What does HRESULT 0x80092012 (CRYPT_E_NO_REVOCATION_CHECK) mean?

 
Previous Next
CRYPT_E_NO_REVOCATION_DLL CRYPT_E_REVOCATION_OFFLINE

CRYPT_E_NO_REVOCATION_CHECK

A registered revocation function was available but could not perform a revocation check for the certificate context.

What to check for CRYPT_E_NO_REVOCATION_CHECK

  • Distinguish this status from an actually revoked certificate and from a network-offline status.
  • Inspect the certificate’s revocation information and the provider-specific events or logs.
  • Verify chain-building and policy context as well as network reachability; revocation behavior depends on the certificate and the calling application policy.

Microsoft: CertVerifyRevocation

Microsoft: Certificate revocation list semantics

Microsoft: CertGetCertificateChain

Microsoft: CertVerifyCertificateChainPolicy

Diagnostic interpretation

CRYPT_E_NO_REVOCATION_CHECK has the HRESULT value 0x80092012. AllStat records the condition as “The revocation function was unable to check revocation for the certificate.”.

Evidence to capture

  • Capture any IErrorInfo text, activity identifier, event-log entry, and subsystem trace that mentions this result or the crypt / revocation / check operation.
  • compare the failing machine with a working one at the same configuration boundary: component version, policy, registration, identity, and target resource.

Retry and recovery

” has changed.


Looking for a different code? Search another status or error code.