HRESULT 0x80090352 (SEC_E_ISSUING_CA

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

SEC_E_ISSUING_CA_UNTRUSTED an untrusted certificate authority was detected while processing the smartcard certificate used for authentication. Please.

Previous	Next
SEC_E_SMARTCARD_CERT_REVOKED	SEC_E_REVOCATION_OFFLINE_C

SEC_E_ISSUING_CA_UNTRUSTED

SEC_E_ISSUING_CA_UNTRUSTED signals this condition: The CA that issued the smart-card certificate is not trusted for this authentication flow. The smart-card certificate chain did not terminate in a CA trusted by the relevant Windows and domain authentication components. Importing an arbitrary root certificate is not a safe fix; the CA and issuance policy must be the approved ones for the identity environment.

What to check

Inspect the complete issuer chain and confirm it belongs to the organization’s intended PKI.
Check that the required root and intermediate CA certificates are deployed to the systems that validate the smart-card logon.
Verify certificate mapping, UPN, EKU, and revocation configuration after trust is corrected.

Microsoft: SSPI status codes

Microsoft: Smart-card certificate requirements

Looking for a different code? Search another status or error code.