Error codes
| Code | Where | Meaning |
|---|---|---|
QUORUM_NOT_MET | Gateway | Fewer than two voters answered |
POLICY_REFUSED · CKR_FUNCTION_REJECTED | Gateway · PKCS#11 | A policy rule refused the request; the reason names the rule and what would allow it |
CKR_KEY_FUNCTION_NOT_PERMITTED | PKCS#11 | The purpose template of the key does not allow this operation |
UNKNOWN_KID | Gateway verify | The receipt names a voter that is not enrolled |
ROOST_NOT_ENABLED | Management API | No box is bound to this organization yet |
ROOST_DEVICE_NOT_FOUND | Management API | No box with that serial is bound here |
OWNER_REQUIRED | Management API | The action needs the organization Owner |
STEPUP_REQUIRED · STEPUP_FAILED | Management API | A passkey seal is missing or bound to something else |
AUDITOR_REQUIRED | Audit | Only an Auditor may do this once one is appointed |
REPORT_REJECTED · REPORT_REPLAYED · REPORT_CLOCK_SKEW | Box reports | Bad signature or unknown box · older than the last report · clock off by more than 5 minutes |
BOX_SIGNATURE_INVALID · BOX_REQUEST_REPLAYED | Box-side API | The box request signature failed or was reused |
CASE_STEP_OUT_OF_ORDER · REPLACEMENT_STEP_OUT_OF_ORDER | Maintenance | Steps must follow the defined order |
Each management page lists the full set of errors for its endpoints.