Device encryption event types

These are the event types related to device encryption you can see in Sophos Central.

Note For most device encryption alerts, you should restart the computer and let it sync with the server.


Event type	Severity	Action required?	Description
Key creation failed	Medium	See Note	A key could not be created (TPM key, TPM+PIN key, USB key, recovery key).
Device Encryption failed	Medium	See Note	A volume could not be encrypted.
Device Encryption information	Low	See Note	Information on various events, for example the user postponed encryption or a PIN/passphrase was reset.
Device not encrypted	Medium	See Note	See Alerts for Device Encryption.
Device Encryption status changed	Low	See Note	The Device Encryption status changed from one status to another status. See Computers.
Device Encryption is suspended	Medium	See Note	See Alerts for Device Encryption.
Recovery key missing	Medium	See Note	See Alerts for Device Encryption.
Received recovery keys	Low	See Note	Sophos Central received a recovery key from an endpoint computer.
Revoked keys	Low	See Note	A recovery key has been viewed in Sophos Central, so it has been revoked and will be replaced.