What does HRESULT 0x80280004 (TPM_E_AUDITFAILURE) mean?

 
Previous Next
TPM_E_BAD_PARAMETER TPM_E_CLEAR_DISABLED

TPM_E_AUDITFAILURE

TPM_E_AUDITFAILURE is unusual because the protected TPM operation completed successfully while the auditing of that operation failed. Treat the command result and the audit result as two separate facts: a caller must not infer that the primary operation was rolled back merely because the audit step failed.

TPM 1.2 includes auditable command handling and audit digests. The specification places audit processing in the command flow, so an audit failure is relevant when an application depends on a complete audit trail for compliance, attestation, or recovery decisions.

What to verify

  • Determine whether the application’s business operation has already committed; make retries idempotent before repeating it.
  • Capture the command ordinal, audit configuration, and TPM event or service logs. These identify whether the failure is local audit state, a policy configuration, or transport software.
  • Do not treat this as an authorization error. TPM_E_AUTHFAIL rejects access; TPM_E_AUDITFAILURE reports a separate failure after the operation itself succeeded.

References


Looking for a different code? Search another status or error code.