Pricing  Get Quote
 
 
 
Home Event ID Library
Event ID 5061

Windows Event ID 5061 - Cryptographic operation.

Description

This event is generated when a cryptographic operation (open key, create key, create key, and so on) was performed using a Key Storage Provider (KSP). This event is generated only if one of the following KSPs were used:

  • Microsoft Software Key Storage Provider
  • Microsoft Smart Card Key Storage Provider
Category System
Subcategory System integrity

The event logs the following information:

Subject
  • Security ID
  • Account Name
  • Account Domain
  • Logon ID
Cryptographic parameters
  • Provider name
  • Algorithm name
  • Key name
  • Key type
Additional information
  • Operation
  • Return code

Reasons to monitor event:

  • Typically this event is required for detailed monitoring of KSP-related actions with cryptographic keys.
  • If you need to monitor actions related to specific cryptographic keys (“Key Name”) or a specific “Operation”, such as “Delete key file”, you can create monitoring rules and use this event as an information source.

Event 5061 applies to the following operating systems:

  • Windows Server 2008 R2 and 7
  • Windows Server 2012 R2 and 8.1
  • Windows Server 2016 and 10

Uncover Event ID 5061 cryptographic operation failures and safeguard system integrity with ADAudit Plus.

Download Now

Meet all auditing and IT security needs with ADAudit Plus.

  • Active Directory
  • File servers
  • Windows Server
  • Workstation
  • Compliance
  • Related Products

A single pane of glass for complete Active Directory Auditing and Reporting

Free Trial Get Quote