Microsoft-Windows-PersistentMemory-ScmBus

Event	Title	Channel	Sample	Rule
1	Reported memory resource.	Analytic	N	N
2	Dispatching an IOCTL.	Diagnose	N	N
3	Completing a non-read/write request.	Diagnose	N	N
4	Dispatching a PnP request.	Diagnose	N	N
5	Completing a PnP request.	Diagnose	N	N
6	The firmware on this computer is not compliant with the industry standards …	Certification	N	N
7	The firmware on this computer is not fully compliant with the industry standards …	Certification	N	N
8	The header information of the Query ARS Status operation.	Diagnose	N	N
9	The firmware on this computer is not compliant with the industry standards …	Certification	N	N
10	The firmware on this computer is not fully compliant with the industry standards …	Certification	N	N
101	The information from Query ARS Status operation indicates that NVDIMM with …	Operational	N	N
102	The information from Query Cached ARS BadRanges operation indicates that NVDIMM …	Operational	N	N
103	The persistent memory changed the powerfail persistence mode to DurabilityMode.	Operational	N	N
104	The persistent memory disabled powerfail persistence by setting registry value …	Operational	N	N
105	Firmware activation on NVDIMM(s) in the system.	Operational	N	N
106	Add dedicated memory to the system.	Operational	N	N
107	Read cached dedicated memory ranges.	Operational	N	N
215	The driver that enumerates persistent memory devices ran into an error.	Operational	N	N
400	Some physical memory locations on the NVDIMM with NfitHandle of NfitHandle at …	Operational	N	N
401	Dedicated memory at SPA address 0xStartAddress overlap with cached dedicated …	Operational	N	N
900	SCMBUS DeviceGuid logged: Message.	Diagnose	N	N

Event ID 1: Reported memory resource.

Channel: Analytic

Fields #

Name	Description
`StartAddress` UInt64
`Size` UInt64

Event ID 2: Dispatching an IOCTL.

Channel: Diagnose

Fields #

Name	Description
`Irp` Pointer
`MajorFunction` HexInt32
`MinorFunction` HexInt32
`Parameter` HexInt32
`DeviceObject` Pointer

Event ID 3: Completing a non-read/write request.

Channel: Diagnose

Fields #

Name	Description
`Irp` Pointer
`Status` HexInt32	NTSTATUS reference
`DeviceObject` Pointer

Event ID 4: Dispatching a PnP request.

Channel: Diagnose

Fields #

Name	Description
`Irp` Pointer
`MinorFunction` HexInt32
`Type` HexInt32
`DeviceObject` Pointer

Event ID 5: Completing a PnP request.

Channel: Diagnose

Fields #

Name	Description
`Irp` Pointer
`Status` HexInt32	NTSTATUS reference
`DeviceObject` Pointer

Event ID 6: The firmware on this computer is not compliant with the industry standards required for storage-class memory support.

Channel: Certification

Description

The firmware on this computer is not compliant with the industry standards required for storage-class memory support. Some storage-class memory devices on this computer will not work properly.

Message #

The firmware on this computer is not compliant with the industry standards required for storage-class memory support. Some storage-class memory devices on this computer will not work properly.             

Click on the Details tab to see more information about this error.

Fields #

Name	Description
`CertificationArea` AnsiString
`FailureMessage` AnsiString

Event ID 7: The firmware on this computer is not fully compliant with the industry standards required for storage-class memory support.

Channel: Certification

Description

The firmware on this computer is not fully compliant with the industry standards required for storage-class memory support. Storage-class memory devices on this computer may not work properly.

Message #

The firmware on this computer is not fully compliant with the industry standards required for storage-class memory support. Storage-class memory devices on this computer may not work properly.             

Click on the Details tab to see more information about this warning.

Fields #

Name	Description
`CertificationArea` AnsiString
`FailureMessage` AnsiString

Event ID 8: The header information of the Query ARS Status operation.

Channel: Diagnose

Fields #

Name	Description
`Status` HexInt32	NTSTATUS reference
`ExtendedStatus` HexInt32
`Size` UInt32
`StartAddress` HexInt64
`Length` HexInt64
`RestartAddress` HexInt64
`RestartLength` HexInt64
`VolatileMemory` Boolean
`PersistentMemory` Boolean
`Overflow` Boolean
`NumErrorRecords` UInt32

Event ID 9: The firmware on this computer is not compliant with the industry standards required for multi-tier memory support.

Channel: Certification

Description

The firmware on this computer is not compliant with the industry standards required for multi-tier memory support. Some multi-tier memory devices on this computer will not work properly.

Message #

The firmware on this computer is not compliant with the industry standards required for multi-tier memory support. Some multi-tier memory devices on this computer will not work properly.             

Click on the Details tab to see more information about this error.

Fields #

Name	Description
`CertificationArea` AnsiString
`FailureMessage` AnsiString

Event ID 10: The firmware on this computer is not fully compliant with the industry standards required for multi-tier memory support.

Channel: Certification

Description

The firmware on this computer is not fully compliant with the industry standards required for multi-tier memory support. Multi-tier memory devices on this computer may not work properly.

Message #

The firmware on this computer is not fully compliant with the industry standards required for multi-tier memory support. Multi-tier memory devices on this computer may not work properly.             

Click on the Details tab to see more information about this warning.

Fields #

Name	Description
`CertificationArea` AnsiString
`FailureMessage` AnsiString

Event ID 101: The information from Query ARS Status operation indicates that NVDIMM with NfitHandle of NfitHandle contains corrupted physical memory locations.

