Microsoft-Windows-ShieldedVM-ProvisioningSecureProcess

Event	Title	Channel	Sample	Rule
1	Provisioning Secure Process created	Debug	N	N
1	Event ID 1	Operational	N	N
2	Provisioning Secure Process could not initialize based on the command line …	Debug	N	N
2	Event ID 2	Operational	N	N
3	Provisioning Secure Process is closing	Debug	N	N
3	Event ID 3	Operational	N	N
4	Provisioning Secure Process argument was TemplateNameFound.	Debug	N	N
4	Event ID 4	Operational	N	N
5	Provisioning Secure Process was not provided the expected argument and will exit	Debug	N	N
5	Event ID 5	Operational	N	N
6	Provisioning Secure Process was not provided the expected argument and will exit	Debug	N	N
6	Event ID 6	Operational	N	N
7	Provisioning Secure Process parsed the command line arguments as MachineID.	Debug	N	N
7	Event ID 7	Operational	N	N
8	Provisioning Secure Process could not set the trustlet identity and must exit	Debug	N	N
8	Event ID 8	Operational	N	N
9	Provisioning Secure Process could not initialize the remote TPM assets and must …	Debug	N	N
9	Event ID 9	Operational	N	N
10	Provisioning Secure Process could not initialize the RPC server	Debug	N	N
10	Event ID 10	Operational	N	N
11	Provisioning Secure Process could not register with the RPC server	Debug	N	N
11	Event ID 11	Operational	N	N
12	Provisioning Secure Process transitioned to state EndState.	Debug	N	N
12	Event ID 12	Operational	N	N
13	Provisioning Secure Process transitioned to state EndState.	Debug	N	N
13	Event ID 13	Operational	N	N
14	Provisioning Secure Process is not running within IUM.	Debug	N	N
14	Event ID 14	Operational	N	N
15	Provisioning Secure Process received a message from source SourceGroup of length …	Debug	N	N
15	Event ID 15	Operational	N	N
16	Provisioning Secure Process received a request for the PDK.	Debug	N	N
16	Event ID 16	Operational	N	N
17	Provisioning Secure Process is sending the PDK to the provisioning agent.	Debug	N	N
17	Event ID 17	Operational	N	N
18	Provisioning Secure Process has sent the encrypted PDK to the virtual machine.	Debug	N	N
18	Event ID 18	Operational	N	N
19	Provisioning Secure Process received a PDK that was invalid or could not be …	Debug	N	N
19	Event ID 19	Operational	N	N
20	Provisioning Secure Process encountered an error while processing the EFI …	Debug	N	N
20	Event ID 20	Operational	N	N
21	Provisioning Secure Process encountered an error while generating the server key …	Debug	N	N
21	Event ID 21	Operational	N	N
22	Provisioning Secure Process encountered an error while extending the Secure Boot …	Debug	N	N
22	Event ID 22	Operational	N	N
23	Provisioning Secure Process encountered an error while extending the Boot Lock …	Debug	N	N
23	Event ID 23	Operational	N	N
24	Provisioning Secure Process encountered an error while accessing secure storage …	Debug	N	N
24	Event ID 24	Operational	N	N
25	Provisioning Secure Process encountered an error while working with the remote …	Debug	N	N
25	Event ID 25	Operational	N	N
26	Provisioning Secure Process encountered an error while working with the remote …	Debug	N	N
26	Event ID 26	Operational	N	N
27	Provisioning Secure Process encountered an error while attempting miniature …	Debug	N	N
27	Event ID 27	Operational	N	N
28	Provisioning Secure Process encountered an error while creating and sending the …	Debug	N	N
28	Event ID 28	Operational	N	N
29	Provisioning Secure Process could not collect necessary security info from the …	Debug	N	N
29	Event ID 29	Operational	N	N
30	Provisioning Secure Process is populating the boot authority information from …	Debug	N	N
30	Event ID 30	Operational	N	N
31	Provisioning Secure Process will allow the UEFI certificate authority for this …	Debug	N	N
31	Event ID 31	Operational	N	N
32	Provisioning Secure Process attestation error - PCR PcrIndex, error …	Debug	N	N
32	Event ID 32	Operational	N	N
33	Provisioning Secure Process received a PDK that was invalid or could not be …	Debug	N	N
33	Event ID 33	Operational	N	N
34	Provisioning Secure Process received a message from NMPS that was invalid or …	Debug	N	N
34	Event ID 34	Operational	N	N
35	Provisioning Secure Process received a message from NMPS that was invalid or …	Debug	N	N
35	Event ID 35	Operational	N	N
36	Provisioning Secure Process received a message that was invalid or could not be …	Debug	N	N
36	Event ID 36	Operational	N	N
37	Provisioning Secure Process received a message that was invalid or could not be …	Debug	N	N
37	Event ID 37	Operational	N	N
38	Provisioning Secure Process is starting the version negotiation with the …	Debug	N	N
38	Event ID 38	Operational	N	N
39	Provisioning Secure Process received version information from the provisioning …	Debug	N	N
39	Event ID 39	Operational	N	N
40	Provisioning Secure Process declared version information	Debug	N	N
40	Event ID 40	Operational	N	N
41	Provisioning Secure Process finished negotiating the protocol version	Debug	N	N
41	Event ID 41	Operational	N	N
42	Provisioning Secure Process accepted a protocol version for communication	Debug	N	N
42	Event ID 42	Operational	N	N
43	Provisioning Secuity Process failed to predict the UEFI Secure Boot variables …	Debug	N	N
43	Event ID 43	Operational	N	N
44	Provisioning Secuity Process detected a mismatched UEFI db variable on the …	Debug	N	N
44	Event ID 44	Operational	N	N
45	Provisioning Secuity Process detected a mismatched UEFI dbx variable on the …	Debug	N	N
45	Event ID 45	Operational	N	N
46	Provisioning Secuity Process failed to match the target machine UEFI Secure Boot …	Debug	N	N
46	Event ID 46	Operational	N	N
47	Provisioning Secuity Process failed to validate the target BootOS Provisioning …	Debug	N	N
47	Event ID 47	Operational	N	N
48	Provisioning Secuity Process has failed to verify the target machine so no …	Debug	N	N
48	Event ID 48	Operational	N	N
49	The PDK decypted by PSP does not contain an RRK and therefore no VMRK will be …	Debug	N	N
49	Event ID 49	Operational	N	N
50	The PDK decypted by PSP contains an RRK and a VMRK has been generated	Debug	N	N
50	Event ID 50	Operational	N	N
51	Processing the RRK failed	Debug	N	N
51	Event ID 51	Operational	N	N

