About BMC OEM log(Windows 11)

Garfield Chien 0 Reputation points
2026-10-13T08:53:57.3933333+00:00

Dear Microsoft Support Team,

We are currently investigating several OEM-specific IPMI System Event Log (SEL) records observed on a system running Windows 11.

The following raw SEL records were retrieved from the BMC:

0x03 0x00 0xdf 0x20 0x30 0xa9 0x6a 0x37 0x01 0x00 0x09 0x00 0x00 0x00 0x20 0x00
0x05 0x00 0xc0 0x20 0x30 0xa9 0x6a 0x37 0x01 0x00 0x29 0x00 0x00 0x00 0x00 0x00
0x06 0x00 0xc0 0x20 0x30 0xa9 0x6a 0x37 0x01 0x00 0x00 0x00 0x00 0x00 0x00 0x00
0x07 0x00 0xd0 0x20 0x30 0xa9 0x6a 0x37 0x01 0x00 0x0c 0x00 0x00 0x00 0x00 0x00
0x08 0x00 0xc0 0x20 0x30 0xa9 0x6a 0x37 0x01 0x00 0x80 0xe6 0xa1 0xdf 0x07 0x45

Based on the IPMI specification, these records appear to be OEM-specific SEL records, with record types 0xC0, 0xD0, and 0xDF.

We would appreciate your assistance in clarifying the following:

Does Windows 11 or any Microsoft component define or generate these OEM-specific IPMI SEL records?

If these records are Microsoft-defined, could you provide the corresponding decoding specification or technical documentation?

Could you clarify the meaning of each record type and its associated event data?

Is there any Microsoft-provided tool or reference implementation available for decoding these records?

Our goal is to implement the appropriate decoding mechanism in our BMC firmware so that these events can be displayed with meaningful descriptions.

Any technical documentation or guidance would be greatly appreciated.

Thank you for your assistance.

Best regards,

Windows for business | Windows Client for IT Pros | Devices and deployment | Other
0 comments No comments

2 answers

Sort by: Most helpful
  1. Garfield Chien 0 Reputation points
    2026-10-13T09:00:45.35+00:00

    Thank you for your detailed explanation.

    As a BMC firmware developer, we would like to implement the decoding of these OEM-specific SEL records (0xC0, 0xD0, and 0xDF) so that meaningful event descriptions can be displayed in the BMC event log.

    Could you please advise how we can contact the appropriate Microsoft hardware or driver support team to obtain the OEM SEL record decoding specification?

    If this specification is not publicly available, is there an official support channel through which hardware vendors can request it?

    Thank you for your assistance.

    Was this answer helpful?

    0 comments No comments

  2. AI answer

    2026-10-13T08:55:07.3566667+00:00

    These records should be parsed as timestamped OEM SEL records, and the manufacturer bytes 37 01 00 identify Microsoft (0x000137, decimal 311); however, Microsoft does not publish a supported payload-decoding specification for record types 0xC0, 0xD0, or 0xDF.

    Byte-level interpretation

    For a 16-byte timestamped OEM SEL record:

    Offset Example Interpretation
    0–1 03 00 SEL record ID, little-endian
    2 DF OEM record type
    3–6 20 30 A9 6A Timestamp, little-endian
    7–9 37 01 00 Manufacturer/IANA enterprise ID: 0x000137
    10–15 09 00 00 00 20 00 Six bytes of OEM-defined event data

    Under the IPMI SEL format, 0xC0–0xDF are timestamped OEM record types. Their payload semantics are not assigned globally by IPMI; the organization identified by the manufacturer ID defines them.^1^

    Applied to the supplied records:

    Record ID Type Manufacturer OEM event bytes
    0x0003 0xDF 0x000137 09 00 00 00 20 00
    0x0005 0xC0 0x000137 29 00 00 00 00 00
    0x0006 0xC0 0x000137 00 00 00 00 00 00
    0x0007 0xD0 0x000137 0C 00 00 00 00 00
    0x0008 0xC0 0x000137 80 E6 A1 DF 07 45

    The common manufacturer field is evidence that these records use a Microsoft-assigned OEM namespace. It does not, by itself, establish which Windows component wrote each record or provide enough information to assign descriptions to the final six bytes.

    What Microsoft documents

    Windows includes internal IPMI SEL support and defines categories such as WHEA, PCI hardware error, NMI, raw, driver, bug-check recovery, and bug-check data. However, the corresponding IPMI_OS_SEL_RECORD_TYPE enumeration is explicitly marked “Reserved for system use” and does not document how those internal categories map to outer IPMI record-type bytes or their six-byte payloads.^2^

    The associated IPMI_OS_SEL_RECORD structure is also reserved for system use. It describes an internal record containing a type, length, and variable data buffer—not the public on-wire decoding of 0xC0, 0xD0, or 0xDF.^3^

    Windows can interact with a BMC through its IPMI driver/provider, retrieve SEL data, and expose BMC information through management interfaces. Microsoft also notes that management access and interpretation can remain proprietary and require OEM tools.^4^

    WHEA is separate from the outer SEL encoding: when Windows represents platform hardware errors as WHEA records, it uses the UEFI Common Platform Error Record (CPER) format.^5^ The six-byte OEM fields shown here are not complete CPER records, so they cannot be decoded directly with the published CPER structures.

    Tooling and implementation guidance

    There is no documented Microsoft reference decoder for these three OEM record types. Microsoft’s IPMI tooling can retrieve or transport SEL entries, but its published HLK IPMI test validates BMC operations rather than decoding proprietary OEM payloads.^6^

    For the BMC firmware:

    1. Parse offsets 0–9 using the standard timestamped OEM SEL layout.
    2. Dispatch decoding by the three-byte manufacturer ID.
    3. Preserve 0xC0, 0xD0, and 0xDF payloads as raw hexadecimal unless a Microsoft-provided specification is obtained.
    4. Do not infer descriptions from the internal enum ordering; no public mapping establishes that relationship.
    5. Request the private SEL contract through the Microsoft hardware/driver support channel used for the platform integration. Supply:
      • Windows 11 build and edition
      • Microsoft IPMI driver version
      • BMC vendor, model, and firmware
      • Complete SEL before and after a controlled trigger
      • Matching Windows System events, WHEA records, and bug-check data
      • Whether the entries occur during shutdown, crash recovery, hardware error, or normal boot

    Until that specification is supplied, a safe display string is, for example, “Microsoft OEM SEL record, type 0xC0, data 29 00 00 00 00 00” rather than assigning an unverified event meaning.


    References

    1. System Event Log (SEL) | bougou/go-ipmi | DeepWiki
    2. IPMI_OS_SEL_RECORD_TYPE - Windows drivers | Microsoft Learn
    3. IPMI_OS_SEL_RECORD structure (ntddk.h)
    4. Remote Hardware Management
    5. Error Records
    6. IPMI
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.