| Error Code |
Error Description |
Possible Root Cause |
|
winhttp code: 12044
|
The server requires SSL client Authentication.
Sample LogsSample Logs
01/27/2026 20:25:18.0343 [CCC]"1zk": Error: Core: Error while fetching credentials.: (winhttp code: 12044), "The server requires SSL client Authentication"
01/27/2026 20:25:18.0371 [CCC]"fxh": Error: Core: Error occurred during credentials access from the vault for the database instance - SQL3.AOAGDC.COM\MSSQLSERVER: (winhttp code: 12044), "The server requires SSL client Authentication"
01/27/2026 20:25:18.0506 [CCC]"gqn": Error: Core: Failed to get credential for 'SQL3.AOAGDC.COM\MSSQLSERVER' using vault info: (winhttp code: 12044), "The server requires SSL client Authentication"
01/27/2026 20:25:18.0533 [CCC]"fy4": Warning: Core: Failed to retrieve instance - "SQL3.AOAGDC.COM\MSSQLSERVER" credentials from the vault: (winhttp code: 12044), "The server requires SSL client Authentication"
Sample Communication LogsSample Communication Logs
01/27/2026 20:25:18.0181 [CCC]"f6u": Error: CommLib: WinHttpReceiveResponse() failed to receive response from server. URL: https://ccp.pamlab.com/AIMWebService/api/Accounts?AppID=WindowsAgent&Safe=WinAgentSafe&Folder=ROOT&Object=DB Agent: (winhttp code: 12044), "The server requires SSL client Authentication"
01/27/2026 20:25:18.0208 [CCC]"f74": Error: CommLib: Failed to retrieve server response for web request: (winhttp code: 12044), "The server requires SSL client Authentication"
01/27/2026 20:25:18.0235 [CCC]"k0v": Warning: CommLib: Non-failover WinHTTP error: 12044
01/27/2026 20:25:18.0262 [CCC]"ii6": Error: CommLib: Failure while attempting to retrieve server response for a web request. Error: 12044. URL("https://ccp.pamlab.com/AIMWebService/api/Accounts?AppID=WindowsAgent&Safe=WinAgentSafe&Folder=ROOT&Object=DB Agent"), Port(443), Secure(1)
|
Certificate was not provided for database review, therefore was unable to get it.
Solution: Provide the SSL server client authentication certificate.
|
|
win32 code: 4317
|
Operation Identifier is not valid.
Sample LogsSample Logs
01/28/2026 11:28:55.0294 [1034]"1tu": Error: Core: Failed to get client certificate. http status '404'.
01/28/2026 11:28:55.0322 [1034]"1t6": Error: Core: Failed to get certificate from server.: (win32 code: 4317), "The operation identifier is not valid."
01/28/2026 11:28:55.0349 [1034]"jn9": Error: Core: Failed to download client certificate, proceed request without client authentication.: (win32 code: 4317), "The operation identifier is not valid."
Sample Communication LogsSample Communication Logs
01/28/2026 11:28:55.0200 [1034]"ii7": Information: CommLib: HTTP Response Status: 404 : Verb: [GET] Scheme: [Secure] Port: [443] - URI: https://qagpublic.p01.eng.sjc01.qualys.com/CloudAgent/avc/customer/<customer-id>/<activation_key>
01/28/2026 11:28:55.0216 [1034]"1s4": Warning: CommLib: Web service call returned: 404
|
Client certificate download request failed, so the certificate could not be retrieved from the backend.
Solution:
|
|
Operation Identifier is not valid.
Sample LogsSample Logs
02/09/2026 18:18:01.0192 [2878]"1ys": Error: Core: Failed to get credentials from vault. HTTP status '403', HTTP response ''
02/09/2026 18:18:01.0221 [2878]"fxh": Error: Core: Error occurred during credentials access from the vault for the database instance - SQL3.AOAGQS.COM\MSSQLSERVER: (win32 code: 4317), "The operation identifier is not valid."
02/09/2026 18:18:01.0495 [2878]"gqn": Error: Core: Failed to get credential for 'SQL3.AOAGQS.COM\MSSQLSERVER' using vault info: (win32 code: 4317), "The operation identifier is not valid."
02/09/2026 18:18:01.0516 [2878]"fy4": Warning: Core: Failed to retrieve instance - "SQL3.AOAGQS.COM\MSSQLSERVER" credentials from the vault: (win32 code: 4317), "The operation identifier is not valid."
