Windows Security Log Event ID 5059

Operating Systems Windows 2008 R2 and 7
Windows 2012 R2 and 8.1
Windows 2016 and 10
Windows Server 2019 and 2022
Category
 • Subcategory
System
 • Other System Events
Type Success
Corresponding events
in Windows 2003
and before
 

5059: Key migration operation

On this page

Key migration operation

Server 2019 added the Process Information fields.

Free Security Log Resources by Randy

Description Fields in 5059

 Subject

  • Security ID:
  • Account Name:
  • Account Domain:
  • Logon ID:

Process Information (new fields in 2019)

  • Process ID:
  • Process Creation Time:

Cryptographic Parameters

  • Provider Name:
  • Algorithm Name:
  • Key Name:
  • Key Type:

Key File Operation Information

  • Operation:
  • Return Code:

Supercharger Enterprise


 

Examples of 5059

2019

Key migration operation.

Subject:

   Security ID:  ACME-FR\administrator
   Account Name:  administrator
   Account Domain:  ACME-FR
   Logon ID:  0x20f9d

Process Information:

 

   Process ID:
   Process Creation Time:

Cryptographic Parameters:

   Provider Name: Microsoft Software Key Storage Provider
   Algorithm Name: RSA
   Key Name: acme-fr-WIN-857ZZX6RQHL-CA
   Key Type: Machine key.

Additional Information:

   Operation: Export of persistent cryptographic key.
   Return Code: 0x0

2016 and earlier

Key migration operation.

Subject:

   Security ID:  ACME-FR\administrator
   Account Name:  administrator
   Account Domain:  ACME-FR
   Logon ID:  0x20f9d

Cryptographic Parameters:

   Provider Name: Microsoft Software Key Storage Provider
   Algorithm Name: RSA
   Key Name: acme-fr-WIN-857ZZX6RQHL-CA
   Key Type: Machine key.

Additional Information:

   Operation: Export of persistent cryptographic key.
   Return Code: 0x0

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection

 

Upcoming Webinars
    Additional Resources