Error Code
Status Code | Error Code | Message | Description | Measure |
|---|---|---|---|---|
400 | CSMS.0002 | The value of parameter is invalid. | The XX parameter is invalid. | Enter a valid parameter. |
400 | CSMS.0003 | The request is invalid. | Invalid request. | Enter a valid URL. |
400 | CSMS.0004 | The requested body format is wrong. | The request body format is incorrect. | Enter a valid body. |
400 | CSMS.0005 | The resource does not exist. | The resource does not exist. | Enter valid secrets. |
400 | CSMS.0103 | The secret is in the scheduled deletion state. | The secret is in Pending deletion state and cannot be used. | Ensure that the secret is in Enabled or Disabled state. |
400 | CSMS.0105 | Can not delete the system internal stage. | Cannot delete the built-in version status of the system. | Do not delete the built-in version. |
400 | CSMS.0106 | The secret name not found int the db. | The secret name does not exist in the database. | Enter a valid secret name. |
400 | CSMS.0107 | The secret is in schedule delete state. | The secret is in Pending deletion state. | Enter other secrets. |
400 | CSMS.0108 | The secret is not in schedule delete state. | The secret is not in Pending deletion state. | Enter other secrets. |
400 | CSMS.0202 | The number of secret has reached the upper limit. | The number of secrets reaches the upper limit. | Delete other secrets. |
400 | CSMS.0203 | The number of stage has reached the upper limit. | The number of secret version statuses has reached the upper limit. | Delete other version statuses. |
400 | CSMS.0204 | The number of stage is greater than the quota limit. | The number of secret version statuses has exceeded the upper limit. | Delete other version statuses. |
400 | CSMS.0301 | Invalid X-Auth-Token. | Invalid X-Auth-Token. | Obtain the token again and ensure the token string is complete. |
400 | CSMS.0401 | Can not get the protected secret value using the provided KMS key. | Failed to encrypt or decrypt the secret value by using KMS. | Ensure the key exists and is enabled. |
403 | CSMS.0109 | The secret state is not enabled. | The secret is not enabled. | Enable the secret. |
403 | CSMS.0302 | The user role has no permission to access the interface. | The user role has no permission to access the API. | Contact the administrator to grant CSMS Fullaccess permissions. |
404 | CSMS.0205 | Version quota not found for secret | No version quota is found for secret XX. | The secret has been deleted. Select another secret. |
404 | CSMS.0206 | Stage quota not found for secret | No version status quota is found for secret XX. | The secret has been deleted. Select another secret. |
404 | CSMS.0207 | Secret quota not found. | No secret quota found. | The secret has been deleted. Select another secret. |
409 | CSMS.0101 | The secret name already exists. | The secret name is in use. | Enter another valid secret name. |
409 | CSMS.0102 | The version id already exists. | The secret version number already exists. | Enter another valid secret version number. |
409 | CSMS.0104 | The stage name already exists. | The version status name already exists. | Enter another valid version status name. |
500 | CSMS.0001 | An internal error occurred. | Internal service error. | Try again later or contact customer support. |
500 | CSMS.0006 | AES encrypt secret value occurred an error. | An error occurs while the secret value is encrypted using AES. | Try again later or contact customer support. |
500 | CSMS.0201 | The number of secret has reached the upper limit. | The quota exceeds the upper limit. | Delete other secrets. |
400 | KMS.0105 | A system exception occurred. Contact technical support. | A system exception occurs. Contact technical support. | Contact technical support. |
400 | KMS.0106 | It is replica service, readonly api allowed. | The replica service allows only read-only operations. | The replica service allows only read-only operations. |
400 | KMS.0201 | Invalid request URL. | Invalid request URL. | Enter a valid URL. |
400 | KMS.0202 | Invalid JSON format of the request message. | Invalid JSON format of the request message. | Enter a valid message. |
400 | KMS.0203 | Request message too long. | Request message too long. | Enter a valid message. |
