| Previous | Next |
| ERROR_CS_ENCRYPTION_NEW_ENCRYPTED_FILE | ERROR_ENCRYPTION_POLICY_DENIES_OPERATION |
ERROR_CS_ENCRYPTION_FILE_NOT_CSE
The control request and the open-handle state do not match
A CSE-specific FSCTL is valid only for a file handle participating in the encrypted-file workflow. This error means the SMB client targeted an ordinary or otherwise non-CSE open. The most useful diagnostic evidence is the handle history, not the file's ACL.
Retry and reconnect logic can expose this bug when a client preserves a pending CSE operation but replaces the underlying file identifier. Trace every create response, mode transition, close, reconnect, and FSCTL against the same persistent and volatile file identifiers.
What to inspect
- The SMB file identifier carried by the failing FSCTL.
- The create response that established the handle and whether it requested CSE mode.
- Handle pooling, retry, reconnect, and durable-handle restoration logic.
- Whether the application mistakenly used a CSE control on a plaintext file.
References
- Microsoft: System error codes 6000-8199
- Microsoft Open Specifications: NTSTATUS values
- Microsoft Open Specifications: SMB2 pass-through FSCTL handling
- Linux ksmbd: SMB status definitions
Looking for a different code? Search another status or error code.