Last Change Date attribute for the object. This MAY be used by the client to determine if any of the attributes cached by the client need to be refreshed, by comparing this time to the time when the attributes were previously obtained. Request Payload Object REQUIRED Description Unique Identifier, see 3.1 No Determines the object for which the lease is being obtained. If omitted, then the ID Placeholder value is used by the server as the Unique Identifier. Table 206: Obtain Lease Request Payload
Request Payload Object REQUIRED Description Protocol Version, see 6.1 No, MAY be Repeated The list of protocol versions supported by the server ordered in decreasing order of preference. Table 259: Discover Versions Request Payload Response Payload Object REQUIRED Description Protocol Version, see 6.1 No, MAY be repeated The list of protocol versions supported by the client ordered in decreasing order of preference. Table 260: Discover Versions Response Payload
Error Definition Action Result Reason Protocol major version mismatch Response message containing a header and a Batch Item without Operation, but with the Result Status field set to Operation Failed Invalid Message Error parsing batch item or payload within batch item Batch item fails; Result Status is Operation Failed Invalid Message The same field is contained in a header/batch item/payload more than once Result Status is Operation Failed Invalid Message Same major version, different minor versions; unknown fields/fields the server does not understand Ignore unknown fields, process rest normally N/A Same major & minor version, unknown field Result Status is Operation Failed Invalid Field Client is not allowed to perform the specified operation Result Status is Operation Failed Permission Denied Maximum Response Size has been exceeded Result Status is Operation Failed Response Too Large Server does not support operation Result Status is Operation Failed Operation Not Supported The Criticality Indicator in a Message Extension structure is set to True, but the server does not understand the extension Result Status is Operation Failed Feature Not Supported Message cannot be parsed Response message containing a header and a Batch Item without Operation, but with the Result Status field set to Operation Failed Invalid Message Operation requires attestation data which was not provided by the client, and the client has set the Attestation Capable indicator to True Result Status is Operation Failed Attestation Required Operation requires attestation data which was not provided by the client, and the client has set the Attestation Capable indicator to False Result Status is Operation Failed Permission Denied
Locate Error Definition Result Status Result Reason Non-existing attributes, attributes that the server does not understand or templates that do not exist are given in the request Operation Failed Invalid Field Table 336: Locate Errors Check Error Definition Result Status Result Reason Object does not exist Operation Failed Item Not Found Object is archived Operation Failed Object Archived Check cannot be performed on this object Operation Failed Illegal Operation The client is not allowed to use the object according to the specified attributes Operation Failed Permission Denied Table 337: Check Errors
Modify Attribute Error Definition Result Status Result Reason No object with the specified Unique Identifier exists Operation Failed Item Not Found A specified attribute does not exist (i.e., it needs to first be added) Operation Failed Invalid Field No matching attribute instance exists Operation Failed Item Not Found The specified attribute is read-only Operation Failed Permission Denied Trying to set the Name attribute value to a value already used by another object Operation Failed Illegal Operation The particular Application Namespace is not supported, and Application Data cannot be generated if it was omitted from the client request Operation Failed Application Namespace Not Supported Object is archived Operation Failed Object Archived Table 342: Modify Attribute Errors Delete Attribute Error Definition Result Status Result Reason No object with the specified Unique Identifier exists Operation Failed Item Not Found Attempt to delete a attribute Operation Failed Permission Denied No matching attribute instance exists Operation Failed Item Not Found No attribute with the specified name exists Operation Failed Item Not Found Object is archived Operation Failed Object Archived Table 343: Delete Attribute Errors Obtain Lease Error Definition Result Status Result Reason No object with the specified Unique Identifier exists Operation Failed Item Not Found The server determines that a new lease is not permitted to be issued for the specified cryptographic object Operation Failed Permission Denied Object is archived Operation Failed Object Archived Table 344: Obtain Lease Errors
