Back to top
Home / Knox Manage / Appendix / List of audit events /

Server audit events

Last updated March 25th, 2024

This page lists event categories and audit events available for the Knox Manage server. The tables provide the audit events grouped under each event category, such as AD/LDAP Sync, Administrator, Android Enterprise, and so on.

AD/LDAP Sync

Event ID Event name
CSYN0039 Start external sync operation
CSYN0040 Stop external sync operation
CSYN0041 Automatically send profile to target users after synchronization ends
CSYN0042 Request managed apps mapping action to target users after synchronization ends
CSYN0043 Groups added via synchronization
CSYN0044 Groups deleted via synchronization
CSYN0045 Groups modified via synchronization
CSYN0046 Group sync overridden by the Settings
CSYN0047 Invalid group sync attempt
CSYN0079 Register automatic synchronization schedule
CSYN0080 Unschedule automatic synchronization
CUSR0020 Add User By Sync
CUSR0021 Modify User By Sync
CUSR0022 Delete User By Sync
CUSR0024 Error Occurred While Synching User
CUSR0025 Add Organization By Sync
CUSR0026 Modify Organization By Sync
CUSR0027 Delete Organization By Sync
CUSR0029 Error Occurred While Synching Organization
CUSR0030 Initialize Sync Process
CUSR0031 Finish Sync

Administrator

Event ID Event name
CCON0073 Delete the export files that have elapsed the retention period

Android Enterprise

Event ID Event name
CDEV0044 Failed to request the authentication token for Android Enterprise device enrollment
CDEV0045 Failed to update Google Device Id (Google → Device)

Android Management API

Event ID Event name
CDEV0101 Load User Assignment Data for AMAPI Device Management
CDEV0102 Insert User Assignment Data for AMAPI Device Management
CDEV0103 Update User Assignment Data for AMAPI Device Management
CDEV0104 Assign Users for AMAPI Device Management

Application

Event ID Event name
CAPP0044 Modify App Status Due To App Service Expiration Date
CAPP0088 Failed to import the app information from the multiple apps
CAPP0101 Request the Uninstall App device command in a group or organization
CAPP0103 Request to transfer App Install Device Command to assigned device
CAPP0105 App Deployment Scheduler
CAPP0106 Start App Deployment Scheduler
CAPP0107 End App Deployment Scheduler
CAPP0108 Start to Generate Google Play Store iframe token for Chrome OS
CAPP0109 Request Google API to Generate Google Play Store iframe token for Chrome OS
CAPP0110 Complete to Generate Google Play Store iframe token for Chrome OS
CAPP0118 Complete to Approve App Permissions for Chrome OS
CAPP0119 Start to Retrieve Schema of Configurable Properties for Chrome OS
CAPP0120 Request Google API to Retrieve Schema of Configurable Properties for Chrome OS
CAPP0121 Complete to Retrieve Schema of Configurable Properties for Chrome OS
CAPP0122 Start to Retrieve Managed Google Play App for Chrome OS
CAPP0123 Request Google API to Retrieve Managed Google Play App for Chrome OS
CAPP0124 Complete to Retrieve Managed Google Play App for Chrome OS
CAPP0125 Start to Retrieve App Details for Chrome OS
CAPP0126 Request Google API to Retrieve App Details for Chrome OS
CAPP0127 Complete to Retrieve App Details for Chrome OS
CAPP0128 Start to Get List of Assigned App by Organization for Chrome OS
CAPP0129 Request Google API to Get List of Assigned App by Organization for Chrome OS
CAPP0130 Complete to Get List of Assigned App by Organization for Chrome OS
CAPP0131 Start to Get List of App Settings Schema
CAPP0132 Request Google API to Get List of App Settings Schema
CAPP0133 Complete to Get List of App Settings Schema
CAPP0134 Start Syncing App Feedback (EMM API)
CAPP0135 Start Syncing App Feedback (AMAPI)
CAPP0136 Update App Feedback
CAPP0137 Start Retrieving List of Kiosk Apps Assigned by Organization (for Chrome OS)
CAPP0138 Finish Retrieving List of Kiosk Apps Assigned by Organization (for Chrome OS)
CAPP0139 Start Retrieving List of Kiosk App Settings Schema (for Chrome OS)
CAPP0140 Finish Retrieving List of Kiosk App Settings Schema (for Chrome OS)
CAPP0141 Start Getting the List of Assigned Managed Guest Session Apps by Organization for Chrome OS
CAPP0142 Finish Getting the List of Assigned Managed Guest Session Apps by Organization for Chrome OS
CAPP0143 Start Getting the List of Managed Guest Session App Settings Schema
CAPP0144 Finish Getting the List of Managed Guest Session App Settings Schema
CAPP0145 Start Getting the Detailed Information of Devices for Chrome OS
CAPP0146 Finish Getting the Detailed Information of Devices for Chrome OS

Automated Device Enrollment

Event ID Event name
CDEP0008 Start ADE Device Sync Scheduler
CDEP0009 End ADE Device Sync Scheduler
CDEP0010 ADE Device Sync (Server)
CDEP0014 Request ADE device information
CDEP0015 Response ADE device information
CDEP0020 Request Bulk Assigning Users (ADE)
CDEP0021 Load Bulk Assignment Data from Excel (ADE)
CDEP0022 Add Bulk Assignment Device Data (ADE)
CDEP0023 Edit Bulk Assignment Device Data (ADE)
CPRV0156 Request MDM Profile Creation
CPRV0157 Response to MDM Profile Creation

ChromeOS

Event ID Event name
CCON0082 Test Google API Connection (Chrome OS)
CCON0083 Google API Connection Test Results (Chrome OS)
CCON0084 Save the Google customer settings (Chrome OS)
CCON0085 Acquire the Access/Refresh tokens via Google API (Chrome OS)
CCON0086 Request the token (Chrome OS)
CCON0087 Create the credentials (Chrome OS)
CCON0088 The result of acquiring the Access/Refresh tokens (Chrome OS)
CCON0089 Google API to revoke the token and unregister with Google (Chrome OS)
CCON0090 The result of revoking the token and unregistering with Google (Chrome OS)
CCON0093 Complete to Bind Managed Google Play for Chrome OS
CCON0094 Start to Enroll Enterprise for Chrome OS
CCON0095 Request Google API to Enroll Enterprise for Chrome OS
CCON0096 Complete to Enroll Enterprise for Chrome OS
CCON0097 Start to Get ESA for Chrome OS
CCON0098 Request Google API to Get ESA for Chrome OS
CCON0099 Complete to Get ESA for Chrome OS
CCON0103 Start to Set Account to authenticate as the Enterprise for Chrome OS
CCON0104 Request Google API to Set Account to authenticate as the Enterprise for Chrome OS
CCON0105 Complete to Set Account to authenticate as the Enterprise for Chrome OS
CCON0107 Complete to Unbind Managed Google Play for Chrome OS
CCON0108 Start to Unenroll Enterprise for Chrome OS
CCON0109 Request Google API to Unenroll Enterprise for Chrome OS
CCON0110 Complete to Unenroll Enterprise for Chrome OS
CCON0131 Completed Chrome OS-Network setting creation 
CCON0133 Completed Chrome OS-network settings deletion
CCON0134 Collect Chrome OS Location
CCON0139 Save the Consents of the Chrome OS Users and Devices to PP 
CCON0140 Issue JWT for the KM Chrome Extension App
CCON0145 Geofencing Area Changed (out → in)
CCON0146 Geofencing Area Changed (in → out)
CCON0147 Report Geofencing Event

