What does NTSTATUS 0xC00004A2 (STATUS_ENCLAVE_VIOLATION) mean?

 
Previous Next
STATUS_EXTERNAL_SYSKEY_NOT_SUPPORTED STATUS_FILE_PROTECTED_UNDER_DPL

STATUS_ENCLAVE_VIOLATION

Secure enclave memory policy was violated

STATUS_ENCLAVE_VIOLATION identifies a specific Windows status in the secure enclave lifecycle path. Code attempted to access protected enclave memory from an invalid context or with disallowed permissions. Treat this as a trust-boundary failure, not a normal access-denied retry.

Preserve the faulting address and instruction, enclave lifecycle state and access direction. Audit pointer validation and host/enclave marshalling.

What to preserve before changing the system

  • The exact API, caller, target object, original NTSTATUS value, and any nested error or activity ID.
  • For STATUS_ENCLAVE_VIOLATION, the relevant process token, package/job/enclave identity, lifecycle state, and policy or mitigation settings.
  • For STATUS_ENCLAVE_VIOLATION, operational event logs and a timeline showing the first transition into the failing state.

References for STATUS_ENCLAVE_VIOLATION


Looking for a different code? Search another status or error code.