HP LaserJet Enterprise, HP PageWide Enterprise - HP Security Event Logging Messaging Reference (white paper)

Chapter 2 – Enhanced security event logging 14
• AP
• STA
Message:
<device type>: SNMPv3 authentication exited protected mode; time="<timestamp>"
SNMPv3_user_account="<user account>" outcome=success interface=<interface>
Interface(s):
SNMPv3
Syslog severity:
Warning
Explanation:
An SNMPv3 user account was unlocked.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<user account> - SNMPv3 user account that was unlocked.
<interface> - Networking interface on the local device. Possible values are:
• Wired
• AP
• STA
HP SureStart
Message:
<device type>: Boot code corrupt; time="<timestamp>" source_IP="<local device IP address>"
Interface(s):
N/A
Syslog severity:
Alert
Explanation:
The device detected and recovered from a corrupted/tampered version of BIOS.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<local device IP address> - IP address of the local device.
Message:
<device type>: Upgrade corrupt; time="<timestamp>" source_IP="<local device IP address>"
Interface(s):
N/A
Syslog severity:
Alert
Explanation:
Cryptographic validation of newly downloaded firmware failed.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<local device IP address> - IP address of the local device.
Message:
<device type>: Invalid boot attempt; time="<timestamp>" source_IP="<local device IP address>"
<device type>: Downgrade attempted; time="<timestamp>" source_IP="<local device IP address>"
Interface(s):
N/A
Syslog severity:
Alert
Explanation:
A downgrade to firmware that doesn’t contain the SureStart feature was attempted.
The two messages above are generated when a downgrade to firmware that doesn’t contain the
SureStart feature was attempted.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.