Event ID 1: Provisioning Secure Process created

Channel: Debug

Fields #

Name	Description
`NtStatus` UInt32

Event ID 1

Channel: Operational

Description

Provisioning Secure Process created.

Fields #

Name	Description
`NtStatus` UInt32

Event ID 2: Provisioning Secure Process could not initialize based on the command line arguments

Channel: Debug

Fields #

Name	Description
`NtStatus` UInt32

Event ID 2

Channel: Operational

Description

Provisioning Secure Process could not initialize based on the command line arguments.

Fields #

Name	Description
`NtStatus` UInt32

Event ID 3: Provisioning Secure Process is closing

Channel: Debug

Fields #

Name	Description
`NtStatus` UInt32

Event ID 3

Channel: Operational

Description

Provisioning Secure Process is closing.

Fields #

Name	Description
`NtStatus` UInt32

Event ID 4: Provisioning Secure Process argument was TemplateNameFound.

Channel: Debug

Message #

Provisioning Secure Process argument was %1

Fields #

Name	Description
`TemplateNameFound` UnicodeString

Event ID 4

Channel: Operational

Description

Provisioning Secure Process argument was.

Fields #

Name	Description
`TemplateNameFound` UnicodeString

Event ID 5: Provisioning Secure Process was not provided the expected argument and will exit

Channel: Debug

Fields #

Name	Description
`NtStatus` UInt32

Event ID 5

Channel: Operational

Description

Provisioning Secure Process was not provided the expected argument and will exit.

Fields #

Name	Description
`NtStatus` UInt32

Event ID 6: Provisioning Secure Process was not provided the expected argument and will exit

Channel: Debug

Fields #

Name	Description
`TemplateNameFound` UnicodeString

Event ID 6

Channel: Operational

Description

Provisioning Secure Process was not provided the expected argument and will exit.