MAC Error Definition Result Status Result Reason No object with the specified Unique Identifier exists Operation Failed Item Not Found Object specified is not able to be used for MACing Operation Failed Permission Denied Cryptographic error during MACing Operation Failed Cryptographic Failure Object is archived Operation Failed Object Archived The Key Value is not present on the server Operation Failed Key Value Not Present No outstanding operation with the specified Correlation Value exists Operation Failed Item Not Found Table 357: MAC Errors MAC Verify Error Definition Result Status Result Reason No object with the specified Unique Identifier exists Operation Failed Item Not Found Object specified is not able to be used for MAC verification Operation Failed Permission Denied Cryptographic error during MAC verification Operation Failed Cryptographic Failure Object is archived Operation Failed Object Archived The Key Value is not present on the server Operation Failed Key Value Not Present No outstanding operation with the specified Correlation Value exists Operation Failed Item Not Found Table 358: MAC Verify Errors RNG Retrieve Error Definition Result Status Result Reason Cryptographic error during RNG Retrieve Operation Failed Cryptographic Failure Table 359: RNG Retrieve Errors RNG Seed Error Definition Result Status Result Reason Cryptographic error during RNG Seed Operation Failed Cryptographic Failure Table 360: RNG Seed Errors
Join Split Key Error Definition Result Status Result Reason Object Type is not recognized Operation Failed Invalid Field Templates that do not exist are given in request Operation Failed Item Not Found Incorrect attribute value(s) specified Operation Failed Invalid Field Error creating cryptographic object Operation Failed Cryptographic Failure Trying to set more instances than the server supports of an attribute that MAY have multiple instances Operation Failed Index Out of Bounds Trying to create a new object with the same Name attribute value as an existing object Operation Failed Invalid Field The particular Application Namespace is not supported, and Application Data cannot be generated if it was omitted from the client request Operation Failed Application Namespace Not Supported Template object is archived Operation Failed Object Archived Number of Unique Identifiers given in request is less than Split Key Threshold Operation Failed Cryptographic Failure? Split Key Method not supported Operation Failed Invalid Field No object with the specified Unique Identifier exists Operation Failed Item Not Found One or more of the objects is archived Operation Failed Object Archived Table 363: Join Split Key Errors
Export Error Definition Action Result Reason Object does not exist Operation Failed Item Not Found Wrapping key does not exist Operation Failed Item Not Found Object with Encryption Key Information exists, but it is not a key Illegal Operation Object with Encryption Key Information exists, but it is not able to be used for wrapping Operation Failed Permission Denied Object with MAC/Signature Key Information exists, but it is not a key Operation Failed Illegal Operation Object with MAC/Signature Key Information exists, but it is not able to be used for MACing/signing Operation Failed Permission Denied Object exists but cannot be provided in the desired Key Format Type and/or Key Compression Type Operation Failed Key Format Type and/or Key Compression Type Not Supported Cryptographic Parameters associated with the object do not exist or do not match those provided in the Encryption Key Information and/or Signature Key Information Operation Failed Item Not Found Object exists but cannot be provided in the desired Encoding Option Operation Failed Encoding Option Error Encoding Option not permitted when Key Wrapping Specification contains attribute names Operation Failed Encoding Option Error Key Wrap Type is not supported by the server Operation Failed Not Supported Table 364: Export Errors
Tag Cross-Reference This table is not normative. Object Defined Type Notes Activation Date 3.24 Date-Time Application Data 3.36 Text String Application Namespace 3.36 Text String Application Specific Information 3.36 Structure Archive Date 3.32 Date-Time Asynchronous Correlation Value 6.8 Byte String Asynchronous Indicator 6.7 Boolean Attribute 2.1.1 Structure Attribute Index 2.1.1 Integer Attribute Name 2.1.1 Text String Attribute Value 2.1.1 * type varies Authentication 6.6 Structure Batch Count 6.14 Integer Batch Error Continuation Option 6.13, 9.1.3.2.30 Enumeration Batch Item 6.15 Structure Batch Order Option 6.12 Boolean Block Cipher Mode 3.6, 9.1.3.2.14 Enumeration Cancellation Result 4.27, 9.1.3.2.25 Enumeration Certificate 2.2.1 Structure Certificate Identifier 3.13 Structure deprecated as of version 1.1 Certificate Issuer 3.13 Structure deprecated as of version 1.1 Certificate Issuer Alternative Name 3.15 Text String deprecated as of version 1.1 Certificate Issuer Distinguished Name 3.15 Text String deprecated as of version 1.1 Certificate Length 3.9 Integer Certificate Request 4.7, 4.8 Byte String Certificate Request Type 4.7, 4.8, 9.1.3.2.22 Enumeration Certificate Serial Number 3.9 Byte String Certificate Subject 3.14 Structure deprecated as of version 1.1 Certificate Subject Alternative Name 3.14 Text String deprecated as of version 1.1 Certificate Subject Distinguished Name 3.14 Text String deprecated as of version 1.1