Compliance

Event ID Event name
CCMP0001 Report policy violation
CCMP0011 Start Keepalive Check
CCMP0012 Close Keepalive Check
CCMP0013 Handle Keepalive violations
CCMP0014 Check Point MTP Malware detection information
CCMP0015 Change to Disconnected state by Keepalive
CCMP0016 Run Keepalive task
CCMP0017 No Keepalive task or not configured
CCMP0018 Send email with the expected disconnection time of device(s) by Keepalive
CCMP0019 Verify the Signatures of the Log Files Sent from the Device
CDEV0010 Update Device Status (Disconnected)

Connector

Event ID Event name
CCNT0052 Delete Directory Connection Information

Content

Event ID Event name
CMCM0004 Request Content List
CMCM0005 Report Content Status

Device

Event ID Event name
CCMD0590 Duplicate Device Found
CCMD0609 Finish Issuing the Commands for Kiosk Devices (Screenshot Set Volume)
CCMD0610 Finish Getting the Detailed Information of Device Commands for Chrome OS
CDEV0047 Register a Device Token for Push
CDEV0097 Change License (Server)
CDEV0098 Update Device License (Server)
CDEV0099 Register Device License (Server)
CDEV0100 Deactivate device (Off-line)

Device Command

Event ID Event name
CCMD0001 Push Profile (Device Command Transfer)
CCMD0002 Push Profile (Device Command Transfer)
CCMD0003 Apply Latest Internal App Information (Device command transmit)
CCMD0004 Implement User-defined event - Activate (Device control transmit)
CCMD0005 Implement User-defined event - Deactivate (Device control transmit)
CCMD0006 Implement Gate event - Activate (Device command transmit)
CCMD0007 Implement Gate event - Deactivate (Device command transmit)
CCMD0008 Disable Exchange block - Activate (Device command transmit)
CCMD0009 Disable Exchange block - Deactivate (Device command transmit)
CCMD0010 Install app (Device command transmit)
CCMD0011 Implement app (Device command transmit)
CCMD0012 Close app (Device command transmit)
CCMD0013 Delete App Data (Device command transmit)
CCMD0014 Delete app (Device command transmit)
CCMD0015 Enable App Running (Device command transmit)
CCMD0016 Disable App Running (Device command transmit)
CCMD0017 Lock/Unlock the device - Lock (Device command transmit)
CCMD0018 Lock/Unlock the device - Unlock (Device command transmit)
CCMD0019 Clear Screen Lock (Device Command Transfer)
CCMD0020 Factory reset (Device command transmit)
CCMD0021 Power off the device (Device command transmit)
CCMD0022 Reboot Device (Device command transmit)
CCMD0023 Initialize external SD card (Device command transmit)
CCMD0024 Activate/Deactivate CC mode - Activate (Device control transmit)
CCMD0025 Activate/Deactivate CC mode - Deactivate (Device control transmit)
CCMD0026 Initialize information on blocking (Device command transmit)
CCMD0027 Deactivate service (Device command transmit)
CCMD0028 Collect Audit log -Agent (Device command transmit)
CCMD0029 Collect log -Agent (Device command transmit)
CCMD0030 Collect diagnosis information (Device command transmit)
CCMD0031 Update License (Device command transmit)
CCMD0032 Update Knox Manage Agent (Device command transmit)
CCMD0033 H/W status (Device command transmit)
CCMD0034 List of apps installed (Device command transmit)
CCMD0035 Location (Device command transmit)
CCMD0036 SIM verification (Device command transmit)
CCMD0037 Report the status (Device command transmit)
CCMD0038 Lock/Unlock container - Lock (Device command transmit)
CCMD0039 Lock/Unlock container - Unlock (Device command transmit)
CCMD0040 Reset Knox Workspace Password (Device command transmit)
CCMD0041 Delete container (Device command transmit)
CCMD0042 Install container app (Device command transmit)
CCMD0043 Run container app (Device command transmit)
CCMD0044 Close container app (Device command transmit)
CCMD0045 Delete container app data (Device command transmit)
CCMD0046 Delete container app (Device command transmit)
CCMD0047 Push Profile (Device Command Transfer)
CCMD0048 Push Profile:Client (Device Command Transfer)
CCMD0049 Check if a device has been rooted (Device command transmit)
CCMD0050 Unlock Knox Manage Agent (Device command transmit)
CCMD0051 Send a message (Device command transmit)
CCMD0052 Delete Account (Device command transmit)
CCMD0053 Lock EMM Client (Device command transmit)
CCMD0054 Collect Audit log - Client (Device command transmit)
CCMD0055 Collect log - Client (Device command transmit)
CCMD0056 Collect diagnosis information (Device command transmit)
CCMD0057 Update user information (Device command transmit)
CCMD0058 Update system app (Device command transmit)
CCMD0059 Location (Device command transmit)
CCMD0060 Apply security policy (Device command transmit)
CCMD0061 Apply security policy - Deactivate (Device command transmit)
CCMD0062 Transfer event information (Device command transmit)
CCMD0063 Install AndroidForWork app (Device command transmit)
CCMD0064 Delete Android For Work app (Device command transmit)
CCMD0065 Deactivate service (Device command transmit)
CCMD0066 Invite program (Device command transmit)
CCMD0067 Check if an app has been installed (Device command transmit)
CCMD0068 Activate event to time - Deactivate (Device command transmit)
CCMD0069 Activate event to time - Activate (Device command transmit)
CCMD0070 Notice of a fail to activate service (Device command transmit)
CCMD0071 Request to activate visitor policy request (Device command transmit)
CCMD0073 Agent Invalid protocol
CCMD0074 Agent Invalid request
CCMD0075 Agent Request to Push Profile (Device → Server)
CCMD0076 Agent Response to the Push Profile Request (Server → Device)
CCMD0077 Agent Request to enable/disable event (Device → Server)
CCMD0078 Agent Respond to the request to enable/disable event (Server → Device)
CCMD0079 Agent Request to block Exchange (Device → Server)
CCMD0080 Agent Respond to the request to block Exchange (Server → Device)
CCMD0081 Agent Request to disable blocking Exchange (Device → Server)
CCMD0082 Agent Respond to the request to disable blocking Exchange (Device → Server)
CCMD0083 Agent Request to install app (Device → Server)
CCMD0084 Agent Respond to the request to install app (Server → Device)
CCMD0085 Agent Request to run app (Device → Server)
CCMD0086 Agent Respond to the request to run app (Server → Device)
CCMD0087 Agent Request to close app (Device → Server)
CCMD0088 Agent Respond to the request to close app (Server → Device)
CCMD0089 Agent Request to delete app data (Device → Server)
CCMD0090 Agent Respond to the request to delete app data (Server → Device)
CCMD0091 Agent Request to delete app (Device → Server)
CCMD0092 Agent Respond to the request to delete app (Server → Device)
CCMD0093 Agent Request to allow running app (Device → Server)
CCMD0094 Agent Respond to the request to allow running app (Server → Device)
CCMD0095 Agent Request to disallow running app (Device → Server)
CCMD0096 Agent Respond to the request to disallow running app (Server → Device)
CCMD0097 Agent Request to lock screen (Device → Server)
CCMD0098 Agent Respond to the request to lock device (Server → Device)
CCMD0099 Agent Request to unlock device (Device → Server)
CCMD0100 Agent Respond to the request to unlock device (Server → Device)
CCMD0101 Agent Request to Clear Screen Lock (Device → Server)
CCMD0102 Agent Response to the Clear Screen Lock Request (Server → Device)
CCMD0103 Agent Request factory reset (Device → Server)
CCMD0104 Agent Respond to the request for factory reset (Server → Device)
CCMD0105 Agent Request to power off device (Device → Server)
CCMD0106 Agent Respond to the request to power off device (Server → Device)
CCMD0107 Agent Request to reboot device (Device → Server)
CCMD0108 Agent Respond to the request to reboot device ( Server → Device)
CCMD0109 Agent Request to initialize external SD card (Device → Server)
CCMD0110 Agent Respond to the request to initialize external SD card (Server → Device)
CCMD0115 Agent Request to collect device information (Device → Server)
