Part 8 : SCOM 2012 R2 HealthService Event Reference / SecureStorageManager

SecureStorageManager

EventID=7000
Severity=Error Message=The Health Service could not log on the RunAs account %1\%2 for management group %5 The error is %3(%4) This will prevent the health service from monitoring or performing actions using this RunAs account

EventID=7001
Severity=Warning Message=The password for RunAs account %1\%2 for management group %5 is expiring on %3 If the password is not updated by then, the health service will not be able to monitor or perform actions using this RunAs account There are %4 days left before expiration

EventID=7002
Severity=Error Message=The Health Service could not log on the RunAs account %1\%2 for management group %3 because it has not been granted the “%4” right

EventID=7004
Severity=Warning Message=The Health Service received a secure message from management group %1 which was encrypted using the wrong public key This message has been discarded and the public key will be re-published

EventID=7005
Severity=Error Message=The Health Service was unable to publish its public key to management group %1 and will be unable to receive secure messages until this key is published Attempts to publish the key will continue

EventID=7006
Severity=Success Message=The Health Service has published the public key [%2] used to send it secure messages to management group %1 This message only indicates that the key is scheduled for delivery, not that delivery has been confirmed

EventID=7007
Severity=Warning Message=The Health Service has defaulted to using the action account for RunAs Profile %1 because it did not receive any information about this RunAs Profile Depending on your configuration monitoring may not be able to proceed for modules which depend on this RunAs Profile

EventID=7008
Severity=Warning Message=The Health Service has defaulted to using the action account for RunAs Profile Id %1 requested by Rule %2 because it did not receive any information about this RunAs Profile Depending on your configuration, monitoring may not be able to proceed for modules which depend on this RunAs Profile Other rules may be affected and this event will not continue to be published for each failing rule

EventID=7009
Severity=Error Message=The Health Service cannot find the credential for the action account for management group %1 Monitoring will be significantly impacted

EventID=7010
Severity=Warning Message=The Health Service has downloaded new configuration for management group %1, and that configuration has specified a new action account, but the account is not of type ‘Action Account’ or ‘Windows Credential’ This change has been ignored as it would significantly impact monitoring Please fix the Action Account RunAs Profile to be an Action Account or Windows Credential

EventID=7011
Severity=Warning Message=The Health Service has downloaded a new account in management group %1, but the password is blank The Health Service does not support managing Windows credentials with blank passwords The account has not been updated If this account existed previously, it’s old password will be used and logon may fail If this is a new account, the action account will be used instead The name of the account has been withheld for security purposes

EventID=7012
Severity=Warning Message=The health service received a credential from management group %1 to run a task with, but the credential has a blank password and has been rejected for security purposes The account name has been withheld, also for security purposes

EventID=7013
Severity=Warning Message=The keypair that the health service uses to receive secure messages is expiring on %1 The health service will be recycled and the key regenerated

EventID=7014
Severity=Warning Message=The RunAs account %1\%2 for management group %5 is expiring on %3 If the account expiration is not extended by then, the health service will not be able to monitor or perform actions using this RunAs account There are %4 days left

EventID=7015
Severity=Error Message=The Health Service cannot verify the future validity of the RunAs account %1\%2 for management group %5 The error is %3(%4)

EventID=7016
Severity=Error Message=The Health Service cannot verify the future validity of the RunAs account %1\%2 for management group %5 due to an error retrieving information from Active Directory (for Domain Accounts) or the local security authority (for Local Accounts) The error is %3(%4)

EventID=7017
Severity=Warning Message=The health service blocked access to the windows credential %1\%2 because it is not authorized on management group %3 You can run the HSLockdown tool to change which credentials are authorized

EventID=7018
Severity=Error Message=The health service blocked access to the non-windows credential with ID %2 because it is not authorized on management group %2 You can run the HSLockdown tool to change which credentials are authorized

EventID=7019
Severity=Success Message=The Health Service has validated all RunAs accounts for management group %1

EventID=7020
Severity=Warning Message=The Health Service has validated all RunAs accounts for management group %1, except those we could not monitor

EventID=7021
Severity=Error Message=The Health Service was unable to validate any user accounts in management group %1

EventID=7022
Severity=Error Message=The Health Service has downloaded secure configuration for management group %1, and processing the configuration failed with error code %2(%3)

EventID=7023 Severity=Success Message=The Health Service has downloaded secure configuration for management group %1 successfully

EventID=7024
Severity=Success Message=The Health Service successfully logged on all accounts for management group %1

EventID=7025
Severity=Success Message=The Health Service has authorized all configured RunAs accounts to execute for management group %1

EventID=7026
Severity=Success Message=The Health Service successfully logged on the RunAs account %1\%2 for management group %3

EventID=7027
Severity=Success Message=The Health Service authorized the RunAs account %1\%2 to execute for management group %3

EventID=7028
Severity=Success Message=All RunAs accounts for management group %1 have the correct logon type EventID=7029 Severity=Error Message=The Health Service was detected that the private key for secure data processing has been removed or is invalid The certificate and key will be regenerated

Source : Part 8 : SCOM 2012 R2 HealthService Event Reference / SecureStorageManager

Cengiz KUSKAYA