?KMClient: Error getting key from KMS: Error from server: Access Denied?
Originally Published: 2008-12-18
Last Modified: 2023-10-06
Article Number
Applies To
Microsoft 2003 Server SP1
RSA Key Manager C Client
Issue
The KMS server is returning the following error:
?KMClient: Error getting key from KMS: Error from server: Access Denied?
Running test tool getKey - byKeyClass an the following error was thrown:
Failed to retrieve key after 3 retries
KMClient: Error getting key from KMS: Error from server: Access Denied
GetKey failed: Error code = 4780018
/var/log/httpd/ssl_request_log:
TLSv1 RC4-MD5 CN=Certificate "POST /KMS/rpc/emu HTTP/1.1"
Cause
The cipher is not supported on the Key Manager Server.
To check the list of ciphers check the SSLCipherSuite directive in /etc/httpd/conf.d/ssl.conf on the Key.
Resolution
Validate that the cipher being used is supported. If supported check enableFIPS(by default FIPS is set to true) in the client configuration file. The RC4-MD5 cipher is not FIPS.
Notes
Related Articles
Access denied error while running the RSA Authentication Manager 8.x Administration SDK Number of Views Unable to start Apache for after installing RSA Access Manager Agent 5.0 SP4 for Apache on Windows 2012 R2 Number of Views The RSA Authentication Manager 8.x RSA RADIUS Server Operations Console Service Stops with a FAILED State. Number of Views "Access Denied" error when attempting to view detailed information on the RSA Via Lifecycle and Governance Users page Number of Views Windows collection has stopped working but did work in the past. Number of Views
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device Reporting on RSA Authentication Manager 8.x users with On-Demand Token, a fixed passcode or a hardware/software token assi… How to Download OTP Token Seed Files from myRSA Anomalix idGenius - SAML Relying Party Configuration - RSA Ready Implementation Guide RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide
Don't see what you're looking for?
