| Previous | Next |
| CERT_E_UNTRUSTEDROOT | TRUST_E_FAIL |
CERT_E_CHAINING
CERT_E_CHAINING means that chain construction did not reach a trusted root. Common causes are a missing intermediate, an unavailable or incorrectly supplied issuer, an incomplete certificate store, or a chain that terminates at an untrusted authority.
Diagnose the chain as a path
- Capture the entire chain selected by Windows, including each subject, issuer, and trust status.
- Install the correct intermediate certificate where deployment requires it; do not substitute a different CA with a similar name.
- Confirm that the intended root is trusted by the machine and policy that performs verification.
CERT_E_CHAINING is broader than a hostname or expiry failure: it says a trusted certification path could not be built.
Microsoft: certificate chain policy status
Looking for a different code? Search another status or error code.