CCMD0116 Agent Respond to the request to collect device information (Server → Device)
CCMD0117 Agent Request to update license (Device → Server)
CCMD0118 Agent Respond to the request to update license (Server → Device)
CCMD0119 Agent Request to update Knox Manage agent (Device → Server)
CCMD0120 Agent Respond to the request to update Knox Manage Agent (Server → Device)
CCMD0121 Agent Request for SIM verification ( Device → Server)
CCMD0122 Agent Respond to the request for SIM verification (Server → Device)
CCMD0123 Agent Request to lock container (Device → Server)
CCMD0124 Agent Respond to the request to lock container (Server → Device)
CCMD0125 Agent Request to unlock container (Device → Server)
CCMD0126 Agent Respond to the request to unlock container (Server → Device)
CCMD0127 Agent Request to reset Knox Workspace password (Device → Server)
CCMD0128 Agent Respond to the request to reset Knox Workspace password (Server → Device)
CCMD0129 Agent Request to delete container (Device → Server)
CCMD0130 Agent Respond to the request to delete container (Server → Device)
CCMD0131 Agent Request to install container app (Device → Server)
CCMD0132 Agent Respond to the request to install container app (Server → Device)
CCMD0133 Agent Request to run container app (Device → Server)
CCMD0134 Agent Respond to the request to run container app (Server → Device)
CCMD0135 Agent Request to close container app (Device → Server)
CCMD0136 Agent Respond to the request to close container app (Server → Device)
CCMD0137 Agent Request to delete container app data (Device → Server)
CCMD0138 Agent Respond to the request to delete container app data (Server → Device)
CCMD0139 Agent Request to delete container app (Device → Server)
CCMD0140 Agent Respond to the request to delete container app (Server → Device)
CCMD0141 Agent Request to report policy violation (Device → Server)
CCMD0142 Agent Respond to the request to report policy violation (Server → Device)
CCMD0143 Agent Request to reissue code to disable service (Device → Server)
CCMD0144 Agent Respond to the request to reissue code to disable service (Server → Device)
CCMD0145 Agent Request for Attestation Nonce (Device → Server)
CCMD0146 Agent Respond to the request for Attestation Nonce (Server → Device)
CCMD0147 Agent Request for Attestation verification (Device-> Server)
CCMD0148 Agent Respond to the request for Attestation verification (Server → Device)
CCMD0149 Agent Request for app information (Device → Server)
CCMD0150 Agent Respond to the request for app information (Server → Device)
CCMD0151 Agent Request to install Android for Work app (Device-> Server)
CCMD0152 Agent Respond to the request to install Android for Work app (Server-> Device)
CCMD0153 Agent Request to delete Android for Work app (Device-> Server)
CCMD0154 Agent Respond to the request to delete Android for Work app (Server-> Device)
CCMD0155 Agent Request to collect diagnosis information (Device → Server)
CCMD0156 Agent Respond to the request to collect diagnosis information (Server → Device)
CCMD0157 Agent Request for work report (Device → Server)
CCMD0158 Agent Respond to the request for work report (Server → Device)
CCMD0159 Agent Request for command (Device → Server)
CCMD0160 Agent Install profile (Server → Device)
CCMD0161 Agent Delete profile (Server → Device)
CCMD0162 Agent Search information on apps installed (Server → Device)
CCMD0163 Agent Search device information (Server → Device)
CCMD0164 Agent Search security information (Server → Device)
CCMD0165 Agent Device lock (Server → Device)
CCMD0166 Agent Reset password (Server → Device)
CCMD0167 Agent Factory reset (Server → Device)
CCMD0168 Agent Install app (Server → Device)
CCMD0169 Agent Information on apps installed through MDM
CCMD0170 Agent Delete app (Server → Device)
CCMD0171 Agent Set app properties (Server → Device)
CCMD0172 Agent Set the items included in app settings (Server → Device)
CCMD0173 Agent Information on Settings of apps installed through MDM (Server → Device)
CCMD0174 Agent Information on properties of apps installed through MDM (Server → Device)
CCMD0175 Agent Feedback on settings of apps installed through MDM (Server → Device)
CCMD0176 Agent Initialize information on blocking (Server → Device)
CCMD0177 Agent Report status (Server → Device)
CCMD0178 Agent Respond to the request to handle command (Device → Server)
CCMD0179 Client Perform Server Init logic (Device → Server)
CCMD0180 Client Request to Push Profile (Device → Server)
CCMD0181 Client Response to the Push Profile Request (Server → Device)
CCMD0182 Client Request for work report (Device → Server)
CCMD0183 Client Respond to the request for work report (Server → Device)
CCMD0184 Client Request to activate application of security policy (Device → Server)
CCMD0185 Client Respond to the request to activate application of security policy (Server → Device)
CCMD0186 Client Request to deactivate application of security policy (Device → Server)
CCMD0187 Client Respond to the request to deactivate application of security policy (Server → Device)
CCMD0188 Client Request to delete security policy profile (Device → Server)
CCMD0189 Client Respond to the request to delete security policy profile (Server → Device)
CCMD0190 Client Request to backup bookmarks (Device → Server)
CCMD0191 Client Respond to the request to backup bookmarks (Server → Device)
CCMD0192 Client Request to backup homepages (Device → Server)
CCMD0193 Client Respond to the request to backup homepages (Server → Device)
CCMD0194 Client Request to send Device command (EMM Agent) (Device -> Server)
CCMD0195 Client Respond to the request to send Device command (EMM Agent) (Server-> Device)
CCMD0197 Handle multiple devices by sending device command
CCMD0198 Insert command
CCMD0199 Select command
CCMD0200 Delete command
CCMD0201 Update command
CCMD0202 Delete commands left due to unenrollment command
CCMD0203 Duplicated Command
CCMD0204 Delete records of policy violation (Device → Server)
CCMD0205 Delete records of policy violation (Server → Device)
CCMD0206 Agent Request for command (Device → Server)
CCMD0207 Agent Request for command (Server → Device)
CCMD0208 Client Request for command (Device → Server)
CCMD0209 Client Request for command (Server → Device)
CCMD0210 Custom device command (Send device command)
CCMD0211 Request for command (Device → Server)
CCMD0212 Push Profile (Server → Device)
CCMD0213 Collect device information (Server → Device)
CCMD0214 Device lock (Server → Device)
CCMD0215 Factory reset (Server → Device)
CCMD0216 Custom device command (Server-> Device)
CCMD0217 Respond to the request to handle command (Device → Server)
CCMD0218 Start SyncML Session (Device → Server)
CCMD0219 Close SyncML Session (Server → Device)
CCMD0220 Register Push (WNS PFN) (Server → Device)
CCMD0221 Sync Device Information (Device command transmit)
CCMD0222 Collect H/W Status (Device command transmit)
CCMD0223 Collect app information (Device command transmit)
CCMD0224 Collect Current Location (Device command transmit)
CCMD0225 Collect audit information (Device command transmit)
CCMD0226 Collect log information (Device command transmit)
CCMD0227 Download content (Device command transmit)
CCMD0228 Update Enterprise Fota Firmware Version (Device command transmit)
CCMD0229 Agent Request to collect device and app information (Device → Server)
CCMD0230 Agent Respond to the request to collect device and app information (Server → Device)
CCMD0231 Agent Request to collect device information (Device → Server)
CCMD0232 Agent Respond to the request to collect device information (Server → Device)
CCMD0233 Agent Request to collect app information (Device → Server)
CCMD0234 Agent Respond to the request to collect app information (Server → Device)
CCMD0235 Agent Request to collect device and current location information (Device → Server)
CCMD0236 Agent Respond to the request to collect device and current location information (Server → Device)