400 | KMS.0204 | Parameters missing in the request message. | Parameters missing in the request message. | Enter a valid message. |
400 | KMS.0205 | Invalid key ID. | Invalid key ID. | Enter a valid key ID. |
400 | KMS.0206 | Invalid sequence number. | Invalid sequence number. | Enter a valid sequence number. |
400 | KMS.0208 | Invalid value of value encryption_context. | Invalid value of value encryption_context. | Enter a valid value of encryption_context. |
400 | KMS.0209 | The key has been disabled. | The key has been disabled. | Enable the key. |
400 | KMS.0210 | The key is in Scheduled deletion state and cannot be used. | The key is scheduled to be deleted and is unavailable. | Enable the key. |
400 | KMS.0211 | Cannot perform this operation on Default Master Keys. | Cannot perform this operation on default master keys. | Perform this operation on a common CMK. |
400 | KMS.0212 | Invalid resource type. | Invalid resource type. | Use the correct resource type. |
400 | KMS.0214 | The request format is invalid. | Invalid request format. | Use the correct request format. |
400 | KMS.0308 | Invalid parameter. | Invalid parameter. | Enter valid parameters. |
400 | KMS.0309 | External keys required. | External keys required. | Use an imported key. |
400 | KMS.0310 | The key is not in Pending import state. | The key is not pending to be imported. | Ensure the key is in Pending import state. |
400 | KMS.0311 | Failed to decrypt data using the RSA private key. | Failed to decrypt data using the RSA private key. | Ensure the input ciphertext is correct and try again, or contact customer service. |
400 | KMS.0312 | External keys cannot be rotated. | External keys cannot be rotated. | Use a common CMK. |
400 | KMS.0313 | Key rotation is not enabled. | Key rotation is not enabled. | Enable key rotation. |
400 | KMS.0315 | Invalid partition_id. | Invalid partition type. | Enter the correct partition type. |
400 | KMS.0317 | The cmk partition is not enabled. | The key partition type is not enabled. | Enter the type of the partition to be enabled. |
400 | KMS.0318 | Partition name has exist. | The partition type name already exists. | Enter a correct partition type name. |
400 | KMS.0319 | Rotation not supported in the current KMS version. | Rotation is not supported in the current KMS version. | Try again later or contact customer support. |
400 | KMS.0320 | Resource frozen. | Resource frozen. | Renew the service and try again. |
400 | KMS.0323 | Failed to obtain the partition of the key. | Failed to obtain the partition of the key. | Try again later or contact customer support. |
400 | KMS.0324 | RSA keys cannot be rotated. | RSA keys cannot be rotated. | Use a common CMK. |
400 | KMS.0325 | The asymmetric key is not support this operation. | This operation is not supported for asymmetric keys. | Try again using a symmetric key. |
400 | KMS.0327 | Failed to obtain user permissions. | Failed to obtain user permissions. | Contact the administrator to grant the KMS CMKFullaccess permission to the account. |
400 | KMS.0329 | Hash algorithm does not match the digest length. | Hash algorithm does not match the digest length. | Enter valid parameters or contact customer support. |
400 | KMS.0331 | The symmetric key is not support this operation. | This operation is not supported for symmetric keys. | Use a correct key type and try again. |
400 | KMS.0332 | This key is not support the signing algorithm. | The key does not support the signature algorithm. | Use a correct signature algorithm or contact technical support. |
400 | KMS.0333 | The signing algorithm SM2DSA_SM3 not support RAW signing. | The signature algorithm SM2DSA_SM3 does not support RAW signatures. | Use a correct signature algorithm or contact technical support. |
400 | KMS.0334 | The cmk is used to encrypt and decrypt. | This key is used for encryption and decryption. | This key is used for encryption and decryption. |
400 | KMS.0335 | The cmk is used to sign and verify. | This key is used for signature and verification. | This key is used for signature and verification. |
400 | KMS.0336 | The current region does not support SM4. | SM4 is not supported in the current region. | Replace the algorithm or contact technical support. |
