| Previous | Next |
| SDIAG_E_DISABLED | SDIAG_E_CANNOTRUN |
SDIAG_E_TRUST
SDIAG_E_TRUST — 0x803C0107
SDIAG_E_TRUST means that WTP rejected the pack because its signature, catalog, publisher trust, or package integrity did not satisfy the platform’s trust checks.
Operational meaning
A troubleshooting pack has distinct initialization, detection, resolution, and verification phases. Keep the ordinary result report together with the debug report, and identify whether the pack script, PowerShell host, managed host, resource loader, trust check, or verifier produced the first failure.
A PowerShell execution-policy change cannot repair a troubleshooting package whose signed catalog no longer matches.
Build the incident record
- Pack/catalog/signature hashes, signer chain, timestamp, and trust-store result
- Files modified after signing and package extraction/repackaging history
- Publisher metadata shown by WTP and enterprise trust policy
- WinVerifyTrust/SignTool result and revocation/time context
Tests that separate the causes
- Verify the untouched published package on a clean trusted machine.
- Rebuild and sign after the final file set is frozen.
- Compare an intentionally modified file to ensure integrity validation triggers.
How to interpret the comparison
Read the comparison results in this order:
Repair without losing evidence
Apply the smallest change that addresses the first rejected condition: Restore the original package or rebuild/catalog/sign it with an approved certificate and deployment process.
Close the incident only when the final package verifies offline/online as required, displays the expected publisher, and tampering remains detectable.
Technical references
Use these sources for the formal contract, then combine them with evidence from the returning application or service for this condition:
Looking for a different code? Search another status or error code.