English 
Tiếng ViệtWindows Event Log
Provider registration, key lifecycle, authentication and backend correlation.
WINDOWS OPERATIONS
Errors, diagnostics and rollback
The support contract defines observable events, stable error categories, retry decisions and a safe rollback path.
01
Diagnostic layers
NCrypt status
SECURITY_STATUS/HRESULT mapping with retryability.
Backend trace
HSM/QSCD/Trusted SIC correlation without exposing secrets.
Support bundle
Versions, configuration, redacted logs and test identifier.
02
Error categories
| Category | Example | Expected action |
|---|---|---|
| Configuration | Provider not registered | Repair/reinstall; do not retry operation blindly |
| Authentication | PIN/approval unavailable | Prompt or fail closed under policy |
| Policy | Algorithm/key operation denied | Change approved profile, not application workaround |
| Backend | HSM/provider unavailable | Apply approved failover or return unavailable |
| Data | Invalid digest/signature format | Reject and record validation detail |
| Lifecycle | Key/certificate mismatch | Rebind or roll back under controlled procedure |
03
Rollback checklist
- Stop new key creation.
- Preserve audit and provider configuration.
- Restore prior signed provider package.
- Verify existing key/certificate access.
- Run the rollback test corpus.
- Close the change record with evidence.