| Previous | Next |
| MF_E_KERNEL_UNTRUSTED | MF_E_NON_PE_PROCESS |
MF_E_PEAUTH_UNTRUSTED
MF_E_PEAUTH_UNTRUSTED points to authentication of the Protected Environment rather than ordinary media decoding. In the PMP architecture, an input trust authority confirms that it is in a protected process by performing a cryptographic handshake with a protected-environment kernel module.
Capture the handshake stage that rejected the response
- Log whether the PEAuth communication session was started before the failing trust request.
- Preserve the response length, operation identifier, and preceding HRESULT without logging protected payload contents.
- Distinguish an invalid/untrusted response from
MF_E_PEAUTH_PUBLICKEY_REVOKED, where the public key itself is rejected by revocation policy.
Restarting the Media Session can recreate the handshake, but repeated failure at the same authentication stage points to protected-environment trust or system servicing, not the source file's codec. For application-controlled protection systems, Microsoft exposes IMFProtectedEnvironmentAccess specifically to perform a handshake with the protected environment.
Microsoft: PE cryptographic handshake · Microsoft: protected environment access · Wine: mferror.h
Looking for a different code? Search another status or error code.