| Previous | Next |
| TRUST_E_TIME_STAMP | TRUST_E_MALFORMED_SIGNATURE |
TRUST_E_BAD_DIGEST
TRUST_E_BAD_DIGEST means that the calculated digest did not match the value protected by the digital signature. This is a signature-integrity result, not merely a missing-root or expired-certificate result.
Preserve evidence before retrying
- Verify that the bytes being checked are the original downloaded or deployed object and were not changed in transit or at rest.
- Record the exact verification policy, file path, file hash, and signer information.
- If a product has an update or repair path, obtain the file again from the publisher rather than suppressing signature validation.
A valid-looking certificate in the file does not make the object trustworthy when the signed digest itself fails verification.
Microsoft: certificate and trust return values
Looking for a different code? Search another status or error code.