This object records why an attempted MACsec CKN switch on a port failed. Delivered in the hwCKNSwitchFailAlarm trap, it gives an admin the specific cause, such as a mismatched key or peer rejection, needed to fix a broken MACsec session instead of just knowing that it failed. For example, an admin sees hwMACsecCKNSwitchFailReason report something like key mismatch with peer and checks the CKN configured at the far end of the link.