Resolve Windows Activation Error 0xC004D302 | Windows 7 Error

You may receive error message 0xC004D302 when windows activation problem, invalid product key ..., this page contains some useful information to repair your computer error code 0xC004D302, if you fixed this error from this help article, you can email us (windowsxpregistrycleaner@gmail.com ) give your feedback, and we hope you can share this page to your friends if they need like you, thanks.

Windows 7 - activate error code 0xC004D302

On already activated KMS Host a Windows Activation window comes up with the error, an error has occurred:

"Code: 0xC004D302
Description: The Security processor reported that the trusted data store was rearmed."

Cause:

Changes in the default permissions of the "C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys"
Corruption in the Licensing Files
If you have run the slmgr.vbs /rearm command and try to run any other activation command(/dlv or /dli for example) prior to rebooting you will experience this error. You must reboot after using the slmgr.vbs /rearm command prior to attempting activation.

How to repair?

To resolve this issue, if you continue to encounter this error after restarting the computer, proceed with the following:

Option 1:

1. Launch a cmd window with administrative privs (i.e. using run as administrator).

2. In this cmd window, run the following command:
cacls %systemdrive%\ProgramData\Microsoft\Crypto\RSA\MachineKeys

3. Collect output of this command

Review the output. These ACLS (pasted below for reference) of this folder on the machine are wrong!

C:\programdata\microsoft\crypto\rsa\MachineKeys
BUILTIN\Administrators:(OI)(CI)F
BUILTIN\Administrators:F
CREATOR OWNER:(OI)(CI)(IO)F
NT AUTHORITY\SYSTEM:(OI)(CI)F
BUILTIN\Users:(OI)(CI)R

The actual ACLs (you can try this on any Vista machine) should be -
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys Everyone:(special access:)
READ_CONTROL
SYNCHRONIZE
FILE_GENERIC_READ
FILE_GENERIC_WRITE
FILE_READ_DATA
FILE_WRITE_DATA
FILE_APPEND_DATA
FILE_READ_EA
FILE_WRITE_EA
FILE_READ_ATTRIBUTES
FILE_WRITE_ATTRIBUTES

BUILTIN\Administrators:F

This explains the activation failure. Now we need to find out the culprit changing ACLs on this folder.

Vista activation (SLSvc.exe) uses MSDN documented Win32 CAPI (Cryptography API) to perform some cryptographic operations. SLSvc.exe runs as network-service and CAPI calls by SLSvc.exe fail if the ACLs on this folder change from the default values. If the ACLs on this folder change, then the same CAPI call from any application (not running as local-system or administrator) will fail. The current ACLs on this machine only provide read-access to non-admins (including NetworkService account) and therefore CAPI calls from SLSvc are failing.

The easiest way to restore the right ACL would be to use cacls.exe to set it.

The command for that would be:
cacls %systemdrive%\ProgramData\Microsoft\Crypto\RSA\MachineKeys /S:"D:PAI(A;;0x12019f;;;WD)(A;;FA;;;BA)"

Although it may appear so at first glance, this problem isn't limited to a specific hardware platform. This is because these older systems do not contain the ACPI_SLIC licensing table in the BIOS. The newer machines that have this table must go through the cryptographic checks (and thus they use the MachineKeys folder when doing so). Most OEMs started incorporating the ACPI_SLIC table in mid to late 2006.

ACL changes are not logged in event viewer. If there's not a suspect already, the customer can audit object access after changing the MachineKeys folder to reflect the correct permissions to see what changes these permissions. (Check the More Information Section for steps to enable Auditing on "C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys folder")
Option 2:

1. Launch a command prompt window with administrative privs (i.e. using run as administrator).

2. Now Run the following command at the command prompt, (one after the other)

slmgr -upk //(uninstalls product key)
slmgr -rilc //(reinstalls licence files)
slmgr -ipk <put the apropriate KMS Host Key>
slmgr -ato //(activates the machine)

This will now activate the KMS host and is ready to activate the KMS Clients.

Read our site other related articles...

Make Your Windows 7 Boot Time Faster from Dual-Boot System

Why Your PC Has a Windows Registry Error

Why My Computer Freezes Randomly and How to Fix

How to Backup the Windows Registry in Windows 7/Vista/XP

Fix Blue Screen Error at Shutdown on Windows 7 System

Related page search on our site:

activation

Microsoft help links for error 0xC004D302

PC repair tool to fix code 0xC004D302

If you still haven't fixed the windows 7 0xC004D302 problem:

1. Please try the tool windows registry optimizer, it safely cleans PC errors & invalid entries cause slow speed, blue screen, deadlock errors and crashing, and repair registry problems to speedup your computer performances. It is easy to use. And you can scan your PC errors for free first!

2. Some pc error is related to driver problems, Driver Update software is designed to quickly locate the most current drivers specific to your computer system, you can run a free scan for your pc driver update first.

That is we find the informations to fix 0xC004D302 error in windows 7, hope our page is helpful to you, if you still need more guide detail, please contact the microsoft support for further help.

www.pchealthadvisor.com

(Simple Steps:>>Download >>Install >>Free Scan >>Repair. that's all.)

PC error? Windows error? Registry error? - Find and fix on windowsxpregistrycleaner.com. Thanks for your visiting and we wait for you using our site again in the future! :)

Search Computer Errors on Our Site