Skip to content

Key-Material Backend Bind Verification Unavailable

URI: https://docs.ankatech.co/errors/tenant-backend-bind-selftest-unavailable
HTTP Status: 503 Service Unavailable

When you see this

The per-tenant BYOK bind contacted the declared key-material backend to run its wrap/unwrap check and got no usable answer in time, or an answer asking it to slow down — the reason extension member is UNREACHABLE, TIMED_OUT or THROTTLED (a request-rate limit at the provider). Nothing was learned about the declaration or the credential, so this is the one bind failure a retry can clear. The bind does not advance to active; the declaration reverts to pending-bind. The response carries a Retry-After header.

A backend that answered and refused is not this type: it is Key-Material Backend Bind Verification Failed (422, no Retry-After), which names what the backend answered. A credential rotation that could not reach the backend answers BYOK Credential Self-Test Unavailable instead.

Response Example

{
  "type": "https://docs.ankatech.co/errors/tenant-backend-bind-selftest-unavailable",
  "title": "Key-Material Backend Bind Verification Unavailable",
  "status": 503,
  "detail": "The declared key-material backend could not be reached in time to verify the bind. Nothing was learned about the declaration or the credential; retry the bind shortly. The backend was not bound.",
  "instance": "/api/v3/admin/tenants/9f1c0b52-6a3d-4f8e-9b21-7c5d4e3a1b09/key-backend/byok/bind",
  "extensions": {
    "requestId": "7c9e6679-7425-40de-944b-e07fc1f90ae7",
    "reason": "UNREACHABLE"
  }
}

Content-Type: application/problem+json — the response follows RFC 9457 Problem Details.

How to Resolve

  1. Wait the Retry-After interval and bind again.
  2. If it recurs, check the network path from the platform to the backend: DNS, firewall or security group, VPC endpoint, and any declared endpoint. POST /api/v3/admin/tenants/{tenantId}/key-backend/byok/test answers the same verdict without changing the declaration.

For full schema definitions, examples, and interactive testing, see the Developer Hub Reference.