Fields #

Name	Description
`TemplateNameFound` UnicodeString

Event ID 7: Provisioning Secure Process parsed the command line arguments as MachineID.

Channel: Debug

Message #

Provisioning Secure Process parsed the command line arguments as %1

Fields #

Name	Description
`MachineID` GUID

Event ID 7

Channel: Operational

Description

Provisioning Secure Process parsed the command line arguments as.

Fields #

Name	Description
`MachineID` GUID

Event ID 8: Provisioning Secure Process could not set the trustlet identity and must exit

Channel: Debug

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 8

Channel: Operational

Description

Provisioning Secure Process could not set the trustlet identity and must exit.

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 9: Provisioning Secure Process could not initialize the remote TPM assets and must exit

Channel: Debug

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 9

Channel: Operational

Description

Provisioning Secure Process could not initialize the remote TPM assets and must exit.

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 10: Provisioning Secure Process could not initialize the RPC server

Channel: Debug

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 10

Channel: Operational

Description

Provisioning Secure Process could not initialize the RPC server.

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 11: Provisioning Secure Process could not register with the RPC server

Channel: Debug

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 11

Channel: Operational

Description

Provisioning Secure Process could not register with the RPC server.

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 12: Provisioning Secure Process transitioned to state EndState.

Channel: Debug

Message #

Provisioning Secure Process transitioned to state %5

Fields #

Name	Description
`MachineID` GUID
`TransitionTime` FILETIME
`ValidStartState` Boolean
`StartState` UInt8
`EndState` UInt8

Event ID 12

Channel: Operational

Description

Provisioning Secure Process transitioned to state.

Fields #

Name	Description
`MachineID` GUID
`TransitionTime` FILETIME
`ValidStartState` Boolean
`StartState` UInt8
`EndState` UInt8

Event ID 13: Provisioning Secure Process transitioned to state EndState.

Channel: Debug

Message #

Provisioning Secure Process transitioned to state %5

Fields #

Name	Description
`MachineID` GUID
`TransitionTime` FILETIME
`ValidStartState` Boolean
`StartState` UInt8
`EndState` UInt8
`ActionPriority` UInt32
`ActionStartingState` UInt8
`ActionNewState` UInt8
`ActionType` UInt8

Event ID 13

Channel: Operational

Description

Provisioning Secure Process transitioned to state.

Fields #

Name	Description
`MachineID` GUID
`TransitionTime` FILETIME
`ValidStartState` Boolean
`StartState` UInt8
`EndState` UInt8
`ActionPriority` UInt32
`ActionStartingState` UInt8
`ActionNewState` UInt8
`ActionType` UInt8

Event ID 14: Provisioning Secure Process is not running within IUM.

Channel: Debug

Description

Provisioning Secure Process is not running within IUM. This degrades security.

Message #

Provisioning Secure Process is not running within IUM. This degrades security.

Fields #

Name	Description
`MachineID` GUID

Event ID 14

Channel: Operational

Description

Provisioning Secure Process is not running within IUM. This degrades security.

Fields #

Name	Description
`MachineID` GUID

Event ID 15: Provisioning Secure Process received a message from source SourceGroup of length Length.

Channel: Debug

Message #

Provisioning Secure Process received a message from source %2 of length %3.

Fields #

Name	Description
`MachineID` GUID
`SourceGroup` UInt8
`Length` UInt32

Event ID 15

Channel: Operational

Description

Provisioning Secure Process received a message from source of length .

Fields #

Name	Description
`MachineID` GUID
`SourceGroup` UInt8
`Length` UInt32

Event ID 16: Provisioning Secure Process received a request for the PDK.

Channel: Debug

Fields #

Name	Description
`MachineID` GUID

Event ID 16

Channel: Operational

Description

Provisioning Secure Process received a request for the PDK.

Fields #

Name	Description
`MachineID` GUID

Event ID 17: Provisioning Secure Process is sending the PDK to the provisioning agent.

Channel: Debug

Fields #

Name	Description
`MachineID` GUID

Event ID 17

Channel: Operational

Description

Provisioning Secure Process is sending the PDK to the provisioning agent.

Fields #

Name	Description
`MachineID` GUID

Event ID 18: Provisioning Secure Process has sent the encrypted PDK to the virtual machine.

