Security Exceptions

AnonymousLogonsAreNotAllowed

The service does not allow you to log on anonymously.

AtLeastOneContractOperationResponseRequiresProtectionLevelNotSupportedByBinding

The response message must be protected. This is required by an operation of the specified contract. The protection must be provided by the specified binding.

BadContextTokenFaultReason

The security context token expired or is not valid. The message was not processed.

BasicHttpMessageSecurityRequiresCertificate

BasicHttp binding requires that BasicHttpBinding.Security.Message.ClientCredentialType be equivalent to the BasicHttpMessageCredentialType.Certificate credential type for secure messages. Select Transport or TransportWithMessageCredential security for UserName credentials.

BindingDoesNotSupportProtectionForRst

The specified binding for the specified contract is configured with SecureConversation, but the authentication mode is not able to provide the request/reply-based integrity and confidentiality required for the negotiation.

CachedNegotiationStateQuotaReached

The service cannot cache the negotiation state as the specified capacity has been reached. Retry the request.

CannotDetermineSPNBasedOnAddress

Client cannot determine the Service Principal Name based on the identity in the specified target address for the purpose of SspiNegotiation/Kerberos. The target address identity must be a UPN identity (like acmedomain\\alice) or SPN identity (like host/bobs-machine).

CannotFindCertForTarget

Cannot find The X.509 certificate using the specified search criteria: StoreName, StoreLocation, FindType, FindValue for the specified target.

CannotFindNegotiationState

Cannot find the negotiation state for the specified context.

CannotImportProtectionLevelForContract

The policy to import a process cannot import a binding for the specified contract. The protection requirements for the binding are not compatible with a binding already imported for the contract. You must reconfigure the binding.

CannotIssueRstTokenType

Cannot issue the token or specified type.

CannotPerformImpersonationOnUsernameToken

Impersonation using the client token is not possible. The specified binding for the specified contract uses the Username Security Token for client authentication with a Membership Provider registered. Use a different type of security token for the client.

CannotReadKeyIdentifier

Cannot read the KeyIdentifier from the specified element with the specified namespace.

CertificateUnsupportedForHttpTransportCredentialOnly

Certificate-based client authentication is not supported in TransportCredentialOnly security mode. Select the Transport security mode.

ClientCertificateNotProvided

The certificate for the client has not been provided. The certificate can be set on the ClientCredentials or ServiceCredentials.

ConfigurationSchemaInsuffientForSecurityBindingElementInstance

The configuration schema is insufficient to describe the non-standard configuration of the following security binding element:

DnsIdentityCheckFailedForIncomingMessage

The identity check failed for the incoming message. The expected domain name system (DNS) identity of the remote endpoint was specified. The remote endpoint provided the specified domain name system (DNS) claim. If this is a legitimate remote endpoint, you can fix the problem by specifying domain name system identity as the identity property of EndpointAddress when creating channel proxy.

DuplicateIdInMessageToBeVerified

The specified id occurred twice in the message that is supplied for verification.

ExportOfBindingWithAsymmetricAndTransportSecurityNotSupported

Security policy export failed. The binding contains both an AsymmetricSecurityBindingElement and a secure transport binding element. Policy export for such a binding is not supported.

ExportOfBindingWithTransportSecurityBindingElementAndNoTransportSecurityNotSupported

Security policy export failed. The binding contains a TransportSecurityBindingElement but no transport binding element that implements ITransportTokenAssertionProvider. Policy export for such a binding is not supported. Make sure the transport binding element in the binding implements the ITransportTokenAssertionProvider interface.

FoundMultipleCertsForTarget

Found multiple X.509 certificates using the specified search criteria: StoreName, StoreLocation, FindType, FindValue for the specified target. Provide a more specific find value.

IdentityCheckFailedForIncomingMessage

The identity check failed for the incoming message. The expected identity is specified for the target endpoint.

IncorrectSpnOrUpnSpecified

Security Support Provider Interface (SSPI) authentication failed. The server may not be running in an account with the specified identity. If the server is running in a service account (Network Service for example), specify the account's ServicePrincipalName as the identity in the EndpointAddress for the server. If the server is running in a user account, specify the account's UserPrincipalName as the identity in the EndpointAddress for the server.

InvalidCloseResponseAction

A security session close response was received with the specified invalid action.

InvalidRenewResponseAction

A security session renew response was received with the specified invalid action.

IssuerBindingNotPresentInTokenRequirement

The security token manager requires the bootstrap security binding element to be specified in the token requirement that describes secure conversation. The token requirement is specified as follows.

LsaAuthorityNotContacted

Internal SSL error (refer to Win32 status code for details). Check the server certificate to determine if it is capable of key exchange.

MessagePartSpecificationMustBeImmutable

Message part specification must be made constant before being set.

MissingCustomUserNamePasswordValidator

UserNamePasswordValidationMode.Custom requires CustomUserNamePasswordValidator. Specify the CustomUserNamePasswordValidator property.

NoBinaryNegoToSend

No binary negotiation was sent to the other party.

NoKeyInfoInEncryptedItemToFindDecryptingToken

The KeyInfo value was not found in the encrypted item to find the decrypting token.

