locked
[MDM: Windows 8.1] SCEP: error code 0x8009310b RRS feed

  • Question

  • I want to use SCEP with Windows Phone 8.1. The phone gets the SCEP install request through MDM and delivers status 200. It contacts the SCEP service with command GetCACert and then with command GetCACaps. But nothing more happens. The SCEP error code on the device is 0x8009310b. I couldn't find out what this error code means in that case. My SCEP service returns the following to the client requests:

    GetCACert:

    HTTP/1.0 200 OK
    Content-Type: application/x-x509-ca-cert
    
    <DER encoded CA certificate>


    GetCACaps:

    HTTP/1.0 200 OK
    Content-Type: text/plain
    
    POSTPKIOperation
    SHA-1
    DES3

    With other SCEP clients it works. What can the problem be here?

    Wednesday, August 20, 2014 3:42 PM

Answers

All replies

  • The error code means:

    C:\>err 0x8009310b
    # for hex 0x8009310b / decimal -2146881269
      CRYPT_E_ASN1_BADTAG                                            winerror.h
    # ASN1 bad tag value met.
    # 1 matches found for "0x8009310b"

    The ERR utility can be downloaded from here: http://www.microsoft.com/en-us/download/details.aspx?id=985

    This is a Cryptographic error meaning that the certificate response was badly formatted. Cryptographic errors are documented here: http://msdn.microsoft.com/en-us/library/windows/desktop/aa375564(v=vs.85).aspx


    Windows Store Developer Solutions, follow us on Twitter: @WSDevSol|| Want more solutions? See our blog

    Wednesday, August 20, 2014 8:54 PM
  • Thanks. Is there a way to find out which ASN.1 tag is bad for Windows Phone?
    Thursday, August 21, 2014 8:14 AM
  • Why this post was marked as answer? It does not solve the problem at all. Anyone can lookup error code, but what the cause of the error? It's definitely client side problem since device does not even try to make PKIOperation request and therefore server does not send any structure that can contain "ASN1 bad tag".
    Tuesday, April 5, 2016 9:38 AM