Shadow Copy System Writer Functionality

Applies To: Windows Server 2008 R2

Shadow Copy automatically creates shadow copies of files and folders to restore a previous version of the file. The Shadow Copy System Writer is used by the cryptographic services provided by the operating system to enumerate and replace system files when the signature of a system file is different from the signature stored in the security catalog database.

Events

Event ID Source Message

512

Microsoft-Windows-CAPI2

The Cryptographic Services service failed to initialize the VSS backup "System Writer" object.%1.

513

Microsoft-Windows-CAPI2

Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.%1.

CryptoAPI 2.0

Core Security