| Previous | Next |
| SEC_E_TIME_SKEW | SEC_E_ILLEGAL_MESSAGE |
SEC_E_UNTRUSTED_ROOT
SEC_E_UNTRUSTED_ROOT means that certificate-chain validation reached a root certification authority that the local system does not trust. The chain may be structurally complete, but it does not terminate in an accepted trust anchor.
What to inspect
- The complete chain sent by the peer, including intermediate certificates.
- The trusted-root store of the account or machine that performs validation.
- Whether a corporate inspection proxy or test CA introduced a private root that has not been deployed to the client.
Safe resolution
Install or distribute a root only after confirming its ownership and intended scope. Avoid bypassing certificate validation; that replaces a configuration defect with an authentication weakness.
Microsoft: SSPI Status Codes · QueryContextAttributes (Schannel)
Looking for a different code? Search another status or error code.