What does HRESULT 0xC00D7171 (MF_E_PEAUTH_PUBLICKEY_REVOKED) mean?

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

PEAuth authentication rejected a public key that is revoked by protected-media trust policy.

Previous	Next
MF_E_INSUFFICIENT_BUFFER	MF_E_GRL_ABSENT

MF_E_PEAUTH_PUBLICKEY_REVOKED

MF_E_PEAUTH_PUBLICKEY_REVOKED is a specific revocation result in the PEAuth path. It is narrower than a generic untrusted response: the authentication public key itself is rejected by revocation policy.

Correlate the key failure with revocation records

Preserve the first PEAuth HRESULT and the component identity associated with the handshake.
When revocation details are exposed, record the public-key hash. MFRR_COMPONENT_HASH_INFO includes a dedicated rgPublicKeyHash field as well as the component name and revocation reason.
Record the GRL version so the trust decision can be correlated with the revocation data installed on the machine.

Do not bypass the public-key check or repeatedly reuse the same protected session. Revocation is a policy decision. The relevant path is renewal or servicing that supplies trusted components and current revocation data, followed by creation of a fresh protected environment.

Microsoft: public-key hash in revoked component data · Microsoft: GRL revocation and renewal · Microsoft: protected-environment handshake access

Looking for a different code? Search another status or error code.