What does HRESULT 0x80094809 (CERTSRV_E_SIGNATURE_POLICY_REQUIRED) mean?

 
Previous Next
CERTSRV_E_TEMPLATE_POLICY_REQUIRED CERTSRV_E_SIGNATURE_COUNT

CERTSRV_E_SIGNATURE_POLICY_REQUIRED

CERTSRV_E_SIGNATURE_POLICY_REQUIRED The request is missing signature-policy information required by the selected certificate template.

What to check for CERTSRV_E_SIGNATURE_POLICY_REQUIRED

  • Check the template’s issuance requirements to identify the required policy and number of authorized signatures.
  • Use a requester or enrollment-agent certificate that carries the application and issuance policies expected by the template.
  • Do not remove signature policy requirements solely to simplify enrollment; they are often the control that authorizes delegated issuance.

Microsoft: Certificate template concepts

Microsoft: Manage certificate templates

Microsoft: Audit Certification Services

Diagnostic interpretation

This result has the HRESULT value 0x80094809. AllStat records the condition as “The request is missing required signature policy information.”.

Evidence to capture

  • Capture any IErrorInfo text, activity identifier, event-log entry, and subsystem trace that mentions this result or the certsrv / signature / policy / required operation.
  • check the documented return contract of the specific API because the same HRESULT can require different recovery in different interfaces.

Retry and recovery

” has changed.


Looking for a different code? Search another status or error code.