CCMD0237 Agent Request to collect device and audit information (Device → Server)
CCMD0238 Agent Respond to the request to collect device and audit information (Server → Device)
CCMD0239 Agent Request to collect device and log information (Device → Server)
CCMD0240 Agent Respond to the request to collect device and log information (Server → Device)
CCMD0241 Agent Request to download content (Device → Server)
CCMD0242 Agent Respond to the request to download content (Server → Device)
CCMD0243 Agent Request to update enterprise fota firmware version (Device → Server)
CCMD0244 Agent Respond to the request to update enterprise fota firmware version (Server → Device)
CCMD0245 Deactivate MDM agent for synchronization between server and device
CCMD0246 Deactivate MDM agent for synchronization between server and device
CCMD0247 Flush command queue (Device command transmit)
CCMD0248 H/W status (Device command transmit)
CCMD0249 List of apps installed (Device command transmit)
CCMD0250 Push Profile (Device Command Transfer)
CCMD0251 Send an INI File (Device → Server)
CCMD0252 Get device status (Device → Server)
CCMD0253 Send an INI File (Server → Device)
CCMD0254 Get device status (Server → Device)
CCMD0255 Collect Audit log - Client (Device command transmit)
CCMD0256 Collect log - Client (Device command transmit)
CCMD0257 Location (Device command transmit)
CCMD0258 Check if a device has been rooted (Device command transmit)
CCMD0259 Agent status report (Server → Device)
CCMD0303 Request for property sync of app auto deletion when deactivating (Device → Server)
CCMD0304 Respond to property sync of app auto deletion when deactivating (Server → Device)
CCMD0305 Request for profile deletion (Device → Server)
CCMD0306 Respond to profile deletion (Server → Device)
CCMD0307 Synchronize property of app auto deletion when deactivating (Device Command)
CCMD0308 Request for custom control (Device → Server)
CCMD0309 Respond to custom control (Server → Device)
CCMD0310 Respond to Agent command (Server → Device)
CCMD0311 Request for external SD card authentication (Device → Server)
CCMD0312 Respond to external SD card authentication (Server → Device)
CCMD0313 Authenticate external SD card (Device Command)
CCMD0314 Uninstall Application (MTP) (Device → Server)
CCMD0315 Uninstall Application (MTP) (Server → Device)
CCMD0316 Uninstall Application (MTP) (Device command transmit)
CCMD0317 Activate-Exception Profile
CCMD0318 Deactivate-Exception Profile
CCMD0319 Update event time (Device command transmit)
CCMD0320 Device command transmission for each area in one device.
CCMD0321 Device command transmission for each area in multiple devices.
CCMD0345 CSM deactivate (Device command transmit)
CCMD0361 Succeeded to remove Geofencing event
CCMD0362 Client Request for policy summary (Device → Server)
CCMD0363 Client Respond for policy summary (Server → Device)
CCMD0364 Collect EMM Client information (Server → Device)
CCMD0365 Update Agent User information (Server → Device)
CCMD0368 Reset data usage (Device command transmit)
CCMD0369 Reset number of calls (Device command transmit)
CCMD0370 Agent Request to collect device and reset data usage (Device → Server)
CCMD0371 Agent Respond to the request to collect device and reset data usage (Server → Device)
CCMD0372 Agent Request to collect device and reset number of calls (Device → Server)
CCMD0373 Agent Respond to the request to collect device and reset number of calls (Server → Device)
CCMD0374 Mutiple devices distributed sending
CCMD0375 Failed to install apps (Server → Google)
CCMD0376 Request for Google managed app permission (Server → Google)
CCMD0377 Request for Management configuration of Google managed app (Server → Google)
CCMD0378 Request for Google managed app installation (Server → Google)
CCMD0379 Request for Google managed app uninstallation (Server → Google)
CCMD0380 Invite To Program (Response)
CCMD0381 Command queue retransmission is in progress.
CCMD0382 No target for command queue retransmission
CCMD0383 Command queue retransmission
CCMD0384 Command queue retransmission has started.
CCMD0385 Command queue retransmission is finished.
CCMD0386 Request for user authentication password reset (Device → Server)
CCMD0387 Response to user authentication password reset (Server → Device)
CCMD0388 Collect Profile ID (Device → Server)
CCMD0389 Collect Profile ID (Server → Device)
CCMD0390 Collect Profile ID (Send device control)
CCMD0393 Lock screen (Device command transmit)
CCMD0394 Attestation (Device command transmit)
CCMD0395 Certificate renewal (Device command transmit)
CCMD0396 Contents transfer
CCMD0397 Factory Reset (only) (Send Device Command)
CCMD0398 Agent Factory Reset (Only) request (Device → Server)
CCMD0399 Lock screen (Device → Server)
CCMD0400 Lock screen (Server → Device)
CCMD0401 Lock screen (Device command transmit)
CCMD0402 Play Integrity (SafetyNet Attestation) Nonce Request (Device → Server)
CCMD0403 Play Integrity (SafetyNet Attestation) Nonce Request (Server → Device)
CCMD0404 Play Integrity (SafetyNet Attestation) Nonce Request (Device command transfer)
CCMD0405 Play Integrity (SafetyNet Attestation) Verification Request (Device → Server)
CCMD0406 Play Integrity (SafetyNet Attestation) Verification Request (Server → Device)
CCMD0407 Play Integrity (SafetyNet Attestation) Verification Request (Device command transfer)
CCMD0408 Delete User Certificate (Device → Server)
CCMD0409 Delete User Certificate (Server → Device)
CCMD0410 Delete User Certificate (Device command transfer)
CCMD0411 Delete CA Certificate (Device → Server)
CCMD0412 Delete CA Certificate (Server → Device)
CCMD0413 Delete CA Certificate (Device command transfer)
CCMD0414 Delete CA Certificates for All Users (Device → Server)
CCMD0415 Delete CA Certificates for All Users (Server → Device)
CCMD0416 Delete CA Certificates for All Users (Device command transfer)
CCMD0417 Delete User Certificate for Work Profile (Device → Server)
CCMD0418 Delete User Certificate for Work Profile (Server → Device)
CCMD0419 Delete User Certificate for Work Profile (Device command transfer)
CCMD0420 Delete CA Certificate for Work Profile (Device → Server)
CCMD0421 Delete CA Certificate for Work Profile (Server → Device)
CCMD0422 Delete CA Certificate for Work Profile (Device command transfer)
CCMD0423 Delete All Users' CA Certificates for Work Profile (Device → Server)
CCMD0424 Delete All Users' CA Certificates for Work Profile (Server → Device)
CCMD0425 Delete All Users' CA Certificates for Work Profile (Device command transfer)
CCMD0426 Push token initialization
CCMD0427 Lock Screen (Device → Server)
CCMD0428 Lock Screen (Server → Device)
CCMD0430 Reset Push Token (Device → Server)
CCMD0431 Reset Push Token (Server → Device)
CCMD0433 Exit Kiosk Mode (Device → Server)
CCMD0434 Exit Kiosk Mode (Server → Device)
CCMD0435 Exit Kiosk Mode (Device Command Transfer)
CCMD0436 Change License (Device → Server)
CCMD0437 Change License (Server → Device)
CCMD0438 Change License (Device command transfer)
CCMD0439 Request Knox Service Plugin App feedback (Device → Server)
CCMD0440 Response Knox Service Plugin App feedback (Server → Device)
CCMD0444 Collect Bug Report (Device → Server)
CCMD0445 Collect Bug Report (Server → Device)
CCMD0446 Collect Bug Report (Device command transmit)
CCMD0447 External URL Application Installation (Device → Server)
CCMD0448 External URL Application Installation (Server → Device)
CCMD0449 External URL Application Installation (Device Command)
CCMD0451 Lock SIM Pin (Device → Server)
CCMD0452 Lock SIM Pin (Server → Device)
CCMD0453 Lock SIM Pin (Device command transfer)
CCMD0454 Unlock SIM Pin (Device → Server)
CCMD0455 Unlock SIM Pin (Server → Device)
CCMD0456 Unlock SIM Pin (Device command transfer)
CCMD0457 Update Exit Kiosk Code (Device → Server)
CCMD0458 Update Exit Kiosk Code (Server → Device)
CCMD0459 Update Exit Kiosk Code (Device Command Transfer)
CCMD0460 Reboot Device (Server → Device)
