What does HRESULT 0x8004290A (VDS_E_ISCSI_CHAP_SECRET) mean?

 
Previous Next
VDS_E_ISCSI_GROUP_PRESHARE_KEY VDS_E_INVALID_IP_ADDRESS

VDS_E_ISCSI_CHAP_SECRET

This status belongs to the initiator side of CHAP configuration. VDS represents a CHAP secret with VDS_ISCSI_SHARED_SECRET, an explicit byte pointer and length. Microsoft documents a supported size of 12 through 16 bytes for this VDS structure, and describes different placement for one-way and mutual CHAP.

Why this state matters

In one-way CHAP, the target has a secret and the initiator remembers the target secret for login. Mutual CHAP adds an initiator secret so the target can authenticate the initiator as well. A failure setting the initiator secret should be diagnosed in that direction; replacing a target secret or portal address may not affect it.

Diagnostic focus

  • Validate the shared-secret pointer/length contract and keep the secret itself out of logs and crash diagnostics.
  • Confirm whether the deployment is using one-way or mutual CHAP and which side is expected to authenticate the other.
  • Check for a more specific iSCSI status qualifier such as short or invalid CHAP secret when available from the initiator layer.
  • After correcting the secret, re-establish login and verify authentication rather than assuming a successful configuration call changes an existing session in place.

Technical references

VDS_ISCSI_SHARED_SECRET · IVdsServiceIscsi::SetInitiatorSharedSecret · Windows iSCSI status qualifiers · RFC 1994: CHAP · IVdsIscsiInitiatorAdapter::LoginToTarget


Looking for a different code? Search another status or error code.