Skip to content

Device encryption event types

These are the event types related to device encryption you can see in Sophos Central.

Note

For most device encryption alerts, you should restart the computer and let it sync with the server.

Event type Severity Action required? Description
Key creation failed Medium See Note A key could not be created (TPM key, TPM+PIN key, USB key, recovery key).
Device Encryption failed Medium See Note A volume could not be encrypted.
Device Encryption information Low See Note Information on various events, for example the user postponed encryption or a PIN/passphrase was reset.
Device not encrypted Medium See Note See Alerts for Device Encryption.
Device Encryption status changed Low See Note The Device Encryption status changed from one status to another status. See Computers.
Device Encryption is suspended Medium See Note See Alerts for Device Encryption.
Recovery key missing Medium See Note See Alerts for Device Encryption.
Received recovery keys Low See Note Sophos Central received a recovery key from an endpoint computer.
Revoked keys Low See Note A recovery key has been viewed in Sophos Central, so it has been revoked and will be replaced.