CCMD0461 Update Knox Manage Agent (Device → Server)
CCMD0462 Update Knox Manage Agent (Server → Device)
CCMD0463 Update Knox Manage Agent (Device command transfer)
CCMD0464 Attestation verification result is collected (server → Attestation server)
CCMD0465 Reboot Device (Device → Server)
CCMD0466 Switch to Fully Managed (Remove Work Profile) (Device → Server)
CCMD0467 Switch to Fully Managed (Remove Work Profile) (Server → Device)
CCMD0468 Switch to Fully Managed (Remove Work Profile) (Device command transfer)
CCMD0469 Device Status Change Result
CCMD0470 Agent Reboot Device (Server → Device)
CCMD0471 Agent Power off the device (Server → Device)
CCMD0472 OS Update (Device command transmit)
CCMD0473 Agent Enable Lost Mode (Server → Device)
CCMD0474 Enable Lost Mode (Device command transmit)
CCMD0475 Agent Disable Lost Mode (Server → Device)
CCMD0476 Disable Lost Mode (Device Control Transfer)
CCMD0477 Succeeded to add Geofencing event
CCMD0478 Scan Available OS Update (Server → Device)
CCMD0479 Schedule OS Update (Server → Device)
CCMD0480 Collect location info (Server → Device)
CCMD0481 Exit Shared Device Mode (Device → Server)
CCMD0482 Exit Shared Device Mode (Server → Device)
CCMD0483 Exit Shared Device Mode (Device command transfer)
CCMD0484 Delete User Data (Device → Server)
CCMD0485 Delete User Data (Server → Device)
CCMD0486 Delete User Data (Device command transfer)
CCMD0487 Check User Out (Device → Server)
CCMD0488 Check User Out (Server → Device)
CCMD0489 Check User Out (Device command transfer)
CCMD0490 Reset Managed Google Account (Device → Server)
CCMD0491 Reset Managed Google Account (Server → Device)
CCMD0492 Reset Managed Google Account (Device command transfer)
CCMD0493 Enroll Duplicate Device (Android)
CCMD0494 Enroll Duplicate Device (iOS)
CCMD0495 Create Public Key (Device → Server)
CCMD0496 Create Public Key (Server → Device)
CCMD0497 Create Public Key (Device command transfer)
CCMD0498 Report Unauthorized Container Installation Request
CCMD0499 Report Unauthorized Container Installation Response
CCMD0500 Report Unauthorized Container Installation device command
CCMD0504 Update the Knox Manage Client user information
CCMD0505 Update the Knox Manage Client user information (Server → Device)
CCMD0506 Request Knox Manage Client installation (Server → Device)
CCMD0507 Request Knox Manage Client installation status (Server → Device)
CCMD0508 Request the reason for app installation failure (Server → Device)
CCMD0509 Request the Agent activity report (Install App) (Device → Server)
CCMD0510 Request the Agent activity report (Install App) (Device → Server)
CCMD0511 Request the Agent activity report (Uninstall App) (Device → Server)
CCMD0512 Request the Agent activity report (Uninstall App) (Device → Server)
CCMD0513 Request the Agent activity report (Attestation) (Device → Server)
CCMD0514 Request the Agent Activity Report (Push Profile) (Device → Server)
CCMD0515 Request the Agent activity report (Configuration) (Device → Server)
CCMD0516 Request the Agent activity report (Install App) (Device → Server)
CCMD0517 Request the Agent activity report (Keepalive) (Device → Server)
CCMD0518 Request the Agent activity report (Location) (Device → Server)
CCMD0519 Respond to the Agent activity report (Event Profile) (Server → Device)
CCMD0520 Respond to the Agent activity report (Update License) (Server → Device)
CCMD0521 Respond to the Agent activity report (Change License) (Server → Device)
CCMD0522 Respond to the Agent activity report (Unenroll) (Server → Device)
CCMD0523 Respond to the Agent activity report (Install App) (Server → Device)
CCMD0524 Respond to the Agent activity report (Install App) (Server → Device)
CCMD0525 Respond to the Agent activity report (Install App) (Server → Device)
CCMD0526 Respond to the Agent activity report (Uninstall App) (Server → Device)
CCMD0527 Respond to the Agent activity report (Uninstall App) (Server → Device)
CCMD0528 Respond to the Agent activity report (Attestation) (Server → Device)
CCMD0529 Response to the Agent Activity Report (Push Profile) (Server → Device)
CCMD0530 Respond to the Agent activity report (Configuration) (Server → Device)
CCMD0531 Respond to the Agent activity report (Install App) (Server → Device)
CCMD0532 Respond to the Agent activity report (Keepalive) (Server → Device)
CCMD0533 Respond to the Agent activity report (Location) (Server → Device)
CCMD0534 Request the Agent activity report (Event Profile) (Device → Server)
CCMD0535 Request the Agent activity report (Update License) (Device → Server)
CCMD0536 Request the Agent activity report (Change License) (Device → Server)
CCMD0537 Request the Agent activity report (Unenroll) (Device → Server)
CCMD0538 Request the Agent activity report (Install App) (Device → Server)
CCMD0539 Request the Agent activity report (Knox Workspace) (Device → Server)
CCMD0540 Respond to the Agent activity report (Knox Workspace) (Server → Device)
CCMD0541 Call the Google API to request a lock (Chrome OS)
CCMD0542 The result of the lock request (Chrome OS)
CCMD0543 Call the Google API to request an unlock (Chrome OS)
CCMD0544 The result of the unlock request (Chrome OS)
CCMD0545 Call the Google API to request an unenrollment (Chrome OS)
CCMD0546 The result of the unenrollment request (Chrome OS)
CCMD0547 Call the Google API to request a factory reset (Chrome OS)
CCMD0548 The result of the factory reset request (Chrome OS)
CCMD0549 Call the Google API to delete a user profile (Chrome OS)
CCMD0550 The result of the user profile deletion request (Chrome OS)
CCMD0551 Call the Google API to request an unenrollment and factory reset (Chrome OS)
CCMD0552 The result of the unenrollment and factory reset request (Chrome OS)
CCMD0553 Delete Unauthorized Container (Device → Server)
CCMD0554 Delete Unauthorized Container (Server → Device)
CCMD0555 Delete Unauthorized Container (Device command transfer)
CCMD0556 Notification of application installation result (Device → Server)
CCMD0557 Assigned Application Install Request (Server → Device)
CCMD0558 Play Alarm Sound (Device → Server)
CCMD0559 Play Alarm Sound (Server → Device)
CCMD0560 Play Alarm Sound (Device command transfer)
CCMD0561 Assigned Application Update Request (Server → Device)
CCMD0562 Assigned Application Update Request (Device → Server)
CCMD0563 Assigned Application Update Request (Device command transfer)
CCMD0564 Request to install the app (Server → Device)
CCMD0565 Request to delete the app (Server → Device)
CCMD0566 Notification of application deletion result (Device → Server)
CCMD0567 Save User Information (Device → Server)
CCMD0568 Save User Information (Server → Device)
CCMD0569 Save User Information (Device command transfer)
CCMD0570 Check User Out (Device → Server)
CCMD0571 Check User Out (Server → Device)
CCMD0572 Update User Information (Device → Server)
CCMD0573 Update User Information (Server → Device)
CCMD0574 Update User Information (Device → Server)
CCMD0575 Update User Information (Server → Device)
CCMD0576 Update User Information (Device → Server)
CCMD0577 Update User Information (Server → Device)
CCMD0578 Request Device Command (Push Profile) (Server → Google)
CCMD0579 Request to device command (Unenroll Device) (Server → Google)
CCMD0580 Request Device Command (Clear Screen Lock) (Server → Google)
CCMD0581 Request to device command (Lock Screen) (Server → Google)
CCMD0582 Request Device Command (Push Profile) (Server → Google)
CCMD0583 Request to device command (Unenroll Device) (Server → Google)
CCMD0584 Request Device Command (Clear Screen Lock) (Server → Google)
CCMD0585 Request to device command (Lock Screen) (Server → Google)
CCMD0586 Request to device command (Reboot Device) (Server → Google)
CCMD0587 Shared iPad Settings (Device Command Transfer)
CCMD0588 Agent Shared iPad Settings (Server → Device)
CCMD0589 Agent Shared iPad Passcode Grace Period Settings (Server → Device)
CCMD0591 Request MS Entra ID User Settings Information (Server → Device)