400 | KMS.0337 | The current region does not support SM2. | SM2 is not supported in the current region. | Replace the algorithm or contact technical support. |
400 | KMS.0338 | The custom keystore do not support rotation. | The user-defined keystore does not support rotation. | Contact technical support. |
400 | KMS.0339 | The custom keystore do not support import key. | Keys cannot be imported to a custom keystore. | Contact technical support. |
400 | KMS.0340 | not support keystore. | Currently, the keystore is not supported. | Contact technical support. |
400 | KMS.0341 | The hmac key do not support this operation. | The HMAC key does not support this operation. | Enter valid parameters. |
400 | KMS.0401 | Tag list cannot be empty. | Tag list cannot be empty. | Enter valid parameters. |
400 | KMS.0402 | Invalid match value. | Invalid match value. | Enter valid parameters. |
400 | KMS.0403 | Invalid match key. | Invalid match key. | Enter valid parameters. |
400 | KMS.0404 | Invalid action. | Invalid action. | Enter valid parameters. |
400 | KMS.0405 | Invalid tag value. | Invalid tag value. | Enter valid parameters. |
400 | KMS.0406 | Invalid tag key. | Invalid tag key. | Enter valid parameters. |
400 | KMS.0407 | Invalid tag list size. | Invalid tag list size. | Enter valid parameters. |
400 | KMS.0408 | Invalid resourceType. | Invalid resourceType. | Enter valid parameters. |
400 | KMS.0409 | Too many tags. | Too many tags. | Delete unnecessary tags and try again. |
400 | KMS.0410 | Invalid tag value length. | Invalid tag value length. | Enter valid parameters. |
400 | KMS.0411 | Invalid tag key length. | Invalid tag key length. | Enter valid parameters. |
400 | KMS.0412 | Invalid tag list. | Invalid tag list. | Enter valid parameters. |
400 | KMS.0413 | Too many tag values. | The length of the values list in the tag exceeded the upper limit. | Enter valid parameters. |
400 | KMS.0414 | Invalid tags. | Invalid tags. | Enter valid parameters. |
400 | KMS.0415 | Invalid matches. | Invalid matches. | Enter valid parameters. |
400 | KMS.0417 | Invalid offset. | Invalid offset. | Enter valid parameters. |
400 | KMS.0418 | Offset is not required. | No offset is required. | Enter valid parameters. |
400 | KMS.1101 | Invalid key_alias. | Invalid key_alias. | Enter valid parameters. |
400 | KMS.1102 | Invalid realm. | Invalid realm. | Enter valid parameters. |
400 | KMS.1103 | Invalid key_description. | Invalid key_description. | Enter valid parameters. |
400 | KMS.1104 | Duplicate key aliases. | The key alias already exists. | Use another alias. |
400 | KMS.1105 | Too many keys. | Too many keys. | Increase key quota or delete unnecessary keys. |
400 | KMS.1108 | Failed to create the default partition for the key. | Failed to create the default partition for the key. | Try again later or contact customer support. |
400 | KMS.1109 | Failed to create the route for the key. | Failed to create the route for the key. | Try again later or contact customer support. |
400 | KMS.1110 | Invalid alg_type. | The algorithm type is invalid. | Use a correct algorithm type. |
400 | KMS.1114 | EC keys do not support to encrypt/decrypt. | The key cannot be encrypted or decrypted. | Use the correct key for encryption and decryption. |
400 | KMS.1115 | Symmetric keys do not support to sign/verify. | Signature verification is not supported for symmetric keys. | Try again using an asymmetric key. |
400 | KMS.1201 | The key is not disabled. | The key is not disabled. | Disable the key. |
400 | KMS.1301 | The key is not enabled. | The key is not enabled. | Enable the key. |
400 | KMS.1401 | Set the pending deletion period between 7 to 1096 days. | The scheduled deletion time ranges from 7 days to 1,096 days. | Enter valid parameters. |
400 | KMS.1402 | The key is already in Pending deletion state. | The key is already scheduled to be deleted. | No further operation required. |
400 | KMS.1404 | This region is not the original region of the key, and it is not allowed to import-key-material. | The key material cannot be imported because this region is not the original region of the key. | Importing key materials is not supported for the current site. |