02/09/2026 18:18:01.0543 [2878]"c2i": Warning: Core: No specific/generic credentials found for instance
02/09/2026 18:18:01.0569 [2878]"bzm": Warning: Core: Failed db assessment on instance
|
The failure was caused by authorization restrictions in CyberArk PAM CCP due to following reasons:
- Qualys AppID is Restricted.
- Safe does not grant AppID.
- Object or account name does not match.
- CyberARK PAM configuration is changed.
- AppID-Safe Account mapping is incorrect.
Solution:
|
|
Operation Identifier is not valid.
Sample LogsSample Logs
02/09/2026 20:47:50.0753 [2464]"1ys": Error: Core: Failed to get credentials from vault. HTTP status '404', HTTP response '{"ErrorCode":"APPAP004E","ErrorMsg":"Password object matching query [Folder=ROOT;Object=DBAuthTest2;Safe=WinAgentSafe] was not found (Diagnostic Info: 1). Please check that there is a password object that answers your query in the Vault and that both the Provider and the application user have the appropriate permissions needed in order to use the password."}'
02/09/2026 20:47:50.0780 [2464]"fxh": Error: Core: Error occurred during credentials access from the vault for the database instance - SQL3.AOAGQS.COM\MSSQLSERVER: (win32 code: 4317), "The operation identifier is not valid."
02/09/2026 20:47:50.0941 [2464]"gqn": Error: Core: Failed to get credential for 'SQL3.AOAGQS.COM\MSSQLSERVER' using vault info: (win32 code: 4317), "The operation identifier is not valid."
02/09/2026 20:47:51.0204 [2464]"fy4": Warning: Core: Failed to retrieve instance - "SQL3.AOAGQS.COM\MSSQLSERVER" credentials from the vault: (win32 code: 4317), "The operation identifier is not valid."
|
Password parameter is not configured in CyberArk vault.
Solution:
|
|
Operation Identifier is not valid.
Sample LogsSample Logs
02/11/2026 12:53:17.0858 [2BE0]"1tu": Error: Core: Failed to get client certificate. http status '503'.
02/11/2026 12:53:18.0073 [2BE0]"1t6": Error: Core: Failed to get certificate from server.: (win32 code: 4317), "The operation identifier is not valid."
02/11/2026 12:53:18.0248 [2BE0]"jn9": Error: Core: Failed to download client certificate, proceed request without client authentication.: (win32 code: 4317), "The operation identifier is not valid."
02/11/2026 12:53:18.0265 [2BE0]"1sp": Information: Core: Fetching credentials using CCP client-auth:disable server-auth:enable.
02/11/2026 12:53:18.0551 [2BE0]"29r": Information: Core: Setting the current thread's priority class to Background
02/11/2026 12:53:49.0744 [2BE0]"29r": Information: Core: Setting the current thread's priority class to Background
02/11/2026 12:53:50.0307 [2BE0]"1ys": Error: Core: Failed to get credentials from vault. HTTP status '403', HTTP response '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
02/11/2026 12:53:50.0386 [2BE0]"fxh": Error: Core: Error occurred during credentials access from the vault for the database instance - SQL3.AOAGQS.COM\MSSQLSERVER: (win32 code: 4317), "The operation identifier is not valid."
02/11/2026 12:53:50.0756 [2BE0]"gqn": Error: Core: Failed to get credential for 'SQL3.AOAGQS.COM\MSSQLSERVER' using vault info: (win32 code: 4317), "The operation identifier is not valid."
02/11/2026 12:53:50.0782 [2BE0]"fy4": Warning: Core: Failed to retrieve instance - "SQL3.AOAGQS.COM\MSSQLSERVER" credentials from the vault: (win32 code: 4317), "The operation identifier is not valid."
02/11/2026 12:53:50.0808 [2BE0]"c2i": Warning: Core: No specific/generic credentials found for instance
02/11/2026 12:53:50.0823 [2BE0]"bzm": Warning: Core: Failed db assessment on instance
|
HTTP (port 80) not configured or disabled in IIS.
Solution:
|
|
Operation Identifier is not valid.
Sample LogsSample Logs
02/11/2026 16:29:28.0137 [142C]"1ys": Error: Core: Failed to get credentials from vault. HTTP status '403', HTTP response '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
...
<title>403 - Forbidden: Access is denied.</title>
...
02/11/2026 16:29:29.0380 [142C]"fxh": Error: Core: Error occurred during credentials access from the vault for the database instance - SQL3.AOAGQS.COM\MSSQLSERVER: (win32 code: 4317), "The operation identifier is not valid."