CCMD0593 Set Device Name (Server → Device)
CCMD0594 Run Time Event - Activate (Server → Google)
CCMD0595 Run Time Event - Deactivate (Server → Google)
CCMD0596 Reapply KSP Wi-Fi Configurations (Device → Server)
CCMD0597 Reapply KSP Wi-Fi Configurations (Server → Device)
CCMD0598 Reapply KSP Wi-Fi Configurations (Device Command Transfer)
CCMD0599 Request Device Command (Clear Screen Lock) (Device → Server)
CCMD0600 Request Device Command (Lock Screen) (Device → Server)
CCMD0601 Request Device Command (Reboot Device) (Device → Server)
CCMD0602 Request Device Command (Push Profile) (Device → Server)
CCMD0603 Request Device Command (Unenroll Device) (Device → Server)
CCMD0604 Agent Response to the Clear Screen Lock Request (Server → Device)
CCMD0605 Request Device Command (Lock Screen) (Device → Server)
CCMD0606 Agent Respond to the request to reboot device ( Server → Device)
CCMD0607 Agent Response to the Push Profile Request (Server → Device)
CCMD0608 Request Device Command (Unenroll Device) (Device → Server)
CCMD0611 Setting App Configuration (Server → Device)
CCMD0612 Agent Request to Push Profile (Device → Server)
CCMD0613 Agent Request factory reset (Device → Server)
CCMD0614 Agent Respond to the request for factory reset (Server → Device)
CCMD0615 Agent Request to reboot device (Device → Server)
CCMD0616 Agent Request to Clear Screen Lock (Device → Server)
CCMD0617 Request to deactivate device (Device → Server)
CCMD0618 Respond to device deactivation request (Server → Device)
CCMD0619 Agent Request to update system app (Device → Server)
CCMD0620 Agent Respond to the request to update system app (Server → Device)
CCMD0621 Agent Request to collect device and audit information (Device → Server)
CCMD0622 Agent Respond to the request to collect device and audit information (Server → Device)
CCMD0623 Agent Request to collect device and log information (Device → Server)
CCMD0624 Agent Respond to the request to collect device and log information (Server → Device)
CCMD0625 Collect Bug Report (Device → Server)
CCMD0626 Collect Bug Report (Server → Device)
CCMD0627 Reset Push Token (Device → Server)
CCMD0628 Reset Push Token (Server → Device)
CCMD0629 Agent Request to collect device and app information (Device → Server)
CCMD0630 Agent Respond to the request to collect device and app information (Server → Device)
CCMD0631 Agent Request to collect app information (Device → Server)
CCMD0632 Agent Respond to the request to collect app information (Server → Device)
CCMD0633 Agent Request to install app (Device → Server)
CCMD0634 Agent Respond to the request to install app (Server → Device)
CCMD0635 Agent Request to delete app (Device → Server)
CCMD0636 Agent Respond to the request to delete app (Server → Device)
CCMD0637 Agent Request to collect device information (Device → Server)
CCMD0638 Agent Respond to the request to collect device information (Server → Device)
CCMD0639 Agent Request to update license (Device → Server)
CCMD0640 Agent Respond to the request to update license (Server → Device)
CCMD0641 Agent Request for app information (Device → Server)
CCMD0642 Agent Respond to the request for app information (Server → Device)
CCMD0643 Agent Request for work report (Device → Server)
CCMD0644 Agent Respond to the request for work report (Server → Device)
CCMD0645 Agent Request for command (Device → Server)
CCMD0646 Agent Request for command (Server → Device)
CCMD0647 Agent Request to collect device information (Device → Server)
CCMD0648 Agent Respond to the request to collect device information (Server → Device)
CCMD0649 Change License (Device → Server)
CCMD0650 Change License (Server → Device)
CCMD0651 Create Public Key (Device → Server)
CCMD0652 Create Public Key (Server → Device)
CCMD0653 Request the Agent activity report (Uninstall App) (Device → Server)
CCMD0654 Request the Agent Activity Report (Push Profile) (Device → Server)
CCMD0655 Request the Agent activity report (Configuration) (Device → Server)
CCMD0656 Request the Agent activity report (Install App) (Device → Server)
CCMD0657 Respond to the Agent activity report (Update License) (Server → Device)
CCMD0658 Respond to the Agent activity report (Change License) (Server → Device)
CCMD0659 Respond to the Agent activity report (Unenroll) (Server → Device)
CCMD0660 Respond to the Agent activity report (Install App) (Server → Device)
CCMD0661 Respond to the Agent activity report (Uninstall App) (Server → Device)
CCMD0662 Response to the Agent Activity Report (Push Profile) (Server → Device)
CCMD0663 Respond to the Agent activity report (Configuration) (Server → Device)
CCMD0664 Respond to the Agent activity report (Install App) (Server → Device)
CCMD0665 Request the Agent activity report (Update License) (Device → Server)
CCMD0666 Request the Agent activity report (Change License) (Device → Server)
CCMD0667 Request the Agent activity report (Unenroll) (Device → Server)
CCMD0668 Request the Agent activity report (Install App) (Device → Server)
CCMD0669 Contents deployment (send device command)
CCMD0670 Request to exit dedicated device mode (Device → Server)
CCMD0671 Respond to exit dedicated device mode (Server → Device)
CCMD0672 Exit Dedicated Device Mode (Device Command Transfer)
CCMD0673 Update eSIM Celluar Plan (Server → Device)
CCMD0674 Update eSIM Celluar Plan (Device → Server)
CCMD0675 Update eSIM Celluar Plan (Device command transfer)
CCMD0677 Agent Request for Contents Download URL information (Device → Server)
CCMD0678 Agent Respond to the request for Contents Download URL information (Server → Device)
CCMD0679 Unenroll MDM Agent for synchronization between server and device
CCMD0680 Agent Respond to the request for Internal App MC Applied Result Report (Device → Server)
CCMD0681 Succeeded to add Day & Time event
CCMD0682 Succeeded to remove Day & Time event
CCMD0683 Succeeded to add Applications event
CCMD0684 Succeeded to remove Applications event
CCMD0685 Succeeded to add Wi-Fi SSID event
CCMD0686 Succeeded to remove Wi-Fi SSID event
CCMD0687 Succeeded to add SIM Change event
CCMD0688 Succeeded to remove SIM Change event
CCMD0690 Succeeded to add Roaming event
CCMD0691 Succeeded to remove Roaming event
CCMD0692 Request to device command (Reboot Device) (Server → Google)
CCMD0693 Request to device command (Delete App Data) (Server → Google)
CCMD0694 Request Device Command (Reboot Device) (Device → Server)
CCMD0695 Agent Request to run app (Device → Server)
CCMD0696 Agent Respond to the request to run app (Server → Device)
CCMD0697 Agent Request to delete app data (Device → Server)
CCMD0698 Agent Respond to the request to delete app data (Server → Device)
CCMD0699 Agent Request to lock screen (Device → Server)
CCMD0700 Agent Respond to the request to lock device (Server → Device)
CCMD0701 Agent Request to unlock device   (Device → Server)
CCMD0702 Agent Respond to the request to unlock device (Server → Device)
CCMD0703 Update Exit Kiosk Code (Device Command)
CCMD0704 Request to update exit kiosk code (Request)
CCMD0705 Respond to the request to update exit kiosk code (Response)
CCMD0706 Request to update device unenrollment code (Request)
CCMD0707 Respond to the request to update device unenrollment code (Response)
CCMD0708 Exit Kiosk Mode (Device → Server)
CCMD0709 Exit Kiosk Mode (Server → Device)
CCMD0710 Process Restricted Command Requests
CCMD0711 Process Restricted Command Requests
CCMD0714 Search Device Basic Info on the Server
CDCS0001 Delete Device Commands that are exceeded 90 days
CMCM0006 Contents deployment (send device command)
CMCM0007 Request for Agent contents deployment (Device → Server)
CMCM0008 Response to Agent contents deployment (Server → Device)
CPLC0024 Agent Device Command Fail on a Device
CPLC0025 Client Device Command Fail on a Device
CPLC0027 Agent Device Command Success on a Device
CPLC0028 Client Device Command Success on a Device
CTXH0001 Error (Device command queue)

