eimzo-ts

Troubleshooting E-IMZO errors

Check error.code first, then error.reason and error.status (raw data from E-IMZO) or error.httpStatus (your backend).

Code	Cause	Fix
`NOT_INSTALLED`	E-IMZO is not running or not installed; the WebSocket to 127.0.0.1 closed.	Start E-IMZO or install it from e-imzo.uz.
`API_KEY_REJECTED`	No valid API key for the page's domain.	`DEV_API_KEYS` on localhost; Developer mode in the E-IMZO tray for test domains; an issued key for each production domain.
`OUTDATED_VERSION`	E-IMZO is older than `minVersion` (4.86 by default).	Update E-IMZO.
`WRONG_PASSWORD`	Wrong password. `reason` "Password is not ASCII" means a non-Latin keyboard layout.	Let the user retry. E-IMZO has already shown its own message.
`CANCELLED`	The user pressed Cancel in the password window.	Reset the UI; do not show an error.
`KEY_NOT_FOUND`	E-IMZO forgot the key: restart, 24 hours, or the key was unloaded.	With `autoReloadKey` (default) `sign()` retries once. Otherwise call `loadKey()`.
`KEY_NOT_LOADED`	`sign()` before `loadKey()`.	Fix the calling code.
`FILE_TOO_LARGE`	File is larger than `maxSize` (10 MB by default).	Raise `maxSize` or reject the file.
`BACKEND_NOT_CONFIGURED`	`login()` without `getChallenge`/`login`, or `signDocument()` without `timestamp`.	Configure `backend`.
`BACKEND_ERROR`	Your backend returned non-2xx or a non-JSON body, the request failed, or a challenge/timestamp response had `status` other than 1 or no value.	Check `httpStatus` and `params.detail`.
`TIMEOUT`	`timeoutMs` is set and there was no answer in time.	Raise or remove `timeoutMs`.
`NOT_IN_BROWSER`	A method was called on the server (SSR, no `window`).	Call it only from client-only code; in a Node script pass `WebSocketImpl`.
`WEBSOCKET_UNSUPPORTED`	The browser has no WebSocket.	Update the browser.
`EIMZO_ERROR`	Any other E-IMZO error.	Read `reason`.

Other symptoms

The password is asked on every signature. Several clients, or loadKey() before every sign(). Keep one client and load the key once.
Fewer keys than E-IMZO shows. Keys without TIN and PINFL are skipped by design.
Works on localhost but not on the real domain. No API key for that domain.

e-imzo-server `/backend/auth` statuses

status	Meaning
1	OK
-1	Certificate status could not be checked (often the VPN to the certification center is down). Do not log in; retry later.
-5	Signing time outside the allowed window: check the computer clock.
-10	Invalid signature.
-11, -12	Certificate invalid (at signing time).
-20	Challenge not found or expired (120 seconds).
-24, -25	Certificate policy or CA not allowed.