Skip to content

AFW-120 — Collector CA problem ​

Area: Install & collector boot · All support codes · Reference table

Why this happened ​

The collector could not publish or read its TLS-inspection CA (provisioning failed, or the CA files are unreadable on disk).

Fix ​

Check the collector log for the ca_bootstrap error, confirm the data dir is writable, then restart the collector. If the tenant CA was rotated, re-enroll the collector.


If the fix doesn't resolve it, file a support ticket from the console — your workspace's diagnostics snapshot is attached automatically, so this code reaches support with its context.

Documentation for kilasec — the AI Agent Firewall.