Recovery of data protection master key. Key Identifier: %1 Recovery Reason: %3 Recovery Server: %2 Recovery Key ID: %4 Failure Reason: %5

Details
Product: Windows Operating System
Event ID: 597
Source: Security
Version: 5.2
Symbolic Name: SE_AUDITID_DPAPI_RECOVERY
Message: Recovery of data protection master key.

Key Identifier: %1
Recovery Reason: %3
Recovery Server: %2
Recovery Key ID: %4
Failure Reason: %5

   
Explanation

A key that is used by the Data Protection application programming interface (DPAPI) is being recovered. Because the DPAPI keys are backed up on Active Directory, the computer can automatically recover a key when necessary. This message is logged for informational purposes only. It usually follows a Security 596 message, which indicates that the DPAPI key was backed up. There may be a period of days or weeks between the messages.

   
User Action

No user action is required.

Related:

Leave a Reply