The ZENworks Full Disk Encryption Agent consists of multiple processes and drivers, each of which performs specific functions related policy handling and disk encryption. Four of these processes log activities to their own files:
Log_YYYYMMDD_HHMMSS_NNNN.txt: This log contains any Full Disk Encryption messages generated by the ZESService.exe process. This agent process performs the majority of activities for Full Disk Encryption.
Cmd_YYYYMMDD_HHMMSS_NNNN.txt: This log contains any Full Disk Encryption messages generated by the ZESCommand.exe process. This agent process executes agent commands (such as creating diagnostic packages) from a command line.
User_YYYYMMDD_HHMMSS_NNNN.txt: This log contains any Full Disk Encryption messages generated by the ZESUser.exe process. This agent process executes agent commands (such as creating diagnostic packages) through the user interface.
ZID_YYYYMMDD_HHMMSS_NNNN.txt: This log contains any Full Disk Encryption messages generated by the ZESZid.dll process. This agent process communicates policy data between the Adaptive Agent and the ZESService.exe process.
The log files are stored in the following hidden directories:
Windows XP: c:\Documents and Settings\All Users\Application Data\Novell\ZES\Logs
Windows Vista/7/8: c:\ProgramData\Novell\ZES\Logs
Each process creates a new log file when the process starts or when the log file reaches approximately 1 MB. A maximum of 10 log files are kept for ZESService.exe, ZESCommand.exe, and ZESZid.dll, and a maximum of 50 log files are kept for ZESUser.exe.
The Full Disk Encryption Agent drivers also generate two log files: FDE.log and PBA.log. These logs are stored in the same directory as the process logs. These are low-level logs that provide information for Novell Support if needed.