?KMClient: Error getting key from KMS: Error from server: Access Denied?
Originally Published: 2008-12-18
Article Number
Applies To
Microsoft 2003 Server SP1
RSA Key Manager C Client
Issue
The KMS server is returning the following error:
?KMClient: Error getting key from KMS: Error from server: Access Denied?
Running test tool getKey - byKeyClass an the following error was thrown:
Failed to retrieve key after 3 retries
KMClient: Error getting key from KMS: Error from server: Access Denied
GetKey failed: Error code = 4780018
/var/log/httpd/ssl_request_log:
TLSv1 RC4-MD5 CN=Certificate "POST /KMS/rpc/emu HTTP/1.1"
Cause
The cipher is not supported on the Key Manager Server.
To check the list of ciphers check the SSLCipherSuite directive in /etc/httpd/conf.d/ssl.conf on the Key.
Resolution
Validate that the cipher being used is supported. If supported check enableFIPS(by default FIPS is set to true) in the client configuration file. The RC4-MD5 cipher is not FIPS.
Notes
Related Articles
Unable to start Apache for after installing RSA Access Manager Agent 5.0 SP4 for Apache on Windows 2012 R2 Number of Views Access denied error while running the RSA Authentication Manager 8.x Administration SDK Number of Views SID: sd_login error unable to communicate with Authentication server Number of Views "Access Denied" error when attempting to view detailed information on the RSA Via Lifecycle and Governance Users page Number of Views Error 2004: Unable to communicate with server Access Denied when running RSA Authentication Manager Bulk Admin (AMBA) script Number of Views
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device RSA-2026-10: RSA Authentication Manager Security Update for Third-Party Component Vulnerabilities Download RSA SecurID Access Cloud User Event audit logs using Cloud Administration REST API CLU RSA SecurID Desktop Token 5.0.3 for Windows Administrator's Guide RSA SecurID Software Token 4.2.1 for Mac OS X Administrator's Guide
Don't see what you're looking for?