02/11/2026 16:29:30.0500 [142C]"gqn": Error: Core: Failed to get credential for 'SQL3.AOAGQS.COM\MSSQLSERVER' using vault info: (win32 code: 4317), "The operation identifier is not valid."
02/11/2026 16:29:30.0528 [142C]"fy4": Warning: Core: Failed to retrieve instance - "SQL3.AOAGQS.COM\MSSQLSERVER" credentials from the vault: (win32 code: 4317), "The operation identifier is not valid."
02/11/2026 16:29:30.0585 [142C]"c2i": Warning: Core: No specific/generic credentials found for instance
02/11/2026 16:29:30.0613 [142C]"bzm": Warning: Core: Failed db assessment on instance
|
Using incorrect IP to connect with CyberArk Vault.
Solution:
|
|
win32 code: -2146885630
|
An error occurred during encode or decode operation (Hex value→0x80092002).
Sample LogsSample Logs
01/27/2026 20:47:35.0888 [EB8]"1tb": Debug: Core: Write certificate content to file C:\ProgramData\Qualys\QualysAgent\Certificate\DBAuth\4523d306e9186
33e3c86e6fdb71a6f82177a2d99b0df6ab0d4fae18cb9432a3e.pfx.
01/27/2026 20:47:35.0973 [EB8]"jna": Debug: Core: Read client certificate from file(C:\ProgramData\Qualys\QualysAgent\Certificate\DBAuth\4523d306e918633
e3c86e6fdb71
a6f82177a2d99b0df6ab0d4fae18cb9432a3e.pfx)
01/27/2026 20:47:36.0067 [EB8]"1t2": Error: Core: Import of pfx block into temporary store is failed.: (win32 code: -2146885630), "An error occurred during encode or decode operation."
01/27/2026 20:47:36.0438 [EB8]"1sn": Error: Core: Failed to get client certificate context, proceed request without client authentication.: (win32 code: -2146885630), "An error occurred during encode or decode operation."
|
User certificate does not match the configured certificate.
Solution:
|
|
An error occurred during encode or decode operation (Hex value→0x80092002).
Sample LogsSample Logs
01/28/2026 12:39:51.0625 [1508]"1tb": Debug: Core: Write certificate content to file C:\ProgramData\Qualys\QualysAgent\Certificate\DBAuth\2d39e22caa9f8379ed0660d4adf0bdf25970e97c915bdce04e0e44c489b06e2c.pfx.
01/28/2026 12:39:51.0833 [1508]"jna": Debug: Core: Read client certificate from file(C:\ProgramData\Qualys\QualysAgent\Certificate\DBAuth\2d39e22caa9f8379ed0660d4adf0bdf25970e97c915bdce04e0e44c489b06e2c.pfx)
01/28/2026 12:39:51.0869 [1508]"1t2": Error: Core: Import of pfx block into temporary store is failed.: (win32 code: -2146885630), "An error occurred during encode or decode operation."
01/28/2026 12:39:51.0898 [1508]"1sn": Error: Core: Failed to get client certificate context, proceed request without client authentication.: (win32 code: -2146885630), "An error occurred during encode or decode operation."
|
Submitted corrupted client certificate.
Solution:
|
|
win32 code: 86
|
The specified network password is not correct.
Sample LogsSample Logs
01/05/2026 20:47:21.0186 [2DB8]"000": Debug: Core: Read client certificate from file(C:\ProgramData\Qualys\QualysAgent\Certificate\DBAuth\567a5c36e2df1f12be0f214649e2a91c191b57c92af1aa94df4e8c38a21c742f.pfx)
01/05/2026 20:47:21.0218 [2DB8]"000": Error: Core: Import of pfx block into temporary store is failed.: (win32 code: 86), "The specified network password is not correct."
|
Incorrect passphrase for client certificate.
Solution:
|
|
win32 code: 87
|
The parameter is incorrect.
Sample LogsSample Logs
02/10/2026 15:04:25.0623 [1264]"1sq": Information: Core: For DB Instance(SQL3.AOAGQS.COM\MSSQLSERVER), Username in Assessment config (dbauth), Username in the vault([email protected]), Address in vault (aoagqs.com).
02/10/2026 15:04:25.0656 [1264]"fxi": Error: Core: The username in the vault does not match the DB instance username(dbauth) from the configuration. Assessment will be stopped for the instance - SQL3.AOAGQS.COM\MSSQLSERVER
02/10/2026 15:04:25.0858 [1264]"gqn": Error: Core: Failed to get credential for 'SQL3.AOAGQS.COM\MSSQLSERVER' using vault info: (win32 code: 87), "The parameter is incorrect."
