| Previous | Next |
| RPC_E_NO_SYNC | RPC_E_INVALID_STD_NAME |
RPC_E_FULLSIC_REQUIRED
COM security requires a full subject-issuer certificate chain principal
RPC_E_FULLSIC_REQUIRED is HRESULT 2147549473 (0x80010121) from winerror.h. The documented description is “Full subject issuer chain SSL principal name expected from the server.” The relevant context is the COM/RPC call control, message filtering, apartment routing, marshaling, security negotiation, or remote object lifetime.
Where it is encountered
- Cross-apartment or cross-process COM method invocation and activation.
- STA message filtering, reentrancy, call cancellation, timeout, or retry handling.
- DCOM security initialization, proxy/stub marshaling, OBJREF processing, and server object lifetime.
The immediate focus is SSL or Schannel principal-name validation configured to require full subject issuer chain form rather than a shorter principal.
What to verify
Verify that the server certificate chain, principal-name syntax, authentication service, and COM security capability flags are captured.
Difference from nearby HRESULTs
It requests a richer certificate principal representation; RPC_E_INVALID_STD_NAME rejects malformed msstd: syntax.
Correct handling and recovery
Construct the full required principal from validated certificate chain data or align security configuration on both ends. Never disable validation to bypass the mismatch.
Practical scenario
A client supplies only a common name while the server policy requires the full subject/issuer chain. Deployment generates the expected principal from the trusted certificate.
References
Looking for a different code? Search another status or error code.