Error messages

Are you sure you want to change the settings? To change the setting, enter y. To cancel, enter n.

Verify the argument specified for the -option command parameter, and then retry the operation.

Verify the argument specified for exportdata.isCsvHeader in the exportTool.properties file and the argument specified for the -option command parameter, and then retry the operation.

Verify the argument specified for the -cu command parameter, and then retry the operation.

Verify the argument specified for the -cu command parameter, and then retry the operation.

Verify the parameters specified for Export Tool 2, and then retry the operation.

To specify a range as a parameter, verify the data retention period displayed by using the show range command and specify a date and time within the range.

To specify a range by using the export data command, specify the start date and time and the end date and time so that the range includes two or more periods in which data has been accumulated.

The storage system specified with the -ip command parameter might not support this command. Verify the argument specified

Verify the information output after the <xxx> section and take appropriate action. If the issue is not resolved, perform the following actions:

1. The microcode version of the destination storage system might be outdated or might not match the ESM microcode version.

   Check the microcode versions of both the storage system and ESM, update them to the appropriate versions, and then retry the command.

2. Verify the communication environment between the computer on which the command is run and the storage system, and then retry the command.
3. If HTTP status code 503 is output, the ESM might be starting up or in a busy state. If message ID 7006 is output afterward, it indicates that Export Tool 2 has retried the process. Wait until Export Tool 2 completes processing because processing is ongoing.

If Execution stops. is output, it indicates that Export Tool 2 ended abnormally. Verify whether any of the operations described in General troubleshooting for Export Tool 2 are performed.

After resolving the issue, retry the command.

If the error still occurs, restart the target ESM, and then retry the command.

If the error persists even after restarting the ESM, contact customer support as described in the manual.

Verify the details provided in the message, take any necessary actions, and then retry the command.

TLS communication with the server could not be established.

(protocol = <xxx>, storage system host = <xxx>, port = <xxx>, proxy host = <xxx>, proxy port = <xxx>, details = <xxx>)

Check the output after <xxx> and take appropriate action. If recovery is not possible, review the following items:

• The correct host name or IP address is specified.
• The root certificate, intermediate CA, or server certificate is valid.
• The server’s host name or IP address matches the SAN (Subject Alternative Name) entry in the server certificate.
• The number of hierarchy levels in the certificate chain does not exceed 20.
• The certificates are within their validity period.
• When Export Tool 2 with a version earlier than A0-05-42/XX is used, for the CRL distribution point settings of intermediate CA certificates or server certificates, only one CRL distribution point URL must be specified for each certificate. If multiple CRL distribution point URLs are set for a single certificate, Export Tool 2 cannot be used.
• The protocol, cipher suite, or minimum key length for key exchange selected in the TLS security settings is supported by your JRE. If they are not supported, install a supported JRE and run Export Tool 2.
• The JRE version supports the protocol, cipher suite, or minimum key length for key exchange.
• All certificates comply with the X.509v3 standard.

If errors occur even after retrying, contact the support information listed in the manual.

The server certificate is missing the Server Authentication purpose (OID: 1.3.6.1.5.5.7.3.1) in the extendedKeyUsage extension.

Verify that the extendedKeyUsage extension includes the Server Authentication purpose (OID: 1.3.6.1.5.5.7.3.1).

(protocol = <xxx>, storage system host = <xxx>, port number = <xxx>, proxy host = <xxx>, proxy port number = <xxx>)

The intermediate CA certificate is missing the basicConstraints extension with the CA flag set to TRUE.

Verify that the intermediate CA certificate contains the basicConstraints extension with the CA flag set to TRUE, indicating that the intermediate CA certificate is a CA certificate.

(protocol = <xxx>, storage system host = <xxx>, port number = <xxx>, proxy host = <xxx>, proxy port number = <xxx>)

The server certificate is missing the basicConstraints extension with the CA flag set to FALSE.

Verify that the server certificate contains the basicConstraints extension with the CA flag set to FALSE, indicating that the server certificate is not a CA certificate.

(protocol = <xxx>, storage system host = <xxx>, port number = <xxx>, proxy host = <xxx>, proxy port number = <xxx>)

One or more server certificates or intermediate CA certificates are not in the X.509 version 3 (X.509v3) format.

Verify that all server certificates and intermediate CA certificates comply with the X.509 version 3 (X.509v3) standard. Replace non-compliant certificates with X.509v3-compliant certificates.

One or more server certificates in the chain are signed with an unsupported signature algorithm.

Verify that all server certificates are signed using a signature algorithm supported by the server.

One or more server certificates use unsupported key configurations.

Verify that all server certificates use key configurations supported by the server.

One or more server certificates use an unsupported hash algorithm.

Verify that all server certificates use a hash algorithm supported by the server.

(protocol = <xxx>, storage system host = <xxx>, port number = <xxx>, proxy host = <xxx>, proxy port number = <xxx>, details = <xxx>)

One or more server certificates or intermediate CA certificates have been revoked according to CRL or OCSP validation.

Verify that all server certificates and intermediate CA certificates are valid and not revoked. If any certificates are revoked, obtain new and valid certificates from the issuing authority.

The keyCertSign bit is not set in the keyUsage extension of the intermediate CA certificate. This bit is required for signing other certificates.

Verify that the keyCertSign bit is set in the keyUsage extension of the intermediate CA certificate so that it can properly issue and sign certificates.

(protocol = <xxx>, storage system host = <xxx>, port number = <xxx>, proxy host = <xxx>, proxy port number = <xxx>)

The certificate cannot be validated. Verify that the root certificate is imported.