02/10/2026 15:04:25.0885 [1264]"fy4": Warning: Core: Failed to retrieve instance - "SQL3.AOAGQS.COM\MSSQLSERVER" credentials from the vault: (win32 code: 87), "The parameter is incorrect."
|
Username in CAUI and vault does not match.
Solution:
|
|
sqlcmd error
|
User does not have login access for DB Assessment.
Sample LogsSample Logs
02/01/2026 23:46:25.0908 [6F8]"c32": Error: Core: Process returned exit code: 1, Output:
Sqlcmd: Error: Microsoft ODBC Driver 17 for SQL Server : Login failed for user 'AOAGQS\dbauth'.
|
Insufficient DB Assessment permissions.
Solution:
|
|
win32 code: 1385
|
User do not have requested login permission at this system.
Sample LogsSample Logs
02/02/2026 18:04:12.0735 [2E10]"1sq": Information: Core: For DB Instance(SQL3.AOAGQS.COM\MSSQLSERVER), Username in Assessment config (), Username in the vault(dbauth), Address in vault (aoagqs.com).
02/02/2026 18:04:12.0765 [2E10]"1ss": Debug: Core: Converted Username in UPN format: [email protected]
02/02/2026 18:04:12.0846 [2E10]"1st": Information: Core: Instance's credential username for database Assessment is "[email protected]"
02/02/2026 18:04:12.0937 [2E10]"c2k": Warning: Core: Failed to logon as user for instance [[email protected]]: (win32 code: 1385), "Logon failure: the user has not been granted the requested logon type at this computer."
|
Login on local system failed.
Solution:
|
|
win32 code: 1326
|
The user name or password is incorrect.
Sample LogsSample Logs
05/15/2025 13:20:40.0543 [2D50]"c2g": Warning: Core: Specific user credentials not found for instance. Trying to find generic credentials...
05/15/2025 13:20:40.0746 [2D50]"c2k": Warning: Core: Failed to logon as user for instance [[email protected]]: (win32 code: 1326), "The user name or password is incorrect."
05/15/2025 13:20:40.0746 [2D50]"bzm": Warning: Core: Failed db assessment on instance
|
Incorrect username or password for DB login.
Solution:
|
|
sqlcmd error
|
TA network-related or instance-specific error has occurred while establishing a connection to SQL Server. Server is not found or not accessible.
Sample LogsSample Logs
02/03/2026 18:16:50.0226 [3228]"c32": Error: Core: Process returned exit code: 1, Output:
Sqlcmd: Error: Microsoft ODBC Driver 17 for SQL Server : TCP Provider: No connection could be made because the target machine actively refused it.
.
Sqlcmd: Error: Microsoft ODBC Driver 17 for SQL Server : Login timeout expired.
Sqlcmd: Error: Microsoft ODBC Driver 17 for SQL Server : A network-related or instance-specific error has occurred while establishing a connection to SQL Server. Server is not found or not accessible. Check if instance name is correct and if SQL Server is configured to allow remote connections. For more information see SQL Server Books Online..
02/03/2026 18:16:50.0398 [3228]"c2p": Information: Core: No databases identified on instance
|
SQL is not configured to use TCP Connection.
Solution:
|
|
sqlcmd error - exit code 14
|
DB Authentication is successful but query execution failed.
Sample LogsSample Logs
02/09/2026 12:54:27.0241 [1968]"c2t": Debug: Core: Processing db assessment on database [master], instance [SQL3.AOAGQS.COM\MSSQLSERVER]
02/09/2026 12:54:27.0272 [1968]"bqu": Debug: Core: Process execution in progress [PID: 8700]
02/09/2026 12:54:27.0325 [1968]"bth": Debug: Core: Asynchronous bytes read: 227
02/09/2026 12:54:27.0510 [1968]"c2w": Information: Core: Authentication successful to assess database [master], instance [SQL3.AOAGQS.COM\MSSQLSERVER]
02/09/2026 12:54:27.0679 [1968]"bqu": Debug: Core: Process execution in progress [PID: 12168]
02/09/2026 12:54:28.0558 [1968]"bth": Debug: Core: Asynchronous bytes read: 99
02/09/2026 12:54:28.0579 [1968]"c3m": Error: Core: Process returned exit code 14 on assessing query
02/09/2026 12:54:28.0594 [1968]"c3d": Warning: Core: Failed to assess query SELECT cast(id as varchar(4)) as id, path FROM sys.traces WHERE status = 1
|
Insufficient permissions for SQL Database.
Solution:
|