| Previous | Next |
| STATUS_RWRAW_ENCRYPTED_INVALID_EDATAINFO_FILERANGE | STATUS_INVALID_TASK_NAME |
STATUS_RWRAW_ENCRYPTED_INVALID_EDATAINFO_PARAMETER
Another encrypted-data metadata field failed validation
STATUS_RWRAW_ENCRYPTED_INVALID_EDATAINFO_PARAMETER is the general parameter-validation member of the raw EFS EDATAINFO status family. The neighboring NTSTATUS values separately identify an invalid file offset and an invalid offset/length range. This value therefore points to some other parameter in the encrypted-data information consumed by raw EFS I/O.
Microsoft’s public raw encrypted-file APIs are callback based. They do not require a backup application to parse and rebuild an EDATAINFO structure. That design is important for diagnosis: an application using the supported API should treat the exported raw data as opaque and preserve it, rather than “normalizing” unknown fields or constructing internal metadata from a plaintext file description.
Compare a known-good export/import path with the failing stream and identify the first layer that modifies the bytes or associates them with a different context. If kernel or file-system code is generating the lower-level metadata directly, use the matching implementation and symbol information to validate the exact field; the NTSTATUS constant alone is not a public structure specification.
What to inspect
- Raw export bytes before and after every storage or transport transformation.
- Import mode, source/destination file identity, and callback return sizes for the complete stream.
- Any private code that parses or reconstructs EFS raw metadata instead of passing the callback stream through unchanged.
References
- Microsoft: Backup and Restore of Encrypted Files
- Microsoft: ReadEncryptedFileRaw
- Microsoft: WriteEncryptedFileRaw
- Microsoft Open Specifications: Encrypting File System overview
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.