Channel: Debug

Fields #

Name	Description
`MachineID` GUID

Event ID 18

Channel: Operational

Description

Provisioning Secure Process has sent the encrypted PDK to the virtual machine.

Fields #

Name	Description
`MachineID` GUID

Event ID 19: Provisioning Secure Process received a PDK that was invalid or could not be decrypted.

Channel: Debug

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 19

Channel: Operational

Description

Provisioning Secure Process received a PDK that was invalid or could not be decrypted.

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 20: Provisioning Secure Process encountered an error while processing the EFI database.

Channel: Debug

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 20

Channel: Operational

Description

Provisioning Secure Process encountered an error while processing the EFI database.

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 21: Provisioning Secure Process encountered an error while generating the server key and cannot continue.

Channel: Debug

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 21

Channel: Operational

Description

Provisioning Secure Process encountered an error while generating the server key and cannot continue.

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 22: Provisioning Secure Process encountered an error while extending the Secure Boot PCR and cannot continue.

Channel: Debug

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 22

Channel: Operational

Description

Provisioning Secure Process encountered an error while extending the Secure Boot PCR and cannot continue.

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 23: Provisioning Secure Process encountered an error while extending the Boot Lock PCR and cannot continue.

Channel: Debug

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 23

Channel: Operational

Description

Provisioning Secure Process encountered an error while extending the Boot Lock PCR and cannot continue.

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 24: Provisioning Secure Process encountered an error while accessing secure storage and cannot continue.

Channel: Debug

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 24

Channel: Operational

Description

Provisioning Secure Process encountered an error while accessing secure storage and cannot continue.

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 25: Provisioning Secure Process encountered an error while working with the remote TPM and cannot continue.

Channel: Debug

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 25

Channel: Operational

Description

Provisioning Secure Process encountered an error while working with the remote TPM and cannot continue.

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 26: Provisioning Secure Process encountered an error while working with the remote RTPM key and cannot authenticate the PDK.

Channel: Debug

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 26

Channel: Operational

Description

Provisioning Secure Process encountered an error while working with the remote RTPM key and cannot authenticate the PDK.

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 27: Provisioning Secure Process encountered an error while attempting miniature attestation.

Channel: Debug

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 27

Channel: Operational

Description

Provisioning Secure Process encountered an error while attempting miniature attestation.

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 28: Provisioning Secure Process encountered an error while creating and sending the provisioning message to the provisioning agent.

Channel: Debug

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 28

Channel: Operational

Description

Provisioning Secure Process encountered an error while creating and sending the provisioning message to the provisioning agent.

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 29: Provisioning Secure Process could not collect necessary security info from the secure kernel.

Channel: Debug

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 29

Channel: Operational

Description

Provisioning Secure Process could not collect necessary security info from the secure kernel.

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 30: Provisioning Secure Process is populating the boot authority information from the template.

Channel: Debug

Fields #

Name	Description
`MachineID` GUID

Event ID 30

Channel: Operational

Description

Provisioning Secure Process is populating the boot authority information from the template.

Fields #

Name	Description
`MachineID` GUID

Event ID 31: Provisioning Secure Process will allow the UEFI certificate authority for this boot.

Channel: Debug

Fields #

Name	Description
`MachineID` GUID

Event ID 31

Channel: Operational

Description

Provisioning Secure Process will allow the UEFI certificate authority for this boot.

Fields #

Name	Description
`MachineID` GUID

Event ID 32: Provisioning Secure Process attestation error - PCR PcrIndex, error DiagnosticEventId.

Channel: Debug

Message #

Provisioning Secure Process attestation error - PCR %2, error %3

Fields #

Name	Description
`MachineID` GUID
`PcrIndex` UInt32
`DiagnosticEventId` UInt32
`Name` UnicodeString
`AuthoritativeEventOrder` UInt32
`AuthoritativeEventLength` UInt32
`AuthoritativeEvent` Binary
`AttestationEventOrder` UInt32
`AttestationEventLength` UInt32
`AttestationEvent` Binary

Event ID 32

Channel: Operational

Description

Provisioning Secure Process attestation error - PCR , error.