E-FOTA

Event ID Event name
CEFO0001 E-FOTA API - Get Token
CEFO0002 E-FOTA API - Register CorpID
CEFO0003 E-FOTA API - Get Firmware List
CEFO0004 E-FOTA API - Restrict Firmware
CEFO0010 E-FOTA API - check group version
CEFO0011 E-FOTA API - view product, model, and agency
CEFO0012 E-FOTA API - network error
CEFO0014 E-FOTA API - Get License Information
CEFO0034 E-FOTA history - Create group
CEFO0035 E-FOTA History - Edit group
CEFO0036 E-FOTA history - Delete group

Email

Event ID Event name
CACS0018 Send Mail To User (Async)
CACS0019 Send Mail To Device (Async)
CACS0024 Send Mail To Admin (Async)
DSCH0004 Execute Mail Scheduler
DSCH0005 Execute Mail Schedule Job
DSCH0006 Generate OTP (One Time Password) Code

Enrollment

Event ID Event name
CCMD0592 MS Entra ID Device Sync Request
CDEV0020 Prevent reactivation
CDEV0021 Prevent reactivation
CPRV0101 EMM Enrollment Spec (Device → Server)
CPRV0102 EMM Enrollment Spec (Server → Device)
CPRV0103 Update KLM/ELM license during activation (Device → Server)
CPRV0104 Update KLM/ELM license during activation (Server → Device)
CPRV0105 EMM Enrollment Spec (Device → Server)
CPRV0106 EMM Enrollment Spec (Server → Device)
CPRV0107 Disable service -Android (Device → Server)
CPRV0108 Disable service -Android (Server → Device)
CPRV0109 Confirm Enrollment (Knox) (Device → Server)
CPRV0110 Confirm Enrollment (Knox) (Server → Device)
CPRV0111 Agent Request to activate MDM (Device → Server)
CPRV0112 Agent Request to activate MDM (Server → Device)
CPRV0113 Agent Request for SCEP profile (Device → Server)
CPRV0114 Agent Request for SCEP profile (Server → Device)
CPRV0115 Agent Request for MDM profile (Device → Server)
CPRV0116 Agent Request for MDM profile (Server → Device)
CPRV0117 Agent Request for check-in (Device → Server)
CPRV0118 Agent Request for check-in (Server → Device)
CPRV0119 Agent Request for token update (Device → Server)
CPRV0120 Agent Request for token update (Server → Device)
CPRV0121 Agent Request for check-out (Device → Server)
CPRV0122 Agent Response for check-out (Server → Device)
CPRV0123 Deactivate service (Device → Server)
CPRV0124 Deactivate service (Server → Device)
CPRV0125 Request SOAP message
CPRV0126 Respond to SOAP message
CPRV0127 Request for discovery URL (Device → Server)
CPRV0128 Respond to the request for Discovery URL (Server → Device)
CPRV0129 Request for spec to issue certificate (Device → Server)
CPRV0130 Respond to the request for spec to issue certificate (Server → Device)
CPRV0131 Request to verify On-premise equipment (Device → Server)
CPRV0132 Respond to the request to verify On-premise equipment (Server → Device)
CPRV0133 Request to verify Federated equipment (Device → Server)
CPRV0134 Respond to the request to verify Federated equipment (Server → Device)
CPRV0135 Verify Security Token
CPRV0136 Request to issue certificate (Device → Server)
CPRV0137 Respond to request to issue certificate (Server → Device)
CPRV0138 Respond to the request to set DM Client
CPRV0139 Generate OTP (One Time Password) Code
CPRV0148 UMC User Search Request
CPRV0149 UMC User Search Response
CPRV0150 UMC Enrollment Request
CPRV0151 UMC Enrollment Response
CPRV0152 UMC Enrollment Information Update Request
CPRV0153 UMC Enrollment Information Update Response
CPRV0154 UMC Unenrollment Request
CPRV0155 UMC Unenrollment Response
CPRV0158 Request to activate Agent User Enrollment MDM (Device → Server)
CPRV0159 Request to activate Agent User Enrollment MDM (Server → Device)
CPRV0160 EMM Enrollment Spec (Device → Server)
CPRV0161 EMM Enrollment Spec (Server → Device)
CPRV0162 EMM Enrollment (Device → Server)
CPRV0163 EMM Enrollment (Server → Device)
CPRV0166 Register Management Type
CPRV0167 EMM Enrollment

