| Previous | Next |
| WINBIO_E_CALIBRATION_BUFFER_INVALID | WINBIO_E_KEY_CREATION_FAILED |
WINBIO_E_INVALID_KEY_IDENTIFIER
WINBIO_E_INVALID_KEY_IDENTIFIER belongs to the secure biometric engine-adapter v4 protocol, not a generic application key store. Windows Biometric Framework provisions a secret shared between a secure sensor and TPM 2.0, and the engine adapter later receives an opaque key identifier created by EngineAdapterCreateKey.
Trace secure sensor provisioning and identifier lifetime
- Verify that the key identifier supplied to
EngineAdapterIdentifyFeatureSetSecurecame from the corresponding secure sensor provisioning flow. - Do not manufacture, persist across unrelated sensors, or reinterpret the identifier as the key itself.
- Preserve WBF operational logs around sensor enumeration and reprovisioning; Microsoft specifies that this result causes sensor and TPM reprovisioning.
The secure identify contract uses the key referenced by the identifier to compute an HMAC over a TPM nonce and the identified account SID. Microsoft explicitly requires this HRESULT when the key cannot be used for any reason. That makes repeated retries with the same identifier the wrong recovery model; investigate why the sensor-side key association became unusable and allow the framework to reprovision the trust relationship.
Secure biometric sensor protocol · Secure identify callback
Looking for a different code? Search another status or error code.