Toshiba E-STUDIO 555 Troubleshooting Manual page 86

7 CHECKING THE EQUIPMENT STATUS WITH TopAccess
TopAccess Message
Active Directory Domain - Verification of the Ticket has failed
Active Directory Domain-The Domain specified could not be found Enter the correct domain name in network settings. If the problem
Information Failed User Authentication
SNTP Server - Connect Error has occurred
No IKE proposal chosen
IKE Certificate Authentication failed
IKE Pre-shared key Authentication failed
Invalid Certificate
Certificate Type unsupported
Invalid certificate authority
Certificate unavailable
No ISAKMP SA established
Invalid Signature
No IKEv2 proposal chosen
IKEv2 Certificate Authentication Failed
IKEv2 Secret key Authentication failed
Falling Back to IKEv1
ISAKMP SA unusable (deleted)
Crypto operation failed
Invalid key information
CA not trusted
Authentication Method mismatch
IKE Version mismatch
84 Error Messages
Corrective Action
Verify the user name and password and try again. If the problem
persists please contact the administrator.
persists please contact the administrator for the correct realm
name for your server.
Check Domain Name/User Name/Password
The equipment could not connect to the SNTP Server. Check the
SNTP settings.
Check the IKEv1/IPsec proposal parameters
(like encryption/authentication algorithms, DH group,
authentication methods) in MFP and peer machine.
Check
1. CA and user certificate in both MFP and remote peer -
certificate timestamp and IPsec Certificate template should be
valid.
2. CRL DP server name is mapped in MFP's host table or DNS
entry.
3. Certificate against CRL.
Mismatch in IKEv1 Pre Shared Key. Check the PSK in MFP and
remote machine.
Check the CA and user certificate in MFP and peer machine.
Check the user certificate type. Supported type is ".pfx" file only.
Check the CA certificate in MFP and peer machine.
Certificate has been deleted from Certificate store. Re-upload the
corresponding certificates using Security Services.
Check the IKEv1/IPsec proposal parameters
(like encryption/authentication algorithms, DH group,
authentication methods) in MFP and peer machine.
Check
1. CA and user certificate in both MFP and remote peer -
certificate timestamp and IPsec Certificate template should be
valid.
2. CRL DP server name is mapped in MFP's host table or DNS
entry.
3. Certificate against CRL.
Mismatch in Signature payload (MAC or IV). Check the CA and
user certificate in MFP and peer machine.
Check the IKEv2/IPsec proposal parameters
(encryption/authentication algorithms, DH group, authentication
methods) in MFP and peer machine.
Check
1. CA and user certificate in both MFP and remote peer -
certificate timestamp and IPsec Certificate template should be
valid.
2. CRL DP server name is mapped in MFP's host table or DNS
entry.
3. Certificate against CRL.
Mismatch in IKEv2 Pre Shared Key. Check the PSK in MFP and
peer machine.
Remote machine is not supporting IKEv2. Going back to use
IKEv1.
Restart IPsec service on Peer and retry.
If Certificates are being used, re-upload the corresponding
certificates using Security Services. Restart IPsec Service on
MFP.
Check IKE settings in MFP and peer.
Check the CA certificate in MFP and peer machine.
Check the CA certificate timestamp.
Mismatch in IKE authentication type. Check the Authentication
type in MFP and peer.
Mismatch in IKE version. Check the IKE version in MFP and peer.