Viewing KMC Accounting Log Messages Output

The output of the log entry is displayed in the following format:

"<timestamp> User: <username> Host: <host> Cluster: <cluster name> Id:

<cluster id> Operation: <operation> Status: <status> Details: <details>"

 

The following is a complete listing of logged SME operations and

expected status values. The logged details for an operation depends

upon the resulting status of the operation and/or other criteria

documented below.

 

-------------------------------------

Operation: STORE_KEY Logged as: "Store key"

Description: A new key is being written to the keystore. The details

for the accounting log of a STORE_KEY operation depends upon the

KEY_TYPE and the STATUS for the operation.

 

Details:

 

KEY_TYPE: MasterKey

 

SUCCESS: "key type: <key type> GUID: <guid>"

FAILURE: "key type: <key type> GUID: <guid> error: <description>"

 

KEY_TYPE: TapeVolumeGroupSharedKey

 

SUCCESS: "key type: <key type> GUID: <guid> tape group: <tape group

name> tape volume group: <tape volume group name>"

FAILURE: "key type: <key type> GUID: <guid> tape group: <tape group

name> tape volume group: <tape volume group name> error: <description>"

 

KEY_TYPE: TapeVolumeGroupWrapKey

 

SUCCESS: "key type: <key type> GUID: <guid> tape group: <tape group

name> tape volume group: <tape volume group name>"

FAILURE: "key type: <key type> GUID: <guid> tape group: <tape group

name> tape volume group: <tape volume group name> error: <description>"

 

KEY_TYPE: TapeVolumeKey

 

SUCCESS: "key type: <key type> GUID: <guid> tape group: <tape group

name> tape volume group: <tape volume group name> barcode: <barcode>"

FAILURE: "key type: <key type> GUID: <guid> tape group: <tape group

name> tape volume group: <tape volume group name> barcode: <barcode>

error: <description>"

 

-------------------------------------

Operation: GET_KEY Logged as: "Retrieve key"

Description: A key is being requested from keystore. The details for

the accounting log of a GET_KEY operation depend upon the query

parameter and STATUS for the operation.

 

Details:

 

QUERY PARAMETER: Guid

 

SUCCESS: "GUID: <guid>"

FAILURE: "GUID: <guid>"

 

QUERY PARAMETER: Cloned from Guid

 

SUCCESS: "Cloned from GUID: <guid>"

FAILURE: "Cloned from GUID: <guid>"

 

-------------------------------------

Operation: ARCHIVE_KEY Logged as: "Archive key"

Description: A key is removed from "active" state and moved to

"archived" state.

 

Details:

 

SUCCESS: "GUID: <guid>"

FAILURE: "GUID: <guid> error: <description>"

 

-------------------------------------

Operation: ARCHIVE_ALL_KEYS Logged as: "Archive all keys"

Description: All keys are archived for an instance of a KEY_TYPE.

The details for the accounting log of a ARCHIVE_ALL_KEYS operation

depends upon the KEY_TYPE and the STATUS for the operation.

 

Details:

 

KEY_TYPE: TapeVolumeGroupSharedKey

 

SUCCESS: "tape group: <tape group name> tape volume group: <tape

volume group name>"

FAILURE: "tape group: <tape group name> tape volume group: <tape

volume group name> error: <description>"

 

KEY_TYPE: TapeVolumeGroupWrapKey

 

SUCCESS: "tape group: <tape group name> tape volume group: <tape

volume group name>"

FAILURE: "tape group: <tape group name> tape volume group: <tape

volume group name> error: <description>"

 

KEY_TYPE: TapeVolumeKey

 

SUCCESS: "tape group: <tape group name> tape volume group: <tape

volume group name> barcode: <barcode>"

FAILURE: "tape group: <tape group name> tape volume group: <tape

volume group name> barcode: <barcode> error: <description>"

 

 

-------------------------------------

Operation: PURGE_KEY Logged as: "Purge key"

Description: A key and references to it are removed from the keystore.

 

Details:

 

SUCCESS: "GUID: <guid>"

FAILURE: "GUID: <guid> error: <description>"

 

 

-------------------------------------

Operation: DELETE_ALL_TAPE_VOLUME_KEYS Logged as: "Delete Tape

Volume Keys"

Description: All tape volume keys for the given tape volume are

removed from the keystore.

