Device encryption event types
These are the event types related to device encryption you can see in Sophos Central.
For most device encryption alerts, you should restart the computer and let it sync with the server.
|Event type||Severity||Action required?||Description|
|Key creation failed||Medium||See Note||A key could not be created (TPM key, TPM+PIN key, USB key, recovery key).|
|Device Encryption failed||Medium||See Note||A volume could not be encrypted.|
|Device Encryption information||Low||See Note||Information on various events, for example the user postponed encryption or a PIN/passphrase was reset.|
|Device not encrypted||Medium||See Note||See Alerts for Device Encryption.|
|Device Encryption status changed||Low||See Note||The Device Encryption status changed from one status to another status. See Computers.|
|Device Encryption is suspended||Medium||See Note||See Alerts for Device Encryption.|
|Recovery key missing||Medium||See Note||See Alerts for Device Encryption.|
|Received recovery keys||Low||See Note||Sophos Central received a recovery key from an endpoint computer.|
|Revoked keys||Low||See Note||A recovery key has been viewed in Sophos Central, so it has been revoked and will be replaced.|