Device encryption event types

These are the event types related to device encryption you can see in Sophos Central.

Note For most device encryption alerts, you should restart the computer and let it sync with the server.

Event type

Severity

Action required?

Description

Key creation failed

Medium

See Note

A key could not be created (TPM key, TPM+PIN key, USB key, recovery key).

Device Encryption failed

Medium

See Note

A volume could not be encrypted.

Device Encryption information

Low

See Note

Information on various events, for example the user postponed encryption or a PIN/passphrase was reset.

Device not encrypted

Medium

See Note

See Alerts for Device Encryption.

Device Encryption status changed

Low

See Note

The Device Encryption status changed from one status to another status. See Computers.

Device Encryption is suspended

Medium

See Note

See Alerts for Device Encryption.

Recovery key missing

Medium

See Note

See Alerts for Device Encryption.

Received recovery keys

Low

See Note

Sophos Central received a recovery key from an endpoint computer.

Revoked keys

Low

See Note

A recovery key has been viewed in Sophos Central, so it has been revoked and will be replaced.