 

Details:

 

SUCCESS: "tape group: <tape group name> tape volume group: <tape

volume group name>"

 

-------------------------------------

Operation: DELETE_ALL_TAPE_VOLUME_SHARED_KEYS Logged as:

"Delete Tape Volume Group Shared Keys for cluster"

Description: All shared keys for the given tape volume are removed

from the keystore.

 

Details:

 

SUCCESS: "tape group: <tape group name> tape volume group: <tape

volume group name>"

 

-------------------------------------

Operation: DELETE_ALL_TAPE_VOLUME_WRAP_KEYS Logged as: "Delete

Tape Volume Group Wrap Keys for cluster"

Description: All wrap keys for the given tape volume are removed from

the keystore.

 

Details:

 

SUCCESS: "tape group: <tape group name> tape volume group: <tape

volume group name>"

 

-------------------------------------

Operation: EXPORT_ARCHIVED Logged as: "Export archived cluster"

Description: An archived cluster is being exported. The operation is

being logged per tape volume group exported for the requested cluster.

 

Details:

 

INITIATED: "tape group: <tape group name> tape volume group: <tape

volume group name> keys exported: null"

SUCCESS: "tape group: <tape group name> tape volume group: <tape

volume group name> keys exported: <count>"

FAILURE: "tape group: <tape group name> tape volume group: <tape

volume group name> keys exported: <count> error: <description>"

 

-------------------------------------

Operation: EXPORT Logged as: "Export cluster"

Description: A cluster is being exported. The operation is being

logged per tape volume group exported from the requested cluster.

 

Details:

 

INITIATED: "tape group: <tape group name> tape volume group: <tape

volume group name> keys exported: null"

SUCCESS: "tape group: <tape group name> tape volume group: <tape

volume group name> keys exported: <count>"

FAILURE: "tape group: <tape group name> tape volume group: <tape

volume group name> keys exported: <count> error: <description>"

 

-------------------------------------

Operation: IMPORT Logged as: "Import keys"

Description: Keys are imported into a cluster. The operation is being

logged per tape volume group.

 

Details:

 

INITIATED: "tape group: <tape group name> tape volume group: <tape

volume group name> keys imported: null"

SUCCESS: "tape group: <tape group name> tape volume group: <tape

volume group name> keys imported: <count>"

FAILURE: "tape group: <tape group name> tape volume group: <tape

volume group name> keys imported: <count> of <total count> total.

Skipped : <count> error: <description>"

 

-------------------------------------

Operation: REKEY_MASTER_KEY Logged as: "Master key rekey"

Description: A master key is being "re-keyed" or replaced with a new

master key. All keys wrapped w/ the old master key are unwrapped and

re-wrapped with the new master key.

 

Details:

 

INITIATED: ""

SUCCESS: ""

FAILURE: "error: <description>"

 

-------------------------------------

Operation: ABORT_REKEY_MASTER_KEY Logged as: "Abort master key

rekey"

Description: A re-key operation has been aborted. If the operation

cannot be aborted, the failure is logged.

 

Details:

 

SUCCESS: ""

FAILURE: "error: <description>"

 

-------------------------------------

Operation: GET_MASTER_KEY_SHARE Logged as: "Master key share

retrieved"

Description: When storing master key shares on smartcards, the share

is verified as being written correctly by reading the share and

comparing. This logs the result of that GET operation.

 

Details:

 

SUCCESS: "share index: <share index> smartcard label: <smartcard

label> smartcard serial number: <serial number> GUID: <guid>"

FAILURE: "share index: <share index> smartcard label: <smartcard

label> smartcard serial number: <serial number> GUID: <guid> error:

<description>"

 

-------------------------------------

Operation: REKEY_CLONE_WRAP_KEYS Logged as: "Clone tape volume-

group wrap keys"

Description: Part of Master Key re-key involves cloning wrap keys and

re-wrapping them with the new master key. This logs the result of

that cloning and re-wrap operation.

 

Details:

 

SUCCESS: "<count> keys of <total count> cloned successfully"

FAILURE: "<count> keys of <total count> cloned successfully"