diff --git a/changes/bug10816 b/changes/bug10816
new file mode 100644
index 0000000000000000000000000000000000000000..1185f3c2d6608cd846565f79de037483a106777c
--- /dev/null
+++ b/changes/bug10816
@@ -0,0 +1,6 @@
+  o Minor bugfixes (windows):
+    - Remove code to special-case handling of NTE_BAD_KEYSET when
+      acquiring windows CryptoAPI context.  This error can't actually
+      occur for the parameters we're providing.  Fixes bug 10816;
+      bugfix on 0.0.2pre26.
+
diff --git a/src/common/crypto.c b/src/common/crypto.c
index fa91f6dd8290550dbf4d09cb8230d48b0fb4ebb4..f128336e50b57aa9986826293fc26f38a4ed1a52 100644
--- a/src/common/crypto.c
+++ b/src/common/crypto.c
@@ -2454,10 +2454,8 @@ crypto_strongest_rand(uint8_t *out, size_t out_len)
   if (!provider_set) {
     if (!CryptAcquireContext(&provider, NULL, NULL, PROV_RSA_FULL,
                              CRYPT_VERIFYCONTEXT)) {
-      if ((unsigned long)GetLastError() != (unsigned long)NTE_BAD_KEYSET) {
-        log_warn(LD_CRYPTO, "Can't get CryptoAPI provider [1]");
-        return -1;
-      }
+      log_warn(LD_CRYPTO, "Can't get CryptoAPI provider [1]");
+      return -1;
     }
     provider_set = 1;
   }