HTTP Service SSL Auditing

Applies To: Windows Server 2008 R2

HTTP Service SSL Auditing provides information about the service, but does not indicate whether the service is in a normal or error state.

Events

Event ID	Source	Message
20	Microsoft-Windows-HttpEvent	SSL credentials for IP address and port %3 successfully created.
34	Microsoft-Windows-HttpEvent	Initiating SSL connection.
35	Microsoft-Windows-HttpEvent	Initiating SSL handshake.
36	Microsoft-Windows-HttpEvent	SSL handshake completed with status: %1.
37	Microsoft-Windows-HttpEvent	Server application is attempting to receive the SSL client certificate, which will be provided if available. If the client certificate is not available, a renegotiation will be initiated.
38	Microsoft-Windows-HttpEvent	Attempt by server application to receive client certificate failed with status: %1.
39	Microsoft-Windows-HttpEvent	Raw SSL data is available for processing.
40	Microsoft-Windows-HttpEvent	Decrypted SSL data is available for processing.
41	Microsoft-Windows-HttpEvent	Passed plain text data for encryption.
57	Microsoft-Windows-HttpEvent	SSL connection will be disconnected as initiated by the client.
58	Microsoft-Windows-HttpEvent	SSL connection will be disconnected as initiated by the server application. Status: %2.
62	Microsoft-Windows-HttpEvent	Attempt to perform SSL handshake failed. Security status: %2.
15300	Microsoft-Windows-HttpEvent	SSL Certificate Settings deleted for Port : %2 .
15301	Microsoft-Windows-HttpEvent	SSL Certificate Settings created by an admin process for Port : %2 .