TPM Daemon Events

https://arubanetworking.hpe.com/techdocs/AOS-CX/10.16/PDF/elmrg.pdf

TPM Daemon Events

Base Rule

Daemon Information

Information

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Event ID

<vmid>

Number

Event ID 13601, 13602, 13603, 13604

Severity

<severity>

Text/String

For All: Error
For 13601: Information

Message

<subject>
<process>

Text/String

Event ID 13601:
Indicates a TPM_Sign operation was successfully executed

<subject>
<process>

Text/String

Event ID 13602:
Indicates a TPM_Sign operation failed

<subject>

Text/String

Event ID 14603:
Indicates a TPM selftest error occurred on the current boot

<subject>

Text/String

Event ID 14604:
Indicates the system was rebooted some number of time to recovery from a TPM self test error