| 0 | Cannot continue because a failure occurred while provisioning. | Operational | N | N |
| 1 | A general error occurred while provisioning the machine. | Operational | N | N |
| 2 | Cannot provision because the Shielded VM provisioning data cannot be decrypted. | Operational | N | N |
| 3 | Cannot provision because the data from the remote TPM reflects an insecure … | Operational | N | N |
| 4 | Cannot provision because an error was detected while communicating with the … | Operational | N | N |
| 5 | Cannot continue because the target machine detected a TPM failure. | Operational | N | N |
| 6 | Cannot continue because the provisioning agent was unable to retrieve the … | Operational | N | N |
| 7 | Cannot provision because the template disk attached to the machine is invalid. | Operational | N | N |
| 8 | Cannot provision because the volume signature catalog from the template disk is … | Operational | N | N |
| 9 | Cannot provision because the provided Shielded VM provisioning data is not … | Operational | N | N |
| 10 | The template manager has determined that the template disk signature is invalid. | Operational | N | N |
| 11 | Unable to continue because a failure occurred while attempting to rekey the … | Operational | N | N |
| 12 | An error occurred while processing the Shielded VM provisioning data content. | Operational | N | N |
| 13 | Cannot provision because the Shielded VM provisioning data failed to write to … | Operational | N | N |
| 14 | The target machine? | Operational | N | N |
| 15 | Cannot continue because the provided Shielded VM provisioning data failed to … | Operational | N | N |
| 16 | Cannot continue because the remote machine disconnected unexpectedly. | Operational | N | N |
| 17 | Cannot continue because a failure occurred when accessing the secure storage. | Operational | N | N |
| 18 | Cannot provision because the volume signature catalog from the template disk is … | Operational | N | N |
| 19 | Unable to create the Unattend. | Operational | N | N |
| 20 | An error occurred while processing the Shielded VM provisioning data content. | Operational | N | N |
| 21 | Cannot continue because Virtual Machine attestation failed during provisioning … | Operational | N | N |
| 22 | Cannot continue because a failure occurred while calculating a hash of the … | Operational | N | N |
| 23 | Cannot continue because the signature file in the template disk is missing. | Operational | N | N |
| 24 | Cannot continue because the TPM is missing the SRK. | Operational | N | N |
| 25 | Provisioning cannot continue because the provisioning security process could not … | Operational | N | N |
| 26 | Provisioning cannot continue because the template disk does not have an expected … | Operational | N | N |
| 27 | Provisioning cannot continue because the template disk has an unexpected volume … | Operational | N | N |
| 28 | Provisioning cannot continue because the disk associated with the provisioned VM … | Operational | N | N |
| 29 | Provisioning cannot continue because the operating system associated with the … | Operational | N | N |
| 30 | Provisioning cannot continue because the sealing values associated with the … | Operational | N | N |
| 31 | Provisioning cannot continue because the initialization data required by the … | Operational | N | N |
| 32 | Provisioning may not continue because the UEFI database could not be loaded. | Operational | N | N |
| 33 | Provisioning may not continue because a launch authority could not be … | Operational | N | N |
| 34 | Provisioning failed to extend the secure boot PCR. | Operational | N | N |
| 35 | Provisioning failed to extend the boot lock PCR. | Operational | N | N |
| 36 | Provisioning could not generate the server key or TPM operations. | Operational | N | N |
| 37 | The version of communication required by Provisioning was not understood by the … | Operational | N | N |
| 38 | The template disk uses a version of communication not allowed by Provisioning. | Operational | N | N |
| 39 | Msps_ProvisioningService: Timeout detected. | Operational | N | N |
| 40 | An error was provided to the provisioning service of behalf of another … | Operational | N | N |
| 41 | The attempt to prepare the specialized machine failed. | Operational | N | N |
| 42 | Provisioning agent reported a failure to unwrap the protected data. | Operational | N | N |
| 43 | The target has been deemed unhealthy or not secure by attestation, provisioning … | Operational | N | N |
| 44 | Due to prior health assessment operations the provisioning security process has … | Operational | N | N |
| 45 | The provisioning service received a connection request from an unknown machine. | Operational | N | N |
| 46 | The provisioning service received a connection request from a machine in an … | Operational | N | N |
| 47 | The virtual machine cannot be shielded because its virtual disk identifier … | Operational | N | N |
| 48 | The VM boot disk is a differencing disk which is not supported by the … | Operational | N | N |
