| Previous | Next |
| STATUS_CSS_KEY_NOT_PRESENT | STATUS_CSS_SCRAMBLED_SECTOR |
STATUS_CSS_KEY_NOT_ESTABLISHED
The CSS session has not reached the key-established state required by the request
STATUS_CSS_KEY_NOT_ESTABLISHED describes protocol state in the Windows DVD copy-protection path. A protected DVD session begins with IOCTL_DVD_START_SESSION, which returns an authentication grant identifier (AGID). Subsequent key operations use the session identifier and DVD_COPY_PROTECT_KEY data to report or send the key types involved in the authentication sequence.
This status is therefore different from a missing key in one sector. The immediate question is whether the operation requiring a session key was issued before the challenge and bus-key exchange had established the required state, or whether a previously valid session was ended or invalidated. Logging only the final read request hides the useful sequence information.
Capture the ordered DVD IOCTL trace. Include the AGID returned at session start, every requested or submitted DVD_KEY_TYPE, and any explicit session end or AGID invalidation. Reopening the file or retrying the same encrypted read is not a protocol repair if the required key exchange never completed.
What to inspect
- The
IOCTL_DVD_START_SESSIONresult and AGID used by subsequent copy-protection requests. - The exact order of challenge-key, bus-key and later key-dependent operations before the failure.
- Whether the session was ended, invalidated, or replaced while another request still referenced its identifier.
References
- Microsoft: IOCTL_DVD_START_SESSION
- Microsoft: IOCTL_DVD_READ_KEY
- Microsoft: DVD_KEY_TYPE
- Microsoft: DVD_COPY_PROTECT_KEY
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.