Hi, The PKIFailureInfo that is present is several pkix standards, rfc2510, time-stamp, etc ... does not provide a way for the entity that sends the response to signal that it has encountered an internal error that prevents its from being able to answer succesfully to the request, despite the fact there is nothing invalid in the request. In case none of the suggested errors applies, there's no generic error to send back. If you are wondering, I was looking for the adequate error code that should be returned if the entity detects a failure of the hardware token it uses to sign data, but many other internal errors can be encountered ...