What does HRESULT 0x80310094 (FVE_E_PRIVATEKEY_AUTH_FAILED) mean?

 
Previous Next
FVE_E_NON_BITLOCKER_KU FVE_E_REMOVAL_OF_DRA_FAILED

FVE_E_PRIVATEKEY_AUTH_FAILED

The certificate is present, but the private key is unavailable

FVE_E_PRIVATEKEY_AUTH_FAILED occurs after certificate selection when BitLocker cannot obtain authorization to use the matching private key. Common boundaries include smart-card PIN entry, key-storage-provider access control, a missing private-key association, unavailable hardware, or a private key stored under another user or machine context.

Importing the public certificate again does not solve a private-key authorization failure. The certificate can look valid and trusted while the key needed to unwrap the volume material remains inaccessible.

Diagnostic checklist

  • Confirm that the selected certificate reports an associated private key and identify its key storage provider.
  • Test access under the same account, service identity, or recovery environment that invokes BitLocker.
  • For smart cards or hardware keys, verify device presence, PIN policy, middleware, and provider logs.
  • Do not export or weaken private-key permissions merely to make the operation succeed; correct the intended authorization path.

References


Looking for a different code? Search another status or error code.