Channel: Operational

Message #

The information from Query ARS Status operation indicates that NVDIMM with NfitHandle of %1 contains corrupted physical memory locations.

Fields #

Name	Description
`NfitHandle` HexInt32
`StartAddress` HexInt64
`Length` HexInt64

Event ID 102: The information from Query Cached ARS BadRanges operation indicates that NVDIMM with NfitHandle of NfitHandle contains corrupted physical memory locations.

Channel: Operational

Message #

The information from Query Cached ARS BadRanges operation indicates that NVDIMM with NfitHandle of %1 contains corrupted physical memory locations.

Fields #

Name	Description
`NfitHandle` HexInt32
`StartAddress` HexInt64
`Length` HexInt64

Event ID 103: The persistent memory changed the powerfail persistence mode to DurabilityMode.

Channel: Operational

Description

The persistent memory changed the powerfail persistence mode to DurabilityMode. (0 is PerformanceMode, 1 is DurabilityMode.).

Message #

The persistent memory changed the powerfail persistence mode to %1. (0 is PerformanceMode, 1 is DurabilityMode.)

Fields #

Name	Description
`DurabilityMode` UInt16

Event ID 104: The persistent memory disabled powerfail persistence by setting registry value DisablePowerfailPersistence to DisablePowerfailPersistence.

Channel: Operational

Description

The persistent memory disabled powerfail persistence by setting registry value DisablePowerfailPersistence to DisablePowerfailPersistence. (0 is enabled, 1 is disabled.).

Message #

The persistent memory disabled powerfail persistence by setting registry value DisablePowerfailPersistence to %1. (0 is enabled, 1 is disabled.)

Fields #

Name	Description
`DisablePowerfailPersistence` Boolean

Event ID 105: Firmware activation on NVDIMM(s) in the system.

Channel: Operational

Description

Firmware activation on NVDIMM(s) in the system. Status: Status.

Message #

Firmware activation on NVDIMM(s) in the system. Status: %2.

Fields #

Name	Description
`IoDeviceState` UInt32
`Status` HexInt32	NTSTATUS reference
`DsmStatus` HexInt32
`ActivationDuration` UInt64

Event ID 106: Add dedicated memory to the system.

Channel: Operational

Description

Add dedicated memory to the system. Status: Status.

Message #

Add dedicated memory to the system. Status: %1.

Fields #

Name	Description
`Status` HexInt32	NTSTATUS reference
`PageCount` UInt64
`PageAdded` UInt64
`ActivationDuration` UInt64

Event ID 107: Read cached dedicated memory ranges.

Channel: Operational

Description

Read cached dedicated memory ranges. Cached dedicated memory ranges: RangeCount New ranges to add: NewRangeCount Ranges to be removed: RemoveRangeCount.

Message #

Read cached dedicated memory ranges.             Cached dedicated memory ranges: %1             New ranges to add: %2             Ranges to be removed: %3

Fields #

Name	Description
`RangeCount` UInt64
`NewRangeCount` UInt64
`RemoveRangeCount` UInt64

Event ID 215: The driver that enumerates persistent memory devices ran into an error.

Channel: Operational

Description

The driver that enumerates persistent memory devices ran into an error. The information in the Details tab might help Microsoft or your platform vendor diagnose the problem.

Message #

The driver that enumerates persistent memory devices ran into an error. The information in the Details tab might help Microsoft or your platform vendor diagnose the problem.

Fields #

Name	Description
`DeviceGuid` GUID
`Message` AnsiString

Event ID 400: Some physical memory locations on the NVDIMM with NfitHandle of NfitHandle at the location of Location are corrupt.

Channel: Operational

Description

Some physical memory locations on the NVDIMM with NfitHandle of NfitHandle at the location of Location are corrupt. In order to protect your computer, Windows will attempt to prevent access to those locations and you may see failures trying to read or write to your data. Contact your hardware vendor to learn what recovery steps are available..

Message #

Some physical memory locations on the NVDIMM with NfitHandle of %1 at the location of %5 are corrupt. In order to protect your computer, Windows will attempt to prevent access to those locations and you may see failures trying to read or write to your data. Contact your hardware vendor to learn what recovery steps are available..

Fields #

Name	Description
`NfitHandle` HexInt32
`VendorId` HexInt32
`ProductId` HexInt32
`SerialNumber` HexInt32
`Location` UnicodeString
`StartAddress` HexInt64
`Length` HexInt64

Event ID 401: Dedicated memory at SPA address 0xStartAddress overlap with cached dedicated memory.

Channel: Operational

Description

Dedicated memory at SPA address 0xStartAddress overlap with cached dedicated memory. Length of the physical dedicated memory is 0xCachedLength bytes, while length of the cached dedicated memory is 0xDeviceLength bytes.

Message #

Dedicated memory at SPA address 0x%1 overlap with cached dedicated memory. Length of the physical dedicated memory is 0x%2 bytes, while length of the cached dedicated memory is 0x%3 bytes.

Fields #

Name	Description
`StartAddress` HexInt64
`CachedLength` HexInt64
`DeviceLength` HexInt64

Event ID 900: SCMBUS DeviceGuid logged: Message.

Channel: Diagnose

Description

SCMBUS DeviceGuid logged.

Message #

SCMBUS %1 logged:             
             
 %2

Fields #

Name	Description
`DeviceGuid` GUID
`Message` AnsiString

Provenance

ETW provider GUID c03715ce-ea6f-5b67-4449-da1d1e1afeb8

Defined in scmbus.sys, the binary that emits these events.

WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB