NS_E_DRM_INVALID_APPCERT (0XC00D277C) Fix - DRM Certificate Problem
This DRM error usually means Windows Media Player can't verify a certificate. The quick fix is resetting the DRM folder. Here's exactly how to do it.
Yeah, that DRM error is annoying. It pops up right when you're trying to play a protected file — a WMA track you bought years ago, or some corporate training video. I've seen this exact 0XC00D277C code on Windows 7, 8, and 10 machines.
The Quick Fix: Reset the DRM Store
Skip all the nonsense about reinstalling Windows Media Player or running SFC scans (I've tried, they don't touch this). The only reliable fix is deleting the DRM folder and letting Windows rebuild it from scratch.
- Close any media player — Windows Media Player, VLC, anything that might be using DRM.
- Open File Explorer and type this into the address bar:
%ALLUSERSPROFILE%\Microsoft\Media Player\ - Look for a folder named DRM. If you see it, right-click and delete it. You'll need admin rights — click 'Continue' if prompted.
- Now open Windows Media Player again. It'll recreate the DRM folder fresh.
- Try playing the file that gave the error. 9 times out of 10, it works.
Important: If you can't delete the folder because 'file in use', open Task Manager (Ctrl+Shift+Esc), kill any wmplayer.exe or drmclnt.exe processes, then try again.
Why This Works
The 0XC00D277C error is literally Windows saying 'I can't verify the certificate in my DRM store.' That store is a folder of encrypted certificates and licenses. Over time — especially after Windows updates or moving between machines — one or more of those certificates gets corrupted or goes out of sync. Deleting the folder forces Windows to rebuild the certificate chain from scratch when it next needs to play a protected file. It's like clearing a corrupted cache.
Had a client last month whose entire print queue died because of this — well, not the print queue, but his media library. He'd upgraded from Windows 7 to 10, and every single WMA track gave this error. Reset the DRM folder, done.
Less Common Variations
Variation 1: The Folder Won't Delete
Sometimes Windows locks the DRM folder even after killing media processes. Try this:
- Boot into Safe Mode (hold Shift while clicking Restart, then choose Troubleshoot > Advanced Options > Startup Settings > Restart > Safe Mode).
- Delete the DRM folder there.
- Reboot normally.
Variation 2: Multiple User Accounts
Each user account has its own DRM store. If only one user gets the error, check %LOCALAPPDATA%\Microsoft\Media Player\DRM for that user. Delete it the same way.
Variation 3: Corporate or Domain-Joined Machines
Group Policy sometimes locks the DRM folder. You'll need an admin to disable the 'Turn off DRM' policy under Computer Configuration > Administrative Templates > Windows Components > Windows Media Player. Then retry the delete.
Prevention (So You Don't See This Again)
Honestly? The biggest trigger is swapping drives or doing major Windows upgrades. If you're about to upgrade, back up your media files but don't back up the DRM folder — let it rebuild fresh. Also, avoid running Windows Media Player as admin unless you really need to; that creates permission mismatches in the DRM store.
And if you're still using Windows Media Player for DRM-heavy content, consider moving to something like VLC with libdvdcss or just re-ripping your CDs to MP3. DRM is a mess and Microsoft hasn't touched that component meaningfully in over a decade. Why fight it?
Was this solution helpful?