Skip to content

0x80310086: FVE_E_POLICY_PROHIBITS_SELFSIGNED

Windows Error Code Lookup: Decode Windows error codes: Win32, HRESULT (0x80070005), NTSTATUS, Windows Update, msiexec and blue-screen stop codes, with what to check next.

Paste the number from an error dialog, event log, script or setup log: 0x80070005, 80070005, -2147024891, 1603, 0xC0000005, a stop code like 0x7E, a name like E_ACCESSDENIED, or a few words. You get every way Windows could mean that number (an HRESULT often wraps a Win32 error, so 0x80070005 is "Access is denied" too), its parts decoded, and what to check for the common ones. Names and messages come from the Windows SDK headers and Windows' own message tables; see Microsoft's System Error Codes and [MS-ERREF] for the full references.

Try: 0x80070005, 1603, 0xC0000005, 0x800F081F, 0x8024402C, 0x7E, access denied

0x80310086 = 2,150,695,046 = -2144272250

HRESULT 0x80310086

FVE_E_POLICY_PROHIBITS_SELFSIGNED

BitLocker Drive Encryption cannot be applied to this drive as currently configured because of Group Policy settings. The certificate you provided for drive encryption is self-signed. Current Group Policy settings do not permit the use of self-signed certificates. Obtain a new certificate from your certification authority before attempting to enable BitLocker.

Severity (bit 31)1: failure
Customer (bit 29)0: Microsoft
NTSTATUS inside (bit 28)0
Facility49 (0x031) FVE
Code134 (0x0086)