400 | KMS.1501 | The key is not in Pending deletion state. | The key is not in Pending deletion state. | Create a scheduled deletion task for the key. |
400 | KMS.1601 | Invalid limit. | Invalid limit. | Enter valid parameters. |
400 | KMS.1602 | marker must be greater than or equals 0. | The value of marker must be greater than or equal to 0. | Enter valid parameters. |
400 | KMS.1603 | Invalid offset. | Invalid offset. | Enter valid parameters. |
400 | KMS.1801 | random_data_length must be 512 bits. | random_data_length must be 512 bits. | Enter valid parameters. |
400 | KMS.1802 | random_data_length must be a multiple of 8. | random_data_length must be a multiple of 8. | Enter valid parameters. |
400 | KMS.1901 | datakey_length must be in the range 8 bits to 8,192 bits. | datakey_length must be in the range of 8 bits to 8,192 bits. | Enter valid parameters. |
400 | KMS.1902 | key_spec can only be AES_128 or AES_256. | The value of key_spec must be AES_128 or AES_256. | Enter valid parameters. |
400 | KMS.1903 | datakey_length must be a multiple of 8. | datakey_length must be a multiple of 8. | Enter valid parameters. |
400 | KMS.1904 | The rsa wrapping data key is over length 1520 bits. | The RSA wrapping data key exceeds 1,520 bytes. | Enter valid parameters. |
400 | KMS.2001 | datakey_length must be 512 bits. | datakey_length must be 512 bits. | Enter valid parameters. |
400 | KMS.2101 | Invalid plain_text. | The data key plaintext is invalid. | Enter valid parameters. |
400 | KMS.2102 | datakey_plain_length must be 64 bytes. | datakey_plain_length must be 64 bytes. | Enter valid parameters. |
400 | KMS.2103 | Failed to verify the DEK hash. | Failed to verify the DEK hash. | Ensure the data key is valid or contact customer support. |
400 | KMS.2104 | The length of plain_text does not match datakey_plain_length. | The length of plain_text does not match datakey_plain_length. | Enter valid parameters. |
400 | KMS.2105 | The symmetric key not support this encryption algorithm. | The symmetric key does not support this encryption algorithm. | Enter valid parameters. |
400 | KMS.2106 | The rsa key not support this encryption algorithm. | The RSA key does not support this encryption algorithm. | Enter valid parameters. |
400 | KMS.2107 | The sm2 key not support this encryption algorithm. | The SM2 key does not support this encryption algorithm. | Enter valid parameters. |
400 | KMS.2108 | The rsa encryption plain_text is over length. | rsa encryption plain_text is too long. | Enter valid parameters. |
400 | KMS.2201 | Invalid cipher_text. | The data key ciphertext is invalid. | Enter valid parameters. |
400 | KMS.2202 | datakey_cipher_length must be 64 bytes. | datakey_cipher_length must be 64 bytes. | Enter valid parameters. |
400 | KMS.2203 | Failed to verify the DEK hash. | Failed to verify the DEK hash. | Ensure the data key is valid or contact customer support. |
400 | KMS.2204 | The length of cipher_text does not match datakey_cipher_length. | The length of cipher_text does not match datakey_cipher_length. | Enter valid parameters. |
400 | KMS.2301 | The quota value is beyond the maximum configurable limit. | The quota value exceeds the upper limit. | Enter valid parameters. |
400 | KMS.2302 | New quota value must not less than old. | The new quota cannot be smaller than the old quota. | Enter valid parameters. |
400 | KMS.2303 | The quota type is not supported. | The quota type is not supported. | Enter valid parameters. |
400 | KMS.2304 | Can not update grant quota when no grant has created. | If no grant is created, the grant quota cannot be updated. | Create a grant and try again. |
400 | KMS.2305 | Can not update cmk quota when no cmk has created. | The CMK quota cannot be updated if no CMK is created. | Create a key and try again. |
400 | KMS.2401 | Specify an operation in addition to create-grant. | The operation cannot contain only create-grant. | Enter valid parameters. |
400 | KMS.2402 | Invalid user ID. | Invalid user ID. | Enter valid parameters. |
400 | KMS.2403 | Failed to create the grant. | Failed to create the grant. | Try again later or contact customer support. |
400 | KMS.2404 | Too many CMK grants. | Too many CMK grants. | Increase grant quota or delete unnecessary grants. |