Fields #

Name	Description
`MachineID` GUID
`PcrIndex` UInt32
`DiagnosticEventId` UInt32
`Name` UnicodeString
`AuthoritativeEventOrder` UInt32
`AuthoritativeEventLength` UInt32
`AuthoritativeEvent` Binary
`AttestationEventOrder` UInt32
`AttestationEventLength` UInt32
`AttestationEvent` Binary

Event ID 33: Provisioning Secure Process received a PDK that was invalid or could not be decrypted (payload included)

Channel: Debug

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32
`BlobSize` UInt32
`Blob` Binary

Event ID 33

Channel: Operational

Description

Provisioning Secure Process received a PDK that was invalid or could not be decrypted (payload included).

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32
`BlobSize` UInt32
`Blob` Binary

Event ID 34: Provisioning Secure Process received a message from NMPS that was invalid or could not be interpreted

Channel: Debug

Fields #

Name	Description
`MachineID` GUID

Event ID 34

Channel: Operational

Description

Provisioning Secure Process received a message from NMPS that was invalid or could not be interpreted.

Fields #

Name	Description
`MachineID` GUID

Event ID 35: Provisioning Secure Process received a message from NMPS that was invalid or could not be interpreted (payload included)

Channel: Debug

Fields #

Name	Description
`MachineID` GUID
`BlobSize` UInt32
`Blob` Binary

Event ID 35

Channel: Operational

Description

Provisioning Secure Process received a message from NMPS that was invalid or could not be interpreted (payload included).

Fields #

Name	Description
`MachineID` GUID
`BlobSize` UInt32
`Blob` Binary

Event ID 36: Provisioning Secure Process received a message that was invalid or could not be interpreted

Channel: Debug

Fields #

Name	Description
`MachineID` GUID

Event ID 36

Channel: Operational

Description

Provisioning Secure Process received a message that was invalid or could not be interpreted.

Fields #

Name	Description
`MachineID` GUID

Event ID 37: Provisioning Secure Process received a message that was invalid or could not be interpreted (payload included)

Channel: Debug

Fields #

Name	Description
`MachineID` GUID
`BlobSize` UInt32
`Blob` Binary

Event ID 37

Channel: Operational

Description

Provisioning Secure Process received a message that was invalid or could not be interpreted (payload included).

Fields #

Name	Description
`MachineID` GUID
`BlobSize` UInt32
`Blob` Binary

Event ID 38: Provisioning Secure Process is starting the version negotiation with the provisioning agent

Channel: Debug

Fields #

Name	Description
`MachineID` GUID

Event ID 38

Channel: Operational

Description

Provisioning Secure Process is starting the version negotiation with the provisioning agent.

Fields #

Name	Description
`MachineID` GUID

Event ID 39: Provisioning Secure Process received version information from the provisioning agent

Channel: Debug

Fields #

Name	Description
`MachineID` GUID
`VersionNegotiationVersion` UInt8
`DeclaredVersionMajor` UInt16
`DeclaredVersionMinor` UInt16
`DeclaredVersionBuild` UInt16
`DeclaredVersionRelease` UInt16
`DeclaredVersionLogicalMajor` UInt8
`DeclaredVersionLogicalMinor` UInt8
`AcceptableVersionStartMajor` UInt8
`AcceptableVersionStartMinor` UInt8

Event ID 39

Channel: Operational

Description

Provisioning Secure Process received version information from the provisioning agent.

Fields #

Name	Description
`MachineID` GUID
`VersionNegotiationVersion` UInt8
`DeclaredVersionMajor` UInt16
`DeclaredVersionMinor` UInt16
`DeclaredVersionBuild` UInt16
`DeclaredVersionRelease` UInt16
`DeclaredVersionLogicalMajor` UInt8
`DeclaredVersionLogicalMinor` UInt8
`AcceptableVersionStartMajor` UInt8
`AcceptableVersionStartMinor` UInt8

Event ID 40: Provisioning Secure Process declared version information

Channel: Debug

Fields #

Name	Description
`MachineID` GUID
`DeclaredVersionMajor` UInt16
`DeclaredVersionMinor` UInt16
`DeclaredVersionBuild` UInt16
`DeclaredVersionRelease` UInt16
`DeclaredVersionLogicalMajor` UInt8
`DeclaredVersionLogicalMinor` UInt8

Event ID 40

Channel: Operational

Description

Provisioning Secure Process declared version information.

