Six-digit number | Cause and solution |
310001 | Failed to communicate with the authentication server. Check the network cable connected to the machine and domain controller (Active Directory). Check whether the domain controller is stopped. Check that name resolution is working correctly with the DNS server set for the machine by the domain controller. In the authentication server setting, increase the timeout time in [Authentication Timeout] to a value greater than the current setting. Registering Authentication Server Information |
310002 | The Active Directory site information is not set correctly when [Use access mode within sites] is enabled on the machine. Check that the site setting on Active Directory is set correctly. |
310003 | The network environment is not ready. Wait a moment, and try checking again. Check that name resolution to the specified domain name is working correctly (can be converted to an IP address) with the DNS server set for the machine, and make adjustments, as needed. The DNS server set for the machine cannot be found, or it is unable to communicate. Check the settings and communication environment. |
Six-digit number | Cause and solution |
322000 | A server error occurred at Kerberos authentication. In Active Directory, clear the [Do not require Kerberos preauthentication] checkbox, which is an account option for the login user account. Alternatively, check that Active Directory is operating properly. |
322006 | The target user does not exist on the authentication server. Check that the authentication user or search user exists on the domain controller to be authenticated. |
322012 | In Active Directory, the [Smart card is required for interactive logon] checkbox, which is an account option for the login user account, is selected. In Active Directory, clear the [Smart card is required for interactive logon] checkbox, which is an account option for the login user account, and reset the password. * You can specify the same password when resetting the password. |
322014 | The password or encryption method for Kerberos authentication is not set correctly. In the Active Directory management tool, reset the password for the authentication user or search user. Check that the encryption method for Kerberos authentication is set to a method (AES128-bit encryption and DES) supported by User Authentication. |
322018 | The account has expired. Check the period of validity of the account. [Add User] and [Edit User Information] Screen |
322023 | The password has expired. Change the password. In Active Directory, check the settings of the account options for the login user account. |
322024 | An incorrect user name or password was used at keyboard authentication. Check the user name and password of the authentication user or search user. |
322029 | Failed to communicate with the writable domain controller. Check the network cable of the writable domain controller. Check whether the writable domain controller is stopped. Check that name resolution is working correctly with the DNS server on the writable domain controller. In the authentication server setting, increase the timeout time in [Period Until Timeout] to a value greater than the current setting. Registering Authentication Server Information |
322037 | The date and time settings of the machine and authentication server are different. Synchronize the date and time settings of the machine and authentication server. |
Six-digit number | Cause and solution |
323000 | An error occurred at LDAP server authentication. Check that Active Directory or the LDAP service is operating properly. |
323008 | An error related to TLS-encrypted communication occurred at LDAP server authentication. Check the communication settings of the LDAP server to see if TLS encrypted communication is set. Check that the communication settings on the machine match those on the LDAP server. Registering LDAP Servers |
323048 | An anonymous user is being used for LDAP server authentication. Check whether anonymous access is allowed on the LDAP server. |
323049 323053 | The user information for LDAP server authentication is not set correctly. Check the user name and password of the authentication user or search user. Check whether the authentication user or search user is invalid or expired, or whether the account is locked. |
Six-digit number | Cause and solution |
324000 | An error occurred at LDAP server search. Check that Active Directory or the LDAP service is operating properly. |
Six-digit number | Cause and solution |
325000 | An error occurred at LDAP server authentication. Check that Active Directory or the LDAP service is operating properly. |
325010 | Registration to a read-only domain controller was performed. If the domain controller configured in the Active Directory settings is read-only, you cannot use functions for editing the user information (to register and delete cards, and to change the PIN). To use the function for registering user information, configure a writable domain controller. |
325050 | The search user set in the administrator settings page does not have update (write) permissions. Check whether the search user has been granted write permissions for the user attribute to be changed. |
325067 | You tried to change a relative distinguished name (RDN) attribute, such as the common name (cn) attribute. You cannot change a relative distinguished name (RDN) attribute, such as the common name (cn) attribute. Specify another attribute to be changed. |
Six-digit number | Cause and solution |
331000 | User authentication failed. Check the user name and password. If you still cannot resolve the problem, contact your system manager. |
331001 | The user name has not been entered. Enter a user name. |
331002 | The user cannot be found. Check the user name and password. If you still cannot resolve the problem, contact your system manager. The user may not exist on the LDAP server, or the search user may not have permission to read the attribute information of the account. |
331003 | You are using a card that has not been registered to the authentication server. Check that you are using the correct card. |
331004 | Multiple instances of the same card information have been registered to the authentication server. Contact your system manager. |
331005 | The account of the login user has expired. Contact your system manager. |
331006 | The validity value on the card does not match that on the server. Check that you are using the correct card. If you still cannot resolve the problem, contact your system manager. |
331007 | A validity value outside the range is set on the server. Check that the server is operating with the correct attribute of the validity value. Registering Authentication Server Information |
331008 | The account of the login user is locked out. Contact your system manager. |
331009 | The user ID of the account you are using to log in to the machine is invalid, or the server settings may be incorrect. Check that the required attributes are set correctly. Registering Authentication Server Information In Active Directory, clear the [Do not require Kerberos preauthentication] checkbox, which is an account option for the login user account. |
331010 | A user without permission to use a function tried to log in to use a function that requires authentication. Contact your system manager. |
331011 | Failed to log in to use a function that requires authentication. Check which functions the login user is able to use. |
331012 | The PIN of the login user is incorrect. Enter the PIN again. |
331013 | The account of the login user is invalid. Contact your system manager. |
332000 | Failed to update the user information. Failed to update the user information. Check that the user is confirmed as the correct user and that the updates are set correctly. |
332001 | The card information is already registered. The card of the login user is already registered. Check that you are using the correct card, or contact your system manager. |
332002 | An invalid attribute was specified when updating the user information. When using a function to edit card information, you are not allowed to register information to the sAMAccountName or userPrincipalName attribute in Active Directory. Try using another attribute. |
332003 | An invalid login name was specified when updating the user information. You are not allowed to register a user name (login name) of the login user. Check the user name, and contact your system manager. |
332004 | An invalid display name was specified when updating the user information. You are not allowed to register a display name of the login user. Check the display name attribute value on the server being referred to, and contact your system manager. |
332005 | An invalid domain name was specified when updating the user information. You are not allowed to register the domain name. Check the selected domain name, and contact your system manager. |
332006 | An invalid e-mail address was specified when updating the user information. You are not allowed to register an e-mail address of the login user. Check the attribute value of the e-mail address on the server being referred to, and contact your system manager. |
332007 | An invalid role was specified when updating the user information. Check the attribute value for determining permissions on the server being referred to, and contact your system manager. |
332008 | The maximum number of users that can be registered has been reached when updating the user information. Contact your system manager. |