NoOutgoingEndpointAddressAvailableForDoingIdentityCheck

No outgoing EndpointAddress is available to check the identity on a message to be sent.

NoPartsOfMessageMatchedPartsToSign

No signature was created because no part of the message matched the supplied message part specification.

NoSignatureAvailableInSecurityHeaderToDoReplayDetection

No signature is available in the security header to provide the nonce for replay detection.

NoSigningTokenAvailableToDoIncomingIdentityCheck

No signing token is available to do an incoming identity check.

NoTransportTokenAssertionProvided

The security policy expert failed. The provided transport token assertion of the specified type did not create a transport token assertion to include the sp:TransportBinding security policy assertion.

OperationCannotBeDoneOnReceiverSideSecurityHeaders

This operation cannot be done on the receiver security headers.

PolicyRequiresConfidentialityWithoutIntegrity

Message security policy for the specified action requires confidentiality without integrity. Confidentiality without integrity is not supported.

PropertySettingErrorOnProtocolFactory

The required property on the specified security protocol factory is not set or has an invalid value.

PublicKeyNotRSA

The public key is not an RSA key.

RequiredMessagePartNotEncryptedNs

The specified required message part was not encrypted.

RequiredMessagePartNotSignedNs

The specified required message part was not signed.

RequiredSecurityTokenNotEncrypted

The specified ' security token with the specified attachment mode must be encrypted.

RequiredSignatureMissing

The signature must be in the security header.

RevertingPrivilegeFailed

The reverting operation failed with the specified exception.

SecureConversationCancelNotAllowedFaultReason

A secure conversation cancellation is not allowed by the binding.

SecureConversationRequiredByReliableSession

Cannot establish a reliable session without secure conversation. Enable secure conversation.

SecurityAuditNotSupportedOnChannelFactory

SecurityAuditBehavior is not supported on the channel factory.

SecurityBindingElementCannotBeExpressedInConfig

A security policy was imported for the endpoint. The security policy contains requirements that cannot be represented in a Windows Communication Foundation configuration. Look for a comment about the SecurityBindingElement parameters that are required in the configuration file that was generated. Create the correct binding element with code. The binding configuration that is in the configuration file is not secure.

SecurityContextDoesNotAllowImpersonation

Cannot start impersonation because the SecurityContext for the UltimateReceiver role from the request message with the specified action is not mapped to a Windows identity.

SecurityListenerClosingFaultReason

The server is not accepting new secure conversations currently because it is closing. Please retry later.

SecuritySessionAbortedFaultReason

The security session was terminated. This may be because no messages were received on the session for too long.

SecuritySessionLimitReached

Cannot create a security session. Retry later.

SecurityTokenParametersHasIncompatibleInclusionMode

The specified binding is configured with a security token parameter that has the specified incompatible security token inclusion mode. Specify an alternate security token inclusion mode.

SecurityVersionDoesNotSupportSignatureConfirmation

The specified SecurityVersion does not support signature confirmation. Use a later SecurityVersion.

SenderSideSupportingTokensMustSpecifySecurityTokenParameters

Security token parameters must be specified with supporting tokens for each message.

SignatureConfirmationNotSupported

The configured SecurityVersion does not support signature confirmation. Use WSSecurityXXX2005 or above.

SignatureNotExpected

A signature is not expected for this message.

SpnegoImpersonationLevelCannotBeSetToNone

The Security Support Provider Interface does not support Impersonation level 'None'. Specify Identification, Impersonation or Delegation level.

SslServerCertMustDoKeyExchange

The specified certificate must have a private key that is capable of key exchange. The process must have access rights for the private key.

TimeStampHasCreationAheadOfExpiry

The security timestamp is invalid because its creation time is greater than or equal to its expiration time.

TimeStampHasExpiryTimeInPast

The security timestamp is stale because its expiration time is in the past. Current time is specified and allowed clock skew is specified.

TokenProviderCannotGetTokensForTarget

The token provider cannot get tokens for the specified target.

TransportDoesNotProtectMessage

The specified binding for the specified contract is configured with an authentication mode that requires transport level integrity and confidentiality. However the transport cannot provide integrity and confidentiality.

TrustDriverVersionDoesNotSupportSession

The configured Trust version does not support sessions. Use WSTrustFeb2005 or above.

UnableToCreateSymmetricAlgorithmFromToken

Cannot create the specified symmetric algorithm from the token.

UnableToFindTokenAuthenticator

Cannot find a token authenticator for the specified token type. Tokens of that type cannot be accepted according to current security settings.

UnexpectedEmptyElementExpectingClaim

The specified element from the specified namespace is empty and does not specify a valid identity claim.

UnsecuredMessageFaultReceived

An unsecured or incorrectly secured fault was received from the other party. See the inner FaultException for the fault code and detail.

UnsupportedSecureConversationBootstrapProtectionRequirements

Cannot import the security policy. The protection requirements for the secure conversation bootstrap binding are not supported. Protection requirements for the secure conversation bootstrap must require both the request and the response to be signed and encrypted.