| 301 | WMI call failed. | Debug | N | N |
| 301 | Event ID 301 | Operational | N | N |
| 302 | WMI call failed. | Debug | N | N |
| 302 | Event ID 302 | Operational | N | N |
| 303 | Msps_ProvisioningService: Shielded VM provisioning session started. | Operational | N | N |
| 304 | Msps_ProvisioningService: Failed to start Shielded VM provisioning session. | Operational | N | N |
| 305 | Msps_ProvisioningService: Failed to start Shielded VM provisioning session. | Operational | N | N |
| 306 | Msps_ProvisioningService: Shielded VM provisioning session opened. | Operational | N | N |
| 307 | Msps_ProvisioningService: Shielded VM provisioning session closed. | Operational | N | N |
| 308 | Msps_ProvisioningJob removed. | Operational | N | N |
| 309 | Msps_ProvisioningService service activated. | Debug | N | N |
| 309 | Event ID 309 | Operational | N | N |
| 310 | Msps_ProvisioningService service completed. | Debug | N | N |
| 310 | Event ID 310 | Operational | N | N |
| 311 | Msps_ProvisioningJob: Received request to retrieve job. | Debug | N | N |
| 311 | Event ID 311 | Operational | N | N |
| 312 | Msps_ProvisioningJob: Received request to delete job. | Debug | N | N |
| 312 | Event ID 312 | Operational | N | N |
| 313 | Msps_ProvisioningJob found Uint instances. | Debug | N | N |
| 313 | Event ID 313 | Operational | N | N |
| 400 | The provisioning process logged an unknown event. | Operational | N | N |
| 401 | The provisioning data has been received over the secure channel. | Operational | N | N |
| 402 | The fabric data has been received over the secure channel. | Operational | N | N |
| 403 | The provisioning data was successfully transferred over the secure channel. | Operational | N | N |
| 404 | The secure inputs are being processed by the provisioning service. | Operational | N | N |
| 405 | The VM being provisioned is communicating with the remote TPM. | Operational | N | N |
| 406 | Provisioning started. | Operational | N | N |
| 407 | The Shielded VM was successfully provisioned. | Operational | N | N |
| 408 | The template manager is analyzing the template disk. | Operational | N | N |
| 409 | The template manager finished analyzing the template disk. | Operational | N | N |
| 410 | The template manager is sealing the template disk. | Operational | N | N |
| 411 | The template manager has sealed the template disk. | Operational | N | N |
| 412 | The specialization agent is applying the fabric data to the template disk. | Operational | N | N |
| 413 | The specialization agent has finished applying the fabric data to the template … | Operational | N | N |
| 414 | The provisioning agent has started executing the plugins for the Shielded VM. | Operational | N | N |
| 415 | The provisioning agent has finished executing the plugins for the Shielded VM. | Operational | N | N |
| 416 | A specialization value was replaced in the Shielded VM's unattend file. | Operational | N | N |
| 417 | The provisioning agent was started and is communicating with the host machine. | Operational | N | N |
| 418 | The provisioning process was started within the Shielded VM and is communicating … | Operational | N | N |
| 419 | The UEFI variables were received by the provisioning process. | Operational | N | N |
| 420 | An attestation event was received from the provisioning process. | Operational | N | N |
| 421 | A diagnostic attestation event was received from the provisioning process. | Operational | N | N |
| 422 | No instance of Name was found in the unattend file included in the provisioning … | Operational | N | N |
| 423 | The template manager is skipping verification of the signature catalog on disk … | Operational | N | N |
| 424 | The template manager is skipping verification of the signature catalog on disk … | Operational | N | N |
| 425 | The template manager has updated the factory policy of the provisioned VM … | Operational | N | N |
| 426 | The template manager has set the sealing values of the provisioned VM Machine … | Operational | N | N |
| 427 | The provisioning agent is starting the Execute pass on the provisioned VM … | Operational | N | N |
| 428 | The provisioning agent has finished the Execute pass on the provisioned VM … | Operational | N | N |
| 429 | The provisioning agent has finished the platform update on the provisioned VM … | Operational | N | N |
| 430 | The provisioning agent is starting to predict the sealing values of the … | Operational | N | N |
| 431 | The provisioning agent is starting the Finalize pass on the provisioned VM … | Operational | N | N |
| 432 | The provisioning agent has finished the Finalize pass on the provisioned VM … | Operational | N | N |
| 433 | The provisioning agent is allowed to use the UEFI CA per current policy Machine … | Operational | N | N |
| 434 | The provisioning service is selecting a launch authority Machine ID. | Debug | N | N |
| 434 | Event ID 434 | Operational | N | N |
