The maximum number of secrets that may be stored in a single system has been exceeded.

Details
Product: Windows Operating System
Event ID: 1381
Source: Security
Version: 5.0
Component: System Resources
Symbolic Name: ERROR_TOO_MANY_SECRETS
Message: The maximum number of secrets that may be stored in a single system has been exceeded.
   
Explanation

A secret is an encrypted piece of information, such as a password or user name.

   
User Action

Contact the supplier of the running application.

Related:

Unprotection of auditable protected data. Data Description: %2 Key Identifier: %1 Protected Data Flags: %3 Protection Algorithms: %4 Failure Reason: %5

Details
Product: Windows Operating System
Event ID: 599
Source: Security
Version: 5.0
Symbolic Name: SE_AUDITID_DPAPI_UNPROTECT
Message: Unprotection of auditable protected data. Data Description: %2 Key Identifier: %1 Protected Data Flags: %3 Protection Algorithms: %4 Failure Reason: %5
   
Explanation

A program used the CryptUnprotectData function to read data encrypted by Data Protection API (DPAPI). The name of the encrypted data is provided in the event message, but because this name is determined by the program that originally created the encrypted data, it might not be recognizable. This event is logged for informational purposes only.

The description field in the message typically, but not always, displays one of the following:

Enterprise Credential Set

This is a set of credentials, stored by Credential Manager in the user’s profile, that can roam with the profile.

Local Credential Set

This is a set of credentials, stored by Credential Manager in the user’s profile, that cannot roam with the profile.

   
User Action

No user action is required.

Related:

Unprotection of auditable protected data. Data Description: %2 Key Identifier: %1 Protected Data Flags: %3 Protection Algorithms: %4 Failure Reason: %5

Details
Product: Windows Operating System
Event ID: 599
Source: Security
Version: 5.2
Symbolic Name: SE_AUDITID_DPAPI_UNPROTECT
Message: Unprotection of auditable protected data.

Data Description: %2
Key Identifier: %1
Protected Data Flags: %3
Protection Algorithms: %4
Failure Reason: %5

   
Explanation

A program used the CryptUnprotectData function to read data encrypted by Data Protection API (DPAPI). The name of the encrypted data is provided in the event message, but because this name is determined by the program that originally created the encrypted data, it might not be recognizable. This event is logged for informational purposes only.

The description field in the message typically, but not always, displays one of the following:

Enterprise Credential Set

This is a set of credentials, stored by Credential Manager in the user’s profile, that can roam with the profile.

Local Credential Set

This is a set of credentials, stored by Credential Manager in the user’s profile, that cannot roam with the profile.

   
User Action

No user action is required.

Related:

Recovery of data protection master key. Key Identifier: %1 Recovery Reason: %3 Recovery Server: %2 Recovery Key ID: %4 Failure Reason: %5

Details
Product: Windows Operating System
Event ID: 597
Source: Security
Version: 5.2
Symbolic Name: SE_AUDITID_DPAPI_RECOVERY
Message: Recovery of data protection master key.

Key Identifier: %1
Recovery Reason: %3
Recovery Server: %2
Recovery Key ID: %4
Failure Reason: %5

   
Explanation

A key that is used by the Data Protection application programming interface (DPAPI) is being recovered. Because the DPAPI keys are backed up on Active Directory, the computer can automatically recover a key when necessary. This message is logged for informational purposes only. It usually follows a Security 596 message, which indicates that the DPAPI key was backed up. There may be a period of days or weeks between the messages.

   
User Action

No user action is required.

Related:

Backup of data protection master key. Key Identifier: %1 Recovery Server: %2 Recovery Key ID: %3 Failure Reason: %4

Details
Product: Windows Operating System
Event ID: 596
Source: Security
Version: 5.2
Symbolic Name: SE_AUDITID_DPAPI_BACKUP
Message: Backup of data protection master key.

Key Identifier: %1
Recovery Server: %2
Recovery Key ID: %3
Failure Reason: %4

   
Explanation

The operating system performed a normal backup of the Data Protection application programming interface (DPAPI) master key.

If this computer is a member of a Windows NT 4.0 domain, this message might contain failure information because Windows NT 4.0 domains do not support DPAPI keys storage.

   
User Action

No user action is required.

Related: