Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
This article covers known problems, common errors, and recommended fixes for applications that use the Microsoft Information Protection (MIP) SDK. For general questions about the SDK, see MIP SDK FAQs.
Web app initialization
Problem: Why is my web application failing to initialize with InternalError: 'KeyStoreWin32::OpenKey failure: NCryptOpenKey:-2147024894'?
The Policy SDK can fail to load a profile during app initialization. Set WEBSITE_LOAD_USER_PROFILE=1 in the environment variable settings of your web app and restart the application.
- Name: WEBSITE_LOAD_USER_PROFILE
- Value: 1
Problem: Why does my application fail with KeyStoreWin32::OpenKey failure: NCryptOpenKey:-2146893788 when OnDiskEncrypted caching is configured?
Windows might create temporary profiles when your sign-in profile is unavailable. Reading from the Windows registry for OnDiskEncrypted caching with this temporary profile causes the OpenKey failure in the MIP SDK log, and Windows operating system event logs capture it as Event IDs 1511 and 1515. To resolve this problem, contact your administrator to fix the underlying temporary-profile problem.
Error: "File format not supported"
Problem: Why do I get the following error when attempting to protect or label a PDF file?
File format not supported
This exception results from attempting to protect or label a PDF file that's digitally signed or password protected. For more information about protecting and labeling PDF files, see New support for PDF encryption with Microsoft Information Protection.
Error: "NoPolicyException: Label policy didn't contain data"
Problem: Why do I get the following error when trying to read a label or list labels by using the MIP SDK?
NoPolicyException: Label policy didn't contain data, CorrelationId=GUID, CorrelationId.Description=PolicyProfile, NoPolicyError.Category=SyncFile, NoPolicyError.Category=SyncFile
This error indicates that a label policy isn't published in the Microsoft Purview portal. To configure the labeling policy, follow Create and configure sensitivity labels and their policies.
If a labeling policy is published, confirm that the user account is included in any groups that are part of the published to section of the label policy configuration. For more information, see Create and publish sensitivity labels.
External users, including guest users, can't access another organization's label policies. To accommodate these users, implement a retry mechanism. If a NoPolicyException is thrown, set the FileEngineSettings property ProtectionOnlyEngine to true and retry the request. Labeling operations aren't available for that IFileEngine instance, but protection operations are.
Error: "System.ComponentModel.Win32Exception: LoadLibrary failed"
Problem: Why do I get the following error when using the MIP SDK .NET wrapper?
System.ComponentModel.Win32Exception: LoadLibrary failed for: [sdk_wrapper_dotnet.dll] when calling MIP.Initialize().
Your application doesn't have the required runtime, or you didn't build it as Release. For more information, see Ensure your app has the required dependencies.
Error: "ProxyAuthError exception"
Problem: Why do I get the following error when using the MIP SDK?
ProxyAuthenticationError: Proxy authentication is unsupported
The MIP SDK doesn't support authenticated proxies. To fix this message, ask proxy administrators to set the Microsoft Purview Information Protection service endpoints to bypass the proxy. The Office 365 URLs and IP address ranges page lists those endpoints. The MIP SDK requires that *.protection.outlook.com (row 9), the Microsoft Purview Information Protection service endpoints (row 73), and substrate.office.com (part of the *.office.com endpoints) bypass proxy authentication.
Error: "Unknown error" when labeling an image file by using a stream output
Problem: Why do I get an "unknown error" when I attempt to add or remove a label or protection from an image file type by using a stream for output?
When you use a stream for output, the stream must have both read and write access to modify the label or protection for an image file.