| Previous | Next |
| TPM_E_BAD_ORDINAL | TPM_E_INVALID_KEYHANDLE |
TPM_E_INSTALL_DISABLED
TPM_E_INSTALL_DISABLED means that the TPM 1.2 ability to install an owner is disabled. This is a provisioning and policy state, not proof that a TPM is absent or unusable for every operation.
In TPM 1.2, ownership controls important objects and authorization paths, including the Storage Root Key model. An application that receives this status should not repeatedly attempt ownership installation: that risks conflicting with the platform owner’s provisioning process and can create destructive recovery decisions.
Relevant questions
- Is the device meant to be provisioned by firmware, an enterprise enrollment process, or a managed Windows workflow?
- Does the TPM already have an owner? That is a different state reported as
TPM_E_OWNER_SET. - Is the request actually targeting legacy TPM 1.2 ownership APIs on a newer TPM 2.0 deployment?
Preserve TPM ownership and recovery metadata before making any administrative change to this policy.
References
- Microsoft: TPM HRESULT values in Winerror.h
- TCG TPM 1.2 Part 1: Design Principles
- Microsoft: TPM policy and ownership guidance
Looking for a different code? Search another status or error code.