What does NTSTATUS 0xC021001B (STATUS_FVE_AUTH_INVALID_APPLICATION) mean?

STATUS_FVE_AUTH_INVALID_APPLICATION

Meaning and context of STATUS_FVE_AUTH_INVALID_APPLICATION

BitLocker detected a mismatch in a boot application hash used by its validation path. The code is not a generic application-crash result; it is a boot-integrity signal relevant to the protector that guards the OS volume key.

Preserve the recovery path and record recent updates to firmware, boot applications, boot manager, or security policy. Compare this with STATUS_FVE_AUTH_INVALID_CONFIG: that status is about BCD configuration, whereas this one identifies a boot application measurement mismatch.

Do not disable Secure Boot or delete boot entries merely to avoid a recovery prompt. Use recovery to start the system when authorised, then make the intended boot-chain change through the documented deployment or maintenance process.

BitLocker preboot recovery guidance | TCG TPM 2.0 Library | BitLocker recovery overview

Native status interpretation

STATUS_FVE_AUTH_INVALID_APPLICATION is 0xC021001B, an NTSTATUS error value. AllStat describes it as “A boot application hash does not match the hash computed when BitLocker was turned on.”