Event and Error Message Reference Guide for 13th Generation Dell PowerEdge ServersVersion 1.2

FSD000

Message: Debug authorized by customer; debugcaps: arg1 , was authorized by: arg2 , at arg3 for the period: arg4 to arg5 .
Arguments: arg1 = DebugCaps, arg2 = iDRAC User, arg3 = unblock time, arg4 = start time, arg5 = end time
Detailed Description: The customer has authorized the specified debug capabilities on this iDRAC. (This should occur in response to a request from Dell tech support.) Each debug capability represents a certain action Dell engineers can perform to debug iDRAC.
Recommended Response Action: No response action is required.
Category: Audit (FSD = Debug)
Severity: Severity 3 (Informational)
Trap/EventID: 8595

	Filter Visibility	IPMI Alert	SNMP Alert	Email Alert	Remote System Log	WS Eventing
iDRAC	✔		✔	✔	✔	✔
CMC

	LC Log	LCD	OS Log	Power Off	Power Cycle	Reset	Chassis Event Proxy
iDRAC	✔*		✔
CMC

Message: Debug authorized by Dell; debugcaps: arg1 , at arg2 , was authorized by Dell employee: arg3 , for the time period arg4 to arg5
Arguments: arg1 = DebugCaps, arg2 = grant time, arg3 = Dell employee, arg4 = start time, arg5 = end time
Detailed Description: Dell has authorized the specified debug capabilities. Each debug capability represents a certain action Dell engineers can perform to debug iDRAC.
Recommended Response Action: No response action is required.
Category: Audit (FSD = Debug)
Severity: Severity 3 (Informational)
Trap/EventID: 8595

	Filter Visibility	IPMI Alert	SNMP Alert	Email Alert	Remote System Log	WS Eventing
iDRAC	✔		✔	✔	✔	✔
CMC

	LC Log	LCD	OS Log	Power Off	Power Cycle	Reset	Chassis Event Proxy
iDRAC	✔*		✔
CMC

Message: Debug authorization failed; for debugCaps: arg1 , authorized by iDRAC user: arg2 , and Dell employee: arg3 , at arg4 for the period: arg5 to arg6 .
Arguments: arg1 = DebugCaps, arg2 = IDRAC user, arg3 = Dell employee, arg4 = unblock time, arg5 = start time, arg6 = end time
Detailed Description: A RACADM Debug command failed. If the RACADM Debug command was executed under the direction of Dell tech support then further assistance from tech support should be requested. Otherwise this command is not intended for customer use.
Recommended Response Action: Verify all of the following 1) ensure that the unblock, grant, and invoke/start/stop/resume commands are all executed against the same iDRAC. 2) ensure dat.ini file has not been changed in any way. 3) ensure that current date falls between the start and end times. Note that Dell can further restrict both the set of debugCaps that is authorized and the start and stop times. If an authorized person did not enter a RACADM debug command then an attacker may have entered the command.
Category: Audit (FSD = Debug)
Severity: Severity 2 (Warning)
Trap/EventID: 8594

	Filter Visibility	IPMI Alert	SNMP Alert	Email Alert	Remote System Log	WS Eventing
iDRAC	✔	✔	✔	✔	✔	✔
CMC

	LC Log	LCD	OS Log	Power Off	Power Cycle	Reset	Chassis Event Proxy
iDRAC	✔*		✔	✔	✔	✔
CMC