| Previous | Next |
| TPM_E_BAD_PARAMETER | TPM_E_CLEAR_DISABLED |
TPM_E_AUDITFAILURE
TPM_E_AUDITFAILURE is unusual because the protected TPM operation completed successfully while the auditing of that operation failed. Treat the command result and the audit result as two separate facts: a caller must not infer that the primary operation was rolled back merely because the audit step failed.
TPM 1.2 includes auditable command handling and audit digests. The specification places audit processing in the command flow, so an audit failure is relevant when an application depends on a complete audit trail for compliance, attestation, or recovery decisions.
What to verify
- Determine whether the application’s business operation has already committed; make retries idempotent before repeating it.
- Capture the command ordinal, audit configuration, and TPM event or service logs. These identify whether the failure is local audit state, a policy configuration, or transport software.
- Do not treat this as an authorization error.
TPM_E_AUTHFAILrejects access;TPM_E_AUDITFAILUREreports a separate failure after the operation itself succeeded.
References
- Microsoft: TPM HRESULT values in Winerror.h
- TCG TPM 1.2 Part 1: Design Principles
- TCG TPM 1.2 Part 3: Commands
Looking for a different code? Search another status or error code.