400 | KMS.2405 | Too many grants. | Too many grants. | Increase grant quota or delete unnecessary grants. |
400 | KMS.2406 | The basic partition has no right to create grant. | The basic partition does not have the permission to create a grant. | Contact technical support. |
400 | KMS.2501 | Invalid grant ID. | Invalid grant ID. | Enter a valid grant ID. |
400 | KMS.2502 | grant_id and key_id do not match. | grant_id and key_id do not match. | Ensure input grant_id matches key_id. |
400 | KMS.2601 | Token expired. | Token expired. | Obtain a new token. |
400 | KMS.2602 | Key expiration time must be later than the current time. | Key expiration time must be later than the current time. | Set a valid key expiration time. |
400 | KMS.2603 | Key IDs in the imported key and token do not match. | Key IDs in the imported key and token do not match. | Ensure the key ID in the imported key matches that in the token. |
400 | KMS.2604 | The external key plaintext length must be 32 bits. | The external key plaintext length must be 32 bits. | Enter valid parameters. |
400 | KMS.2605 | Token verification failed. | Failed to verify token. | Obtain a new token. |
400 | KMS.2606 | You are importing a deleted key again. The imported plaintext must be the same as the deleted key plaintext. | You are importing a deleted key again. The imported plaintext must be the same as the deleted key plaintext. | Ensure the plaintext of the imported key is the same as that of the deleted key. |
400 | KMS.2607 | The import sm4 plain key length must 16. | The length of the imported SM4 pure key must be 16. | Enter valid parameters. |
400 | KMS.2608 | The imported asymmetric private key can not be null. | The imported asymmetric private key cannot be empty. | Enter valid parameters. |
400 | KMS.2609 | The imported asymmetric private is invalid. | The imported asymmetric private key is invalid. | Enter valid parameters. |
400 | KMS.2610 | The temporary key length must be 16 or 32. | The length of the temporary key must be 16 or 32. | Enter valid parameters. |
400 | KMS.2701 | Key material is not in Enabled or Disabled state and cannot be deleted. | Key material is not in Enabled or Disabled state and cannot be deleted. | Ensure that the key is in Enabled or Disabled state. |
400 | KMS.2702 | The imported private key material can not be deleted. | The imported private key material cannot be deleted. | The imported private key material cannot be deleted. |
400 | KMS.2801 | End_time must bigger than start_time. | End time must be later than start time. | Enter valid parameters. |
400 | KMS.2901 | Key rotation is not disabled. | Key rotation is not disabled. | Disable key rotation. |
400 | KMS.3001 | Invalid rotation_interval. | Invalid rotation interval. | Enter valid parameters. |
400 | KMS.3103 | Invalid id of tenant. | Invalid tenant ID. | Enter a valid tenant ID. |
400 | KMS.3201 | Generate order id failed. | Failed to generate the order. | Try again or contact technical support. |
400 | KMS.3202 | KMS error. | Incorrect order resources. | Try again or contact technical support. |
400 | KMS.3702 | Invalid kms status parameter. | Invalid KMS status parameter. | Enter valid parameters. |
400 | KMS.3801 | KMS key sync enable and configuration failed. | Failed to synchronize and configure KMS keys. | Try again or contact technical support. |
400 | KMS.3802 | Failed to sync operation convert to born region. | Currently, the keystore is not supported. | Contact technical support. |
400 | KMS.3803 | The key of born region is turned off sync, so no operation can be performed. | Keystore is not supported. | Contact technical support. |
400 | KMS.3804 | AttestationDocument parsing failed. | Failed to parse the document. | Try again or contact technical support. |
400 | KMS.3902 | Invalid Service-Transaction-Id in request header. | Invalid value of Service-Transaction-Id in the request header. | Contact customer support. |
400 | KMS.3903 | Service-Transaction-Id is missing in request header. | The request header does not contain the Service-Transaction-Id parameter. | Contact customer support. |
400 | KMS.4001 | Service name to notify is illegal. | The service name used for notification is invalid. | Contact customer support. |
