| Previous | Next |
| CERT_E_UNTRUSTEDCA | CERT_E_INVALID_NAME |
CERT_E_INVALID_POLICY
CERT_E_INVALID_POLICY means that policy processing found an invalid or unacceptable certificate policy. The required policy can come from the caller, an enterprise configuration, or a special chain-policy rule.
Inspect the policy context
- Record the policy OID or verification policy selected by the caller and the chain element where it failed.
- Inspect certificate-policy and application-policy extensions in the supplied chain.
- Align the issued certificate profile with the policy required by the relying application instead of accepting a superficially similar certificate.
The same certificate can be acceptable for one policy and rejected for another, so include the policy name in diagnostics.
Microsoft: certificate chain policy status
Looking for a different code? Search another status or error code.