Google sync

Event ID Event name
CSYN0062 Check the readiness to start the synchronization service
CSYN0063 Started Google resource synchronization (All)
CSYN0064 Started Google resource synchronization (Organization)
CSYN0065 Google resource synchronization via Google API (Organization)
CSYN0066 Processed the Google resource synchronization DB (Organization)
CSYN0067 Stopped Google resource synchronization (Organization)
CSYN0068 Started Google resource synchronization (User)
CSYN0069 Google resource synchronization via Google API (User)
CSYN0070 Processed the Google resource synchronization DB (User)
CSYN0071 Stopped Google resource synchronization (User)
CSYN0072 Started Google resource synchronization (Device)
CSYN0073 Google resource synchronization via Google API (Device)
CSYN0074 Processed the Google resource synchronization DB (Device)
CSYN0075 Google resource synchronization via Google API (Policy)
CSYN0076 Stopped the Google resource synchronization (All)
CSYN0077 Started Google resource synchronization via the scheduler (All)
CSYN0078 Stopped Google resource synchronization via the scheduler (All)

Group

Event ID Event name
CDEV0124 Copy Attributes Assigned to Groups

Identity & Directory

Event ID Event name
CUSR0023 Ignore Directory Synced User
CUSR0028 Ignore Directory Synced Organization
CCON0091 MS Entra ID Admin Approval Result Renewal
CCON0111 Request MS Entra ID Information (Server → CRS)

Inventory Scheduler

Event ID Event name
CINV0003 Start Inventory Collection Scheduler for iOS
CINV0004 Terminate Inventory Collection Scheduler for iOS

License

Event ID Event name
DLIC0004 Add Knox License
DLIC0005 Revision Knox License
DLIC0006 Delete Knox License
DLIC0007 Sync Knox License
DLIC0008 Interface Knox License
DLIC0009 Knox Suite enrolled device License Management System interface
DLIC0010 Knox Suite unenrolled device License Management System interface
DLIC0011 Synchronize LMS for Deleting License
DLIC0012 Executing SLM Interface Schedule
DLIC0013 Register the license assigned to the customer
DLIC0014 License Name Update
DLIC0015 Deactivate Serial Number (16 Digits)
DLIC0016 Add Knox License From Knox cloud services
DLIC0017 Revision Knox License From Knox cloud services
DLIC0018 Delete Knox License From Knox cloud services
DLIC0019 Update License name Knox License From Knox cloud services
DLIC0020 Issue Knox License From Knox cloud services
DLIC0021 KSP License

Log

Event ID Event name
CADT0007 Audit Log Transfer to External
CADT0009 Audit Remote Log Server Connection Failure
CADT0016 Delete the audit logs elapsed over the retention period.
CADT0019 Delete Device Log before Retention Date

Profile

Event ID Event name
CCMD0441 Save Knox Service Plugin App feedback
CPLC0026 The result of applying Agent device policy
CPLC0029 Agent Policy Apply Success on a Device
CPLC0030 Failed to Apply Agent Policy on Device
CPLC0098 Start profile update
CPLC0099 Terminate profile update
CPLC0101 Start registration of Time Trigger when server operates
CPLC0102 Close registration of Time Trigger when server operates
CPLC0103 Start Time Trigger sync
CPLC0104 Close Time Trigger sync
CPLC0152 Google API (Policy Schema)
CPLC0153 Google API (Policy by Organization)
CPLC0154 The result of viewing the Chrome Policy of an organization
CPLC0155 Google API (Inherit Policy)
CPLC0156 Google API (Modify Policy)
CPLC0157 The result of changing the Chrome Policy of an organization
CPLC0158 Google API (Upload Policy File)
CPLC0159 The result of uploading the file from the content provided by the users to set up the Chrome Policy
CPLC0160 Patch Device Group policy (Server → Google)
CPLC0161 Delete Device Group policy (Server → Google)
CPLC0167 Google API (Inherit App Policy)
CPLC0168 Google API (Modify App Policy)
CPLC0169 The Results of Changing the Chrome App Policy of the Organization
CPLC0170 Request of Changing the Chrome App Policy of the Organization
CPRV0001 Eula Download
CPRV0002 Profile Download

Provision

Event ID Event name
CPRV0004 Request for public key
CPRV0005 Activate provisioning
CPRV0006 Deactivate provisioning
CPRV0008 Activate Knox provisioning
DPRV0001 Request To Changing Device Status To Provisioning Activate Status
DPRV0002 Request To Changing Device Status To Provisioning Deactivate Status
DPRV0004 Activate Work Profile provisioning
DPRV0005 Provisioning for Re-enrolled Device
SCIM0001 SCIM Provisioning request
SCIM0002 SCIM Provisioning response

Setting

Event ID Event name
CDEV0078 Upload Identity Provider Metadata to server

System

Event ID Event name
CACS0021 Send SMS To User (Async)
CACS0022 Send SMS To Device (Async)
CACS0025 Send SMS To Admin (Async)

User

Event ID Event name
CAUT0012 User Authentication Failed
CCON0055 User Logged In
CCON0056 User Logged Out
CCON0135 Sign In to Issue an ID Token
CUSR0039 User Checked In to the Shared Device
CUSR0040 User Checked Out from the Shared Device
CUSR0041 Create Shared Device Relation Information
CUSR0042 Delete Shared Device Relation Information
CUSR0043 Sign In to the AMAPI Device
CUSR0044 Assign Staging (Non-Shared) device to the user's device via user login

Volume Purchase Program

Event ID Event name
CVPP0011 VPP Sync start
CVPP0012 VPP Sync is terminated
CVPP0016 Request from Device for assignment and installation of the VPP Application License
CVPP0017 Assign VPP App License to Device
CVPP0018 Revoke Device's VPP App License
CVPP0019 Update Device's VPP App License

On this page

Is this page helpful?