What does NTSTATUS 0xC0292009 (STATUS_PCP_AUTHENTICATION_IGNORED) mean?

 
Previous Next
STATUS_PCP_AUTHENTICATION_FAILED STATUS_PCP_POLICY_NOT_FOUND

STATUS_PCP_AUTHENTICATION_IGNORED

Anti-hammering protection is suppressing authorization attempts

STATUS_PCP_AUTHENTICATION_IGNORED is not merely another bad-password result. PCP reports that the platform crypto device deliberately ignored authorization for the provider object as a dictionary-attack mitigation. The device can decline to evaluate additional attempts even when an application keeps submitting them.

This must be handled as a security state. Retrying in a tight loop, prompting repeatedly for the same secret, or moving the workflow between services can extend the incident and obscure the original authorization failure. A successful authorization for a different object is not a reliable way to reset the protection.

What to check

  • Stop automatic retries and record the number and timing of preceding authorization failures.
  • Use the platform's documented administrative recovery or cooldown process; do not attempt to bypass anti-hammering by recreating or clearing security material without understanding the impact.
  • Review the user interaction and credential-validation path that supplied the authorization value.

References


Looking for a different code? Search another status or error code.