iDRAC10 Security Configuration Guide

PDF

Security Events Lifecycle Log

Security Events are logged in the Lifecycle Log for access-related security events such as new user creation, user password/privilege modification, successful or failed login attempts so on Security events are also logged for encryption-related events on storage such as cryptographic erase, secure key encryption/decryption so on.

Table 1. Security Event DescriptionsThe following table describes the security events:
Message ID	Detailed Description	Recommended Response Action
CTL136	A key exchange is required for the controller identified in the message.	No response action is required.
PDR118	The drive identified in the message is successfully unlocked.	No response action is required.
PDR208	The Cryptographic Erase operation is successfully completed on the physical disk drive that is identified in the message.	No response action is required.
PDR84	The Security key on a secure encrypted disk was activated.	No response action is required.
PDR85	Errors were detected with security-related operations on the disk. The data on the disk might not be retrieved or stored successfully. In addition, the security of the stored data might be at risk.	Verify that the disk is a Secure Encrypted Disk and is not locked. If it is not, replace the disk with a Secure Encrypted Disk. See the storage hardware documentation for more information.
CTL98	The security key provided as input has been assigned to the controller identified in the message.	No response action is required.
CTL131	The Key exchange process for the controller identified in the message is successfully completed.	No response action is required.
CTL81	The security key assigned to the controller identified in the message is modified.	No response action is required.
CTL132	The security key for the controller in the message cannot be changed.	Unable to change the security key for the <controller name>.
CTL117	The operation cannot be completed because an invalid passphrase is passed for the controller identified in the message.	Enter a valid passphrase and retry the operation.
CTL99	The security key assigned to the controller identified in the message is deleted.	No response action is required.
CTL117	The operation cannot be completed because an invalid passphrase is passed for the controller identified in the message.	Enter a valid passphrase and retry the operation.
CTL133	The security key for the controller identified in the message is successfully changed.	No response action is required.
CTL134	The controller identified in the message is in the Secure Enterprise Key Manager mode.	No response action is required.
CTL135	The Key exchange process for the controller identified in the message failed.	Ensure of the following and retry the operation: The iDRAC can communicate to the Key Management Server. The device for which the key is generated is online and responding. The device for which the key exchange is required is in the same Key Management Server Domain.
PDR97	The controller detected drives that require security keys for access. Without providing security keys, the drives are unusable.	Provide the security key required to unlock the secure encrypted drives.
VDR104	The secure virtual disk operation was successful on the security capable virtual disk that is identified in the message. A security capable virtual disk is created using only Self-Encrypting Drives (SED).	No response action is required.
VDR130	The virtual drive identified in the message is partially secured.	No response action is required.
VDR59	This alert message occurs if virtual disk security has failed.	This alert message occurs if virtual disk security has failed. No response action is required.
PDR41	The clear command did not complete on the physical disk. This means that some data was not cleared and may be recoverable.	No response action is required.
PDR217	The cryptographic erase operation cannot be completed on the physical disk drive identified in the message.	No response action is required.
PDR38	A user has initiated a clear operation on a physical disk.	No response action is required.
PDR208	The Cryptographic Erase operation is successfully completed on the physical disk drive identified in the message.	No response action is required.
PDR82	Security on a secure encrypted disk was activated.	No response action is required.
PDR96	Security on a secure encrypted disk was disabled.	No response action is required.
USR0030	Successfully logged in using <username>, from <IP address> and <interface name>.	No response action is required.
USR0031	Unable to log in for <username> from <IP address> using <interface name>.	Ensure that the login credentials are valid and retry the operation.
USR0032	The session for <username> from <IP address> using <interface name> is logged off.	No response action is required.
USR0034	Login attempt alert for <username> from <IP Address> using <interface name>, IP is blocked for <seconds> seconds.	The account identified in the message is temporarily disabled because of consecutive unsuccessful Login attempts to iDRAC from the IP address identified in the message.
RAC1195	User requested state or configuration change using specified interface.	No response action is required.
SWC1910	User ID Name has been changed.	No response action is required.
SWC1911	User ID Password has been changed.	No response action is required.
SWC1912	User ID Access Right has been changed.	No response action is required.
SEL0014	The System Event Log (SEL) was cleared by the username identified in the message from the IP address identified in the message.	No response action is required.