What does HRESULT 0x80090351 (SEC_E_SMARTCARD_CERT_REVOKED) mean?

 
Previous Next
SEC_E_DOWNGRADE_DETECTED SEC_E_ISSUING_CA_UNTRUSTED

SEC_E_SMARTCARD_CERT_REVOKED

SEC_E_SMARTCARD_CERT_REVOKED signals this condition: The smart-card certificate used for authentication has been revoked. Windows successfully reached certificate validation far enough to determine that the user certificate is revoked. The certificate should not be treated as usable simply because it has not expired.

What to check

  • Confirm the certificate serial number and issuer, then check the revocation reason with the issuing CA.
  • Verify that CRL or OCSP infrastructure is reachable and current so the result is not confused with an offline-status error.
  • Issue or map a replacement certificate through the approved PKI process if revocation is confirmed.

Microsoft: SSPI status codes

Microsoft: Smart-card certificate requirements


Looking for a different code? Search another status or error code.