このセクションでは、Windows OS で発生する可能性のある同期の問題と、その修正方法について説明します。
データ保護 API のエラーのため同期できない
Chrome ブラウザで、データ保護 API エラーにより Endpoint Verification を同期できないというエラーが表示されることがあります。
エンドポイント検証は、デバイスの初回登録時に暗号鍵を Windows レジストリに保存します。その後の同期では、Windows Data Protection API を使用してこのキーにアクセスします。Endpoint Verification が鍵の復号時にエラーが発生すると、同期エラーが発生することがあります。これは、別のユーザーによる暗号化が原因で発生することがよくあります。この問題は、S4U のスケジュール設定されたタスク、古い Chrome バージョン、Windows 構成の問題、マシンまたはユーザーの不適切なリセットが原因で発生することがあります。
Windows では、Endpoint Verification はデバイス上の情報を読み取ることができます。これを行うために、Endpoint Verification は Windows API を使用します。この API では、デバイスが委任に対して信頼できるものである必要があります。また、現在のユーザー アカウントが委任を許可するように構成されている必要があります。SEC_E_DELEGATION_REQUIRED の問題は Windows で発生し、API オペレーションの失敗につながる可能性があります。
[[["わかりやすい","easyToUnderstand","thumb-up"],["問題の解決に役立った","solvedMyProblem","thumb-up"],["その他","otherUp","thumb-up"]],[["わかりにくい","hardToUnderstand","thumb-down"],["情報またはサンプルコードが不正確","incorrectInformationOrSampleCode","thumb-down"],["必要な情報 / サンプルがない","missingTheInformationSamplesINeed","thumb-down"],["翻訳に関する問題","translationIssue","thumb-down"],["その他","otherDown","thumb-down"]],["最終更新日 2025-09-04 UTC。"],[[["\u003cp\u003eThis guide provides solutions for Endpoint Verification synchronization issues encountered by users on their devices.\u003c/p\u003e\n"],["\u003cp\u003eSync problems can occur on both macOS and Windows operating systems, each with specific causes and troubleshooting steps.\u003c/p\u003e\n"],["\u003cp\u003eOutdated Chrome browser versions (earlier than 110) can lead to sync failures, requiring an update to resolve the problem.\u003c/p\u003e\n"],["\u003cp\u003eKeychain authorization errors on macOS may be resolved by signing out and back into the computer or modifying the "Endpoint Verification Safe Storage" settings in Keychain Access.\u003c/p\u003e\n"],["\u003cp\u003eData Protection API errors on Windows can often be traced back to S4U scheduled tasks, requiring users to identify, edit these tasks, and potentially delete a registry key for full resolution.\u003c/p\u003e\n"]]],[],null,["# Troubleshoot sync issues with the Endpoint Verification extension\n\nThis document shows how users of an organization can resolve the\nEndpoint Verification synchronization issues on their devices.\n\nIf your issue is not listed in this document, contact your administrator. To\nhelp them diagnose your issue, download the Endpoint Verification logs and share\nthem with your administrator:\n\n1. On your device, open the Chrome browser.\n2. In the Chrome browser toolbar, right-click **Endpoint Verification** and then click **Options \\\u003e Download Log**.\n\nSync issues to due Chrome browser\n---------------------------------\n\nIf the version of your Chrome browser is earlier than 110, you might encounter\nsync issues because Endpoint Verification is no longer supported on Chrome versions\nearlier than 110.\n\nError message: `Failed to sync. A sync will be retried shortly.`\n\nTo resolve this issue, update your Chrome browser to version 110 or later.\n\nSync issues on macOS\n--------------------\n\nThis section lists sync issues that you might encounter on macOS and provides\nsuggestions for how to fix them.\n\n### Can't sync because of a Keychain authorization error\n\nIn the Chrome browser, you might get an error that Endpoint Verification can't sync\nbecause of a Keychain authorization error.\n\nTo resolve this issue, sign out of your computer and then sign in again.\nIf the issue persists, complete the following steps:\n\n1. On your Mac, open the **Keychain Access** app.\n2. In the **Default keychains** pane, click **login**.\n\n If the icon is locked, right-click **login** and then click\n **Unlock Keychain \"login\"**.\n | **Note:** If you can't unlock the login keychain or get into Access Control, see [Keychain Access User Guide](https://support.apple.com/en-ie/guide/keychain-access/kyca2429/mac).\n3. Click the **Passwords** tab.\n\n4. In the list of passwords, double-click **Endpoint Verification Safe Storage**\n and click **Access Control**.\n\n5. Select **Allow all applications to access this item** and click\n **Save changes**.\n\n6. In the Chrome browser toolbar, click\n **Endpoint Verification \\\u003e Sync now**.\n\n7. If the sync is unsuccessful, do the following:\n\n 1. In the list of passwords, right-click **Endpoint Verification Safe Storage** and then click **Delete \"Endpoint Verification Safe Storage\"**.\n 2. In the Chrome browser toolbar, click **Endpoint Verification \\\u003e Sync now**.\n\nSync issues on Windows\n----------------------\n\nThis section lists sync issues that you might encounter on Windows OS and\nprovides suggestions for how to fix them.