What does HRESULT 0x00090320 (SEC_I_INCOMPLETE_CREDENTIALS) mean?

 
Previous Next
SEC_I_CONTEXT_EXPIRED SEC_I_RENEGOTIATE

SEC_I_INCOMPLETE_CREDENTIALS

SEC_I_INCOMPLETE_CREDENTIALS means that the peer has requested credentials that were not supplied or could not be verified. In a Schannel client handshake, this commonly means the server requested a client certificate and the available certificate is missing or not trusted by that server.

What to inspect

  • Whether the server requested client authentication.
  • Whether the selected certificate has a usable private key and is valid for client authentication.
  • Whether the server trusts the issuing certification authority and required chain.

How to continue safely

Use the context information and certificate-selection path provided by the security package. Do not silently continue without client authentication when the application protocol requires it.

Microsoft: InitializeSecurityContext (Schannel) · QueryContextAttributes (Schannel)


Looking for a different code? Search another status or error code.