400 | KMS.4002 | Service url to notify is illegal. | The service URL used for notification is invalid. | Contact customer support. |
400 | KMS.5022 | Tags are not compliant. | The tags are not compliant. | Try again or contact technical support. |
400 | KMS.5023 | Pdp5 Header is invalid. | Invalid value of Header. | Try again or contact technical support. |
403 | KMS.0301 | Invalid or null X-Auth-Token. | Invalid or null X-Auth-Token. | Obtain the token again and ensure the token string is complete. |
403 | KMS.0302 | Invalid X-Auth-Token. | Invalid X-Auth-Token. | Obtain the token again and ensure the token string is complete. |
403 | KMS.0303 | X-Auth-Token expired. | X-Auth-Token expired. | Obtain the token again and ensure the token string is complete. |
403 | KMS.0304 | X-Auth-Token contains the OBT tag and cannot be used to access services. | X-Auth-Token contains the OBT tag and cannot be used to access services. | Obtain the token again and ensure the token string is complete. |
403 | KMS.0305 | Invalid X-Auth-Token project name. | Invalid X-Auth-Token project name. | Obtain the token again and ensure the token string is complete. |
403 | KMS.0306 | No access permissions. | The user has no permission to access the key. | Contact the administrator to grant the KMS CMKFullaccess permission to the account. |
403 | KMS.0307 | No access permissions. | No access permissions. | Contact the administrator to grant the KMS CMKFullaccess permission to the account. |
403 | KMS.0314 | Real-name authentication is required to access the API. | Real-name authentication is required to access the API. | Complete real-name authentication and try again. |
403 | KMS.0321 | URIs in URL and X-Auth-Token do not match. | URIs in URL and X-Auth-Token do not match. | Ensure the URI in the URL matches that in X-Auth-Token. |
403 | KMS.0322 | The user has no permission to access the partition. | The user does not have the permission on the partition type. | Configure the permission and try again. |
403 | KMS.0326 | No access permissions. | No access permissions. | Contact the administrator to grant the KMS CMKFullaccess permission to the account. |
403 | KMS.0328 | KMS has been frozen. Renew it and try again. | KMS has been frozen. Renew it and try again. | Renew the service and try again. |
403 | KMS.0330 | User has no permission. | The user does not have related permissions. | Configure the KMS CMKFullaccess permission and try again. |
404 | KMS.0207 | The key does not exist. | The key does not exist. | Choose a valid key or create a key. |
404 | KMS.0316 | No exist partition_id. | The partition type does not exist. | Enter the partition type. |
404 | KMS.0416 | Invalid tag ID. | Invalid tag ID. | Enter a valid key tag. |
404 | KMS.3901 | The requested jobId cannot be found. | Task ID not found. | Contact technical support. |
405 | KMS.0215 | Request method not supported. | Invalid request method. | Use a supported request method. |
500 | KMS.0100 | Get-status error. | Failed to obtain the service status. | Contact technical support. |
500 | KMS.0101 | KMS error. | KMS service error. | Try again later or contact customer support. |
500 | KMS.0102 | Abnormal KMS I/O. | Abnormal KMS I/O. | Try again later or contact customer support. |
500 | KMS.0103 | A system exception occurred. Contact technical support. | A system exception occurs. Contact technical support. | Contact technical support. |
500 | KMS.3805 | Failed to build digital envelope. | Failed to create a digital envelope. | Try again or contact technical support. |
500 | KMS.3806 | Unable to obtain enclave root certificate, please contact technical support. | Failed to obtain the root certificate. Contact technical support. | Contact technical support. |
500 | KMS.5012 | Request PDP service failed. | Failed to access the PDP service. | Try again or contact technical support. |
500 | KMS.5021 | Check pdp5 auth failed. | PDP5 authentication fails. | Try again or contact technical support. |
503 | KMS.0104 | A system exception occurred. Contact technical support. | A system exception occurs. Contact technical support. | Contact technical support. |
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.

