Update Root Certificates: Open Command Prompt as Administrator
👇 See all 3 solutions below
What is Error 6012?
Windows System Error Code 6012, known as ERROR_BAD_RECOVERY_POLICY, is a Networking error that occurs during advanced networking, Winsock, and IPSec. The error indicates that: Recovery policy configured for this system contains invalid recovery certificate. When this error is encountered, the Windows operating system was unable to complete the requested operation within the networking stack subsystem. The error code 6012 is returned by the GetLastError() function and provides developers with a specific identifier to diagnose the root cause of the failure. The symbolic name ERROR_BAD_RECOVERY_POLICY maps directly to this numeric code and is commonly referenced in Microsoft documentation, developer forums, and system logs. Understanding this error and its context within advanced networking, Winsock, and IPSec is essential for effective troubleshooting.
Common Causes
- System date/time is incorrect, causing certificate validation to fail
- Root certification authorities are outdated or missing
- TLS protocol mismatch between client and server
- Antivirus or proxy is intercepting SSL traffic with an untrusted certificate
Resolving Cryptographic Provider and Certificate Chain Errors (CRYPT_E_BAD_MSG)
An encyclopedia on resolving failing SSL/TLS handshake errors, root certificate trust issues, and Windows Cryptographic Services failures.
Read the full guide →Step-by-Step Solutions
- Open Command Prompt as Administrator
- Run: certutil -generateSSTFromWU roots.sst
- This downloads the latest root certificates from Microsoft
- Open certmgr.msc → Trusted Root Certification Authorities → import roots.sst
- Restart your browser and applications
Video Tutorials
Diagnostic Command
Run this PowerShell command to find related events in your system log:
Get-EventLog -LogName System -Newest 20 | Where-Object {$_.Message -like "*6012*" -or $_.Message -like "*ERROR_BAD_RECOVERY_POLICY*"} | Format-List
💡 Open PowerShell as Administrator, paste the command above, and press Enter.
Prevention Tips
- Keep your system clock synchronized (Settings → Time & Language → Sync now)
- Install Windows Updates regularly to keep root certificates current
- Disable SSL inspection in antivirus software if it causes certificate errors