| 435 | The template disk has declared its current version for the purposes of … | Operational | N | N |
| 436 | The provisioning service has accepted a communications version supported by the … | Operational | N | N |
| 437 | Received status update from the template manager. | Debug | N | N |
| 437 | Event ID 437 | Operational | N | N |
| 438 | The template manager successfully validated the image hash. | Operational | N | N |
| 439 | The template manager completed rolling the FVEK. | Operational | N | N |
| 440 | The template manager successfully protected the volume. | Operational | N | N |
| 441 | The provisioning Agent encountered an unknown data section. | Debug | N | N |
| 441 | Event ID 441 | Operational | N | N |
| 442 | An external BitLocker key was created for a template volume. | Operational | N | N |
| 443 | An encrypted BitLocker external key for a template volume was written to disk. | Operational | N | N |
| 500 | Ptp Session Event. | Debug | N | N |
| 500 | Event ID 500 | Operational | N | N |
| 501 | Ptp Session Event. | Debug | N | N |
| 501 | Event ID 501 | Operational | N | N |
| 502 | Invalid payload in error notification. | Debug | N | N |
| 502 | Event ID 502 | Operational | N | N |
| 503 | Invalid attestation payload in notification. | Debug | N | N |
| 503 | Event ID 503 | Operational | N | N |
| 504 | uint attestation items received from the attestation diagnostics log. | Debug | N | N |
| 504 | Event ID 504 | Operational | N | N |
| 505 | An attestation log item was too short to be valid (uint bytes). | Debug | N | N |
| 505 | Event ID 505 | Operational | N | N |
| 506 | The authoritative event log was deemed invalid. | Debug | N | N |
| 506 | Event ID 506 | Operational | N | N |
| 507 | The authoritative event log is missing an event. | Debug | N | N |
| 507 | Event ID 507 | Operational | N | N |
| 508 | The attestation log is missing an event. | Debug | N | N |
| 508 | Event ID 508 | Operational | N | N |
| 509 | The data in the attestation event is incorrect. | Debug | N | N |
| 509 | Event ID 509 | Operational | N | N |
| 510 | The attestation log is invalid. | Debug | N | N |
| 510 | Event ID 510 | Operational | N | N |
| 511 | An unexpected attestation event was encountered. | Debug | N | N |
| 511 | Event ID 511 | Operational | N | N |
| 512 | The attestation log contained an event which was incorrect. | Debug | N | N |
| 512 | Event ID 512 | Operational | N | N |
| 513 | The attestation event log contains an unknown event. | Debug | N | N |
| 513 | Event ID 513 | Operational | N | N |
| 514 | An attestation event log item is corrupt. | Debug | N | N |
| 514 | Event ID 514 | Operational | N | N |
| 515 | The name of the attestation event log item is Name. | Debug | N | N |
| 515 | Event ID 515 | Operational | N | N |
| 516 | The attestation event log item name has no name information. | Debug | N | N |
| 516 | Event ID 516 | Operational | N | N |
| 517 | The attestation event log item WCBL payload appears corrupt. | Debug | N | N |
| 517 | Event ID 517 | Operational | N | N |
| 518 | PCR Index: PCRIndex, Zero-based order relative to PCR: RelativeOrderToPCR, … | Debug | N | N |
| 518 | Event ID 518 | Operational | N | N |
| 519 | The event data is too short or otherwise corrupt and does not contain a TrEE … | Debug | N | N |
| 519 | Event ID 519 | Operational | N | N |
| 520 | TrEE authoritative variable data payload found. | Debug | N | N |
| 520 | Event ID 520 | Operational | N | N |
| 521 | TrEE attestation variable data payload found. | Debug | N | N |
| 521 | Event ID 521 | Operational | N | N |
| 522 | The process of converting an existing VM has started. | Debug | N | N |
| 522 | Event ID 522 | Operational | N | N |
| 523 | A call has failed during the conversion process. | Debug | N | N |
| 523 | Event ID 523 | Operational | N | N |
| 524 | The temporary VM will be named Name. | Debug | N | N |
| 524 | Event ID 524 | Operational | N | N |
| 525 | The original VM's boot disk is at Name. | Debug | N | N |
| 525 | Event ID 525 | Operational | N | N |
| 526 | The temporary VM has been created with identifier Name. | Debug | N | N |
| 526 | Event ID 526 | Operational | N | N |
| 527 | The disk at Name has been added to the temporary VM. | Debug | N | N |
| 527 | Event ID 527 | Operational | N | N |
| 528 | A KVP value has been retrieved from the temporary VM: Name / Value. | Debug | N | N |
| 528 | Event ID 528 | Operational | N | N |
| 529 | The target UEFI db variable does not match the expected value and adoption is … | Operational | N | N |
| 530 | The target UEFI dbx variable does not match the expected value and adoption is … | Operational | N | N |
| 531 | Provisioning is unable to verify the Provisioning Agent stack version in the … | Operational | N | N |
| 532 | The grandfathering utility disk and the boot disk of the original VM appear to … | Debug | N | N |
| 532 | Event ID 532 | Operational | N | N |
| 533 | The VM boot disk is not a differencing disk. | Debug | N | N |
| 533 | Event ID 533 | Operational | N | N |