What does HRESULT 0x80280006 (TPM_E_DEACTIVATED) mean?

 
Previous Next
TPM_E_CLEAR_DISABLED TPM_E_DISABLED

TPM_E_DEACTIVATED

TPM_E_DEACTIVATED indicates that a TPM 1.2 device is in a deactivated state. It is not the same diagnosis as an absent TPM, a bad key, or a failed authorization. The TPM 1.2 command specification distinguishes deactivation state from the separate permanent-disable state.

A deactivated TPM can be discovered by system software but refuse normal protected operations until the platform’s approved activation path changes the state. Which path is legitimate depends on platform firmware policy and management controls.

Evidence that matters

  • Record the TPM version and the exact state reported by firmware and Windows management interfaces.
  • Check whether a previous owner, firmware update, enterprise policy, or physical-presence workflow changed the device state.
  • Do not substitute “reset” for diagnosis. Resetting or clearing can destroy protected material while leaving the management cause unresolved.

TPM_E_DISABLED is the more fundamental state in which TPM functions are disabled; TPM_E_DISABLED_CMD can instead apply to one command while the device remains otherwise usable.

References


Looking for a different code? Search another status or error code.