| Previous | Next |
| WINBIO_E_POLICY_PROTECTION_UNAVAILABLE | WINBIO_E_INVALID_BUFFER_ID |
WINBIO_E_INSECURE_SENSOR
WINBIO_E_INSECURE_SENSOR is a capability mismatch, not evidence that the sensor is physically disconnected. Microsoft requires a secure sensor to isolate matching from the normal OS, deliver samples through a secure input path, support secure credential release, and provide presentation attack detection.
Compare the sensor capability with the requested security mode
- Check whether the unit reports
WINBIO_CAPABILITY_SECURE_SENSOR. - On ESS systems, verify that the device is an ESS-capable face or match-on-sensor fingerprint device and that its driver/firmware support the protected path.
- Do not fall back silently to a nonsecure sensor when the policy explicitly requires secure biometrics.
Enhanced Sign-in Security can block non-ESS biometric sensors from the Windows Biometric Framework while ESS is enabled. That makes sensor enumeration and security mode important diagnostic context. Reinstalling the same nonsecure hardware cannot add a trusted execution environment or secure sample path. The appropriate action is to satisfy the hardware/policy requirements or explicitly use a supported non-ESS configuration where policy allows it.
Secure sensor requirements · Enhanced Sign-in Security
Looking for a different code? Search another status or error code.