Windows error 8237 (ERROR_DS_CONFIDENTIALITY

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: ERROR_DS_CONFIDENTIALITY_REQUIRED this request requires a secure connection.

Previous	Next
ERROR_DS_UNAVAILABLE_CRIT_EXTENSION	ERROR_DS_INAPPROPRIATE_MATCHING

ERROR_DS_CONFIDENTIALITY_REQUIRED

ERROR_DS_CONFIDENTIALITY_REQUIRED (0x0000202D) is an Active Directory Domain Services LDAP result. The LDAP operation requires a protected connection with confidentiality, such as LDAPS or an authenticated SASL security layer.

What to check

Confirm whether the request carries credentials or changes directory data and therefore requires encryption.
Validate the LDAPS certificate, name match, trust chain, and TCP 636 reachability when using LDAPS.
Do not downgrade to clear-text simple bind to bypass the error.

Useful command

Test-NetConnection "<dc-fqdn>" -Port 636

Microsoft: Troubleshoot LDAPS · Microsoft: LDAP signing · Microsoft: AD DS LDAP operations

Looking for a different code? Search another status or error code.