Troubleshooting
Common issues and solutions when working with Tenuo Cloud.
Authentication Issues
"Invalid API Key" Error
Symptoms: API requests return 401 Unauthorized with "invalid_api_key" error code.
Possible Causes:
- API key is incorrect or has typos
- API key has been revoked
- API key has expired
Solutions:
- Double-check the API key value (starts with
tc_) - Check the API Keys page to verify the key exists and is active
- Create a new API key if needed
"Insufficient Scope" Error
Symptoms: API requests return 403 Forbidden with "insufficient_scope" error.
Possible Causes:
- API key doesn't have the required scope for the endpoint
- Using an
authorizerscoped key for admin operations
Solutions:
- Check the API Reference for required scopes
- Create a new API key with appropriate scopes
Key Management Issues
Cannot Create Issuer Key
Symptoms: Error when creating an issuer key: "parent key required"
Solution: Issuer keys must have a root key as parent. Create a root key first, then create the issuer key with that root as parent.
Key Rotation Failed
Symptoms: Key rotation returns an error
Possible Causes:
- Key is already revoked or suspended
- Concurrent rotation in progress
Solutions:
- Check key status in the dashboard
- Wait a moment and retry if concurrent operation
Revocation Issues
SRL Not Updating
Symptoms: Created a revocation but authorizers still accept the warrant
Solutions:
- Make sure you clicked Regenerate SRL after creating the revocation
- Wait for authorizers to refresh their cached SRL (typically 30-60 seconds)
- Check that authorizers can reach the SRL endpoint
"SRL Expired" Error
Symptoms: Dashboard shows "SRL version X expired"
Solution: Regenerate the SRL. The SRL has a limited validity period and must be regenerated periodically.
Revocation Not Taking Effect
Symptoms: Warrant still works after revocation and SRL regeneration
Possible Causes:
- Authorizers haven't fetched the new SRL yet
- Authorizers are offline or can't reach Tenuo Cloud
- Wrong warrant ID was revoked
Solutions:
- Wait for cache expiration (check your authorizer's SRL cache TTL)
- Verify authorizers are healthy and can reach the API
- Double-check the warrant ID in the revocation
Dashboard Issues
"Failed to Load Data" Error
Symptoms: Dashboard pages show loading errors
Possible Causes:
- Network connectivity issues
- API key session expired
- Backend service issues
Solutions:
- Refresh the page
- Log out and log back in
- Check status.tenuo.cloud (opens in a new tab) for service issues
Dashboard Shows Stale Data
Symptoms: Data in dashboard doesn't match recent changes
Solution: Hard refresh the browser (Ctrl+Shift+R or Cmd+Shift+R).
API Issues
Rate Limiting
Symptoms: API returns 429 Too Many Requests
Solutions:
- Reduce request frequency
- Check rate limit headers for reset time
- Contact support if you need higher limits
Request Timeout
Symptoms: API requests timeout after 30 seconds
Possible Causes:
- Large request payload
- Network issues
- Backend processing delay
Solutions:
- For large exports, use pagination
- Check your network connectivity
- Retry with exponential backoff
Webhook Issues
Webhooks Not Firing
Symptoms: No webhook requests received
Possible Causes:
- Webhook is disabled
- Events not subscribed
- Endpoint URL is incorrect
Solutions:
- Check webhook status in dashboard
- Verify subscribed events include the event type you expect
- Use the "Test" feature to verify endpoint connectivity
Webhook Signature Verification Failed
Symptoms: Your endpoint rejects webhooks with invalid signature
Solutions:
- Ensure you're using the correct webhook secret
- Verify you're checking the raw request body (not parsed JSON)
- Check that your signature comparison is timing-safe
Service Account Issues
Service Account Keys Not Working
Symptoms: API calls with service account key return 401
Possible Causes:
- Service account is disabled
- Key was revoked
- Key hasn't been activated yet
Solutions:
- Check service account status (should be "Active")
- Check key status within the service account
- Wait a few seconds for new keys to propagate