| Previous | Next |
| ERROR_CS_ENCRYPTION_UNSUPPORTED_SERVER | ERROR_CS_ENCRYPTION_NEW_ENCRYPTED_FILE |
ERROR_CS_ENCRYPTION_EXISTING_ENCRYPTED_FILE
The server is requesting a CSE-aware reopen of an existing file
The file-system open algorithm returns the corresponding NTSTATUS when an encrypted stream already exists but the SMB open did not supply the required user certificate. The status is therefore a mode transition, not evidence that the file is damaged.
The client should preserve the target identity and continue with the documented CSE flow. Replacing the encrypted file with a plaintext copy or retrying the same normal open loses the distinction the server is reporting.
What to inspect
- Whether the first open omitted the user certificate and whether the retry supplies it.
- The exact SMB file name, create disposition, and handle used across the transition.
- Certificate membership in the file's authorized user list.
- Copy tools that ignore this status and create an unencrypted replacement.
References
- Microsoft Open Specifications: Open of an existing encrypted file
- Microsoft Open Specifications: SMB open handling
- Microsoft Open Specifications: NTSTATUS values
- Microsoft Open Specifications: Win32 error codes
Looking for a different code? Search another status or error code.