Toshiba 755 User Manual

Page of 104
7 CHECKING THE EQUIPMENT STATUS WITH TopAccess
84    Error Messages
Active Directory Domain - Verification of the Ticket has failed
Verify the user name and password and try again. If the problem 
persists please contact the administrator.
Active Directory Domain-The Domain specified could not be found Enter the correct domain name in network settings. If the problem 
persists please contact the administrator for the correct realm 
name for your server.
Information Failed User Authentication
Check Domain Name/User Name/Password
SNTP Server - Connect Error has occurred
The equipment could not connect to the SNTP Server. Check the 
SNTP settings.
No IKE proposal chosen
Check the IKEv1/IPsec proposal parameters
(like encryption/authentication algorithms, DH group, 
authentication methods) in MFP and peer machine.
IKE Certificate Authentication failed
Check
1. CA and user certificate in both MFP and remote peer - 
certificate timestamp and IPsec Certificate template should be 
valid.
2. CRL DP server name is mapped in MFP's host table or DNS 
entry.
3. Certificate against CRL.
IKE Pre-shared key Authentication failed
Mismatch in IKEv1 Pre Shared Key. Check the PSK in MFP and 
remote machine.
Invalid Certificate
Check the CA and user certificate in MFP and peer machine.
Certificate Type unsupported
Check the user certificate type. Supported type is “.pfx” file only.
Invalid certificate authority
Check the CA certificate in MFP and peer machine.
Certificate unavailable
Certificate has been deleted from Certificate store. Re-upload the 
corresponding certificates using Security Services.
No ISAKMP SA established
Check the IKEv1/IPsec proposal parameters
(like encryption/authentication algorithms, DH group, 
authentication methods) in MFP and peer machine.
Check
1. CA and user certificate in both MFP and remote peer - 
certificate timestamp and IPsec Certificate template should be 
valid.
2. CRL DP server name is mapped in MFP’s host table or DNS 
entry.
3. Certificate against CRL.
Invalid Signature
Mismatch in Signature payload (MAC or IV). Check the CA and 
user certificate in MFP and peer machine.
No IKEv2 proposal chosen
Check the IKEv2/IPsec proposal parameters
(encryption/authentication algorithms, DH group, authentication 
methods) in MFP and peer machine.
IKEv2 Certificate Authentication Failed
Check
1. CA and user certificate in both MFP and remote peer - 
certificate timestamp and IPsec Certificate template should be 
valid.
2. CRL DP server name is mapped in MFP’s host table or DNS 
entry.
3. Certificate against CRL.
IKEv2 Secret key Authentication failed
Mismatch in IKEv2 Pre Shared Key. Check the PSK in MFP and 
peer machine.
Falling Back to IKEv1
Remote machine is not supporting IKEv2. Going back to use 
IKEv1.
ISAKMP SA unusable (deleted)
Restart IPsec service on Peer and retry.
Crypto operation failed
If Certificates are being used, re-upload the corresponding 
certificates using Security Services. Restart IPsec Service on 
MFP.
Invalid key information
Check IKE settings in MFP and peer.
CA not trusted
Check the CA certificate in MFP and peer machine.
Check the CA certificate timestamp.
Authentication Method mismatch
Mismatch in IKE authentication type. Check the Authentication 
type in MFP and peer.
IKE Version mismatch
Mismatch in IKE version. Check the IKE version in MFP and peer.
TopAccess Message
Corrective Action