| Previous | Next |
| WINBIO_E_INVALID_KEY_IDENTIFIER | WINBIO_E_KEY_IDENTIFIER_BUFFER_TOO_SMALL |
WINBIO_E_KEY_CREATION_FAILED
WINBIO_E_KEY_CREATION_FAILED is specific to secure sensor provisioning. In the engine adapter v4 flow, Windows Biometric Framework passes key material to EngineAdapterCreateKey; the adapter stores or imports the key in the sensor’s trusted environment and returns an opaque identifier for later secure matching.
Diagnose the secure sensor key-provisioning step
- Correlate the error with sensor firmware, adapter version, and secure-sensor capability rather than ordinary biometric enrollment quality.
- Check whether the failure occurs on first provisioning, after sensor/TPM reprovisioning, or after a firmware/driver change.
- Do not log the key material passed to the adapter; record only operation status, unit identity, and non-secret key-identifier metadata.
Secure biometrics relies on a secret that is not exposed to the normal OS after provisioning. A failure to create that key prevents the later HMAC authorization protocol from functioning even if the sensor can capture images. Re-enrolling a finger does not repair a sensor key-storage failure by itself. The adapter and secure hardware provisioning path are the relevant boundary.
Secure sensor requirements · EngineAdapterCreateKey
Looking for a different code? Search another status or error code.