\n\n### Can't sync because of a Data Protection API error\n\nIn the Chrome browser, you might get an error that Endpoint Verification can't sync\nbecause of a Data Protection API error.\n\nEndpoint Verification stores an encryption key in the Windows Registry during initial\ndevice enrollment. Subsequent syncs rely on Windows Data Protection API to\naccess this key. Sync failures can occur if Endpoint Verification encounters errors\nwhen decrypting the key, often due to encryption by a different user.\nThis issue might arise from S4U scheduled tasks, outdated Chrome versions,\nWindows configuration issues, or improper machine or user resets.\n\nTo resolve this issue, complete the following steps:\n\n1. Determine if an S4U task is configured:\n\n 1. Lock the device screen.\n 2. Within 15 seconds, unlock the device screen.\n 3. Within 15 seconds, in the Chrome browser toolbar, click **Endpoint Verification \\\u003e Sync now**. If the sync is successful, the error is likely caused by an S4U task.\n2. Identify the S4U tasks:\n\n 1. Open PowerShell and run the following script:\n\n `Get-ScheduledTask | foreach { If (([xml](Export-ScheduledTask -TaskName $_.TaskName -TaskPath $_.TaskPath)).GetElementsByTagName(\"LogonType\").'#text' -eq \"S4U\") { $_.TaskName } }`\n3. If the output includes one or more lines containing a task name,\n fix the problem:\n\n 1. On your Windows device, open **Task Scheduler**.\n 2. Scroll to **Active Tasks**.\n 3. Find the tasks from the output and do the following for each task:\n\n 1. Double-click the task.\n 2. Click **Properties**.\n 3. Clear the **Do not store password** checkbox and click **Ok**.\n 4. Lock the device screen and then unlock it.\n\n 5. Within 15 seconds, in the Chrome browser toolbar, click\n **Endpoint Verification \\\u003e Sync now**.\n\nIf the issue persists, do the following:\n| **Warning:** You can make your computer inoperable if you incorrectly configure registry keys. Use this approach only if you're comfortable editing registry keys. Your administrator might contact you because this approach creates duplicate entries for your device in their managed device list.\n\n1. In the **Windows Start** menu, click **Run**.\n2. In the **Run** box, enter **regedit**.\n3. In **Registry Editor** , find `HKEY_CURRENT_USER\\Software\\Google\\Endpoint Verification\\Safe Storage` and delete it.\n4. In the Chrome browser toolbar, click **Endpoint Verification \\\u003e\n Sync now**.\n\nIf the issue persists, investigate device account administration and\ncontact Windows support for further assistance.\n\n### Can't sync because can't recover data protection key\n\nIn the Chrome browser, you might get an error that Endpoint Verification can't\nrecover the data protection key and can't sync. This error can occur when\nS4U scheduled tasks run on your device and you have an earlier version of\nthe Chrome browser on your device.\n\nOn Windows, Endpoint Verification should be able to read information on the device.\nTo do so, Endpoint Verification uses the Windows API and that API needs the device to\nbe trusted for delegation, and the current user account must be configured to\nallow delegation. The [`SEC_E_DELEGATION_REQUIRED`](https://learn.microsoft.com/en-us/troubleshoot/windows-server/certificates-and-public-key-infrastructure-pki/dpapi-masterkey-backup-failures#resolution)\nissue can occur in Windows, leading to API operation failures.\n\nTo resolve the problem, complete the following steps:\n\n1. Identify and edit S4U tasks:\n\n 1. On your Windows device, open PowerShell and run the following script:\n\n `Get-ScheduledTask | foreach { If (([xml](Export-ScheduledTask -TaskName $_.TaskName -TaskPath $_.TaskPath)).GetElementsByTagName(\"LogonType\").'#text' -eq \"S4U\") { $_.TaskName } }`\n 2. If the output includes one or more lines containing a task name, then edit\n these tasks:\n\n 1. Open **Task Scheduler**.\n 2. Scroll to **Active Tasks**.\n 3. Find the tasks from the output and do the following for each task:\n\n 4. Double-click the task.\n\n 5. Click **Properties**.\n\n 6. Clear the **Do not store password** checkbox and click **Ok**.\n\n2. Remove the registry key and start a new session\n\n| **Warning:** You can make your computer inoperable if you incorrectly configure registry keys. Use this approach only if you're comfortable editing registry keys. Your administrator might contact you because this approach creates duplicate entries for your device in their managed device list.\n\n1. In the **Windows Start** menu, click **Run**.\n2. In the **Run** box, enter **regedit**.\n3. In **Registry Editor** , find `HKEY_CURRENT_USER\\Software\\Google\\Endpoint Verification\\Safe Storage` and delete it.\n4. In the Chrome browser toolbar, click **Endpoint Verification \\\u003e\n Sync now**."]]
