Home
  •  

Attestation Replicated Store Availability

Microsoft.Windows.GuardedFabric.10.0.Attestation.ReplicatedStore.Availability (UnitMonitor)

Monitors the event logs to check if the Attestation Service can read from its replicated store.

Knowledge Base article:

Summary

A unit monitor for the Remote Attestation Service.

Causes

The Attestation Service throws an error when attempting to access its replicated store.

Resolutions

Check the status of the cluster node. This monitor auto-resolves when it updates its configuration without error.

Element properties:

TargetMicrosoft.Windows.GuardedFabric.10.0.ComputerRole.HgsServer
Parent MonitorSystem.Health.PerformanceState
CategoryAvailabilityHealth
EnabledTrue
Alert GenerateTrue
Alert SeverityMatchMonitorHealth
Alert PriorityNormal
Alert Auto ResolveTrue
Monitor TypeMicrosoft.Windows.2SingleEventLog2StateMonitorType
RemotableTrue
AccessibilityPublic
Alert Message
Attestation Replicated Store Read Error
The Attestation Service cannot access its replicated store. This HGS Server will not be able to perform remote attestation until it can access its store.
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.Windows.GuardedFabric.10.0.Attestation.ReplicatedStore.Availability" Accessibility="Public" Enabled="true" Target="HGSDL!Microsoft.Windows.GuardedFabric.10.0.ComputerRole.HgsServer" ParentMonitorID="Health!System.Health.PerformanceState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.2SingleEventLog2StateMonitorType" ConfirmDelivery="false">

  <Category>AvailabilityHealth</Category>

  <AlertSettings AlertMessage="Microsoft.Windows.GuardedFabric.10.0.Attestation.ReplicatedStore.Availability.AlertMessage">

    <AlertOnState>Error</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>MatchMonitorHealth</AlertSeverity>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="FirstEventRaised" MonitorTypeStateID="FirstEventRaised" HealthState="Error"/>

    <OperationalState ID="SecondEventRaised" MonitorTypeStateID="SecondEventRaised" HealthState="Success"/>

  </OperationalStates>

  <Configuration>

    <FirstComputerName>$Target/Host/Property[Type="HGSCL!Microsoft.Windows.GuardedFabric.Library.ComputerRole"]/ComputerName$</FirstComputerName>

    <FirstLogName>Microsoft-Windows-HostGuardianService-Attestation/Admin</FirstLogName>

    <FirstExpression>

      <SimpleExpression>

        <ValueExpression>

          <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

        </ValueExpression>

        <Operator>Equal</Operator>

        <ValueExpression>

          <Value Type="UnsignedInteger">1528</Value>

        </ValueExpression>

      </SimpleExpression>

    </FirstExpression>

    <SecondComputerName>$Target/Host/Property[Type="HGSCL!Microsoft.Windows.GuardedFabric.Library.ComputerRole"]/ComputerName$</SecondComputerName>

    <SecondLogName>Microsoft-Windows-HostGuardianService-Attestation/Operational</SecondLogName>

    <SecondExpression>

      <Or>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">1518</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">1519</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">1527</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </Or>

    </SecondExpression>

  </Configuration>

</UnitMonitor>