Fields #

Name	Description
`MachineID` GUID
`DeclaredVersionMajor` UInt16
`DeclaredVersionMinor` UInt16
`DeclaredVersionBuild` UInt16
`DeclaredVersionRelease` UInt16
`DeclaredVersionLogicalMajor` UInt8
`DeclaredVersionLogicalMinor` UInt8

Event ID 41: Provisioning Secure Process finished negotiating the protocol version

Channel: Debug

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 41

Channel: Operational

Description

Provisioning Secure Process finished negotiating the protocol version.

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 42: Provisioning Secure Process accepted a protocol version for communication

Channel: Debug

Fields #

Name	Description
`MachineID` GUID
`AcceptedVersionStartMajor` UInt8
`AcceptedVersionStartMinor` UInt8

Event ID 42

Channel: Operational

Description

Provisioning Secure Process accepted a protocol version for communication.

Fields #

Name	Description
`MachineID` GUID
`AcceptedVersionStartMajor` UInt8
`AcceptedVersionStartMinor` UInt8

Event ID 43: Provisioning Secuity Process failed to predict the UEFI Secure Boot variables from the launch authority returned from attestation

Channel: Debug

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 43

Channel: Operational

Description

Provisioning Secuity Process failed to predict the UEFI Secure Boot variables from the launch authority returned from attestation.

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 44: Provisioning Secuity Process detected a mismatched UEFI db variable on the target and is prevented from adopting this value by policy

Channel: Debug

Fields #

Name	Description
`MachineID` GUID

Event ID 44

Channel: Operational

Description

Provisioning Secuity Process detected a mismatched UEFI db variable on the target and is prevented from adopting this value by policy.

Fields #

Name	Description
`MachineID` GUID

Event ID 45: Provisioning Secuity Process detected a mismatched UEFI dbx variable on the target and is prevented from adopting this value by policy

Channel: Debug

Fields #

Name	Description
`MachineID` GUID

Event ID 45

Channel: Operational

Description

Provisioning Secuity Process detected a mismatched UEFI dbx variable on the target and is prevented from adopting this value by policy.

Fields #

Name	Description
`MachineID` GUID

Event ID 46: Provisioning Secuity Process failed to match the target machine UEFI Secure Boot configuration

Channel: Debug

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 46

Channel: Operational

Description

Provisioning Secuity Process failed to match the target machine UEFI Secure Boot configuration.

Fields #

Name	Description
`MachineID` GUID
`NtStatus` UInt32

Event ID 47: Provisioning Secuity Process failed to validate the target BootOS Provisioning Agent scenario ID and version

Channel: Debug

Fields #

Name	Description
`MachineID` GUID

Event ID 47

Channel: Operational

Description

Provisioning Secuity Process failed to validate the target BootOS Provisioning Agent scenario ID and version.

Fields #

Name	Description
`MachineID` GUID

Event ID 48: Provisioning Secuity Process has failed to verify the target machine so no Machine Key will be produced, provisioning will fail

Channel: Debug

Fields #

Name	Description
`MachineID` GUID

Event ID 48

Channel: Operational

Description

Provisioning Secuity Process has failed to verify the target machine so no Machine Key will be produced, provisioning will fail.

Fields #

Name	Description
`MachineID` GUID

Event ID 49: The PDK decypted by PSP does not contain an RRK and therefore no VMRK will be generated

Channel: Debug

Fields #

Name	Description
`MachineID` GUID

Event ID 49

Channel: Operational

Description

The PDK decypted by PSP does not contain an RRK and therefore no VMRK will be generated.

Fields #

Name	Description
`MachineID` GUID

Event ID 50: The PDK decypted by PSP contains an RRK and a VMRK has been generated

Channel: Debug

Fields #

Name	Description
`MachineID` GUID

Event ID 50

Channel: Operational

Description

The PDK decypted by PSP contains an RRK and a VMRK has been generated.

Fields #

Name	Description
`MachineID` GUID

Event ID 51: Processing the RRK failed

Channel: Debug

Fields #

Name	Description
`MachineID` GUID

Event ID 51

Channel: Operational

Description

Processing the RRK failed.

Fields #

Name	Description
`MachineID` GUID