| Previous | Next |
| TRUST_E_SUBJECT_FORM_UNKNOWN | DIGSIG_E_ENCODE |
TRUST_E_SUBJECT_NOT_TRUSTED
TRUST_E_SUBJECT_NOT_TRUSTED means that the selected trust provider does not trust the subject for the requested action. A cryptographically valid certificate chain can still fail the policy that applies to code signing, a document, or another subject type.
Identify the policy decision
- Log the action GUID, subject type, and verification policy used by the caller.
- Check whether the signer, publisher, or certificate usage is allowed by the applicable enterprise or application policy.
- Distinguish this result from an invalid signature: policy rejection can occur after successful cryptographic validation.
The correct fix is to use a subject trusted for that action or change an intentional policy, not to disable trust verification globally.
Microsoft: certificate and trust return values
Looking for a different code? Search another status or error code.