Per Node Key Management logs errors to the AIX Error Log. Use the AIX errpt command to view the error logs. A helpful invocation of the errpt command is:
errpt -a -N spnkeymanThis shows a complete listing of all errors logged by spnkeyman.
An example of one error logged by spnkeyman is:
LABEL: SPNKEYMAN_ERROR104
IDENTIFIER: C0A5D912
Date/Time: Tue Oct 26 10:55:49
Sequence Number: 3482
Machine Id: 000101774C00
Node Id: c166n08
Class: S
Type: PEND
Resource Name: spnkeyman
Description
UNDETERMINED ERROR
Probable Causes
REVIEW EVENT DETAIL FOR PROBABLE CAUSE
Failure Causes
SOFTWARE SUBSYSTEM
Recommended Actions
REVIEW DETAILED DATA
PERFORM PROBLEM DETERMINATION PROCEDURES
CORRECT THEN RETRY OFFENDING SOFTWARE COMPONENT
IF PROBLEM PERSISTS, CONTACT APPROPRIATE
SERVICE REPRESENTATIVE
Detail Data
DETECTING MODULE
LP=PSSP, Fn- spnkeymand.c, SID=1.6, l#=582,
DIAGNOSTIC EXPLANATION
spsec_keyman_get_expiration error for ssp/sp_configd. err=44
2502-618 The required keyfile was not found:
/spdata/sys1/keyfiles/ssp/c166n08.ppd.pok.ibm.com
Underlying authentication mechanisms and libraries may have other NLS restrictions. Per Node Key Management displays messages received from these mechanisms without translating them. Consult necessary documentation for this authentication mechanisms for more information.
The AIX error log can wrap, and the error information can be overwritten. Periodically check the log for Per Node Key Management errors and, if any, save the information to a file.
This table lists the AIX error log templates for Per Node Key
Management. All entries are of type PEND, meaning that loss of
availability of a device or component is imminent.
Table 48. AIX Error Log templates for Per Node Key Management