What does HRESULT 0x80280018 (TPM_E_WRONGPCRVAL) mean?

 
Previous Next
TPM_E_SIZE TPM_E_BAD_PARAM_SIZE

TPM_E_WRONGPCRVAL

TPM_E_WRONGPCRVAL means that the PCR value named by a TPM 1.2 operation does not match the PCR value currently held by the TPM. The PCR selection and policy data are interpretable; the measured state simply differs from what the protected object expects.

This is a crucial distinction from TPM_E_INVALID_PCR_INFO. The latter concerns invalid PCR information. TPM_E_WRONGPCRVAL is a real policy mismatch and often follows a change in boot components, firmware, measured configuration, or the event sequence used to extend PCRs.

Evidence before remediation

  • Collect the PCR selection, expected digest, current PCR values, and the relevant measurement or event-log evidence.
  • Identify the specific state transition that changed the measurement: firmware, boot manager, boot configuration, operating-system component, or policy baseline.
  • Use the approved recovery or resealing workflow. Do not edit a sealed-data blob or force PCR values; PCRs are measurement registers controlled by TPM command semantics.

References


Looking for a different code? Search another status or error code.