| Previous | Next |
| MF_E_GRL_ABSENT | MF_E_PEAUTH_NOT_STARTED |
MF_E_PE_UNTRUSTED
MF_E_PE_UNTRUSTED is the direct failure counterpart to a trusted Protected Environment state. The PMP architecture relies on a cryptographic trust relationship between input trust authorities and the protected environment before protected content can flow through the pipeline.
Find the first trust reason below the aggregate PE result
- Capture PEAuth, signature, revocation, kernel-trust, and user-mode-trust HRESULTs emitted during the same session creation attempt.
- Record component names and revocation information when the platform exposes them.
- Check whether the protected session is recreated after a GRL reload or required process restart.
This code is broader than MF_E_PEAUTH_UNTRUSTED, which identifies an invalid protected-environment authentication response, and broader than MF_E_KERNEL_UNTRUSTED or MF_E_USERMODE_UNTRUSTED. Do not discard those more specific errors when this aggregate result is reported later. The first failing trust stage is usually the most actionable diagnostic clue.
Microsoft: Protected Environment trust model · Microsoft: protected-environment handshake access · Microsoft: protected component failure reasons
Looking for a different code? Search another status or error code.