What does HRESULT 0x8028003F (TPM_E_PER_NOWRITE) mean?

TPM_E_PER_NOWRITE

The NV definition leaves writes insufficiently protected

TPM_E_PER_NOWRITE (0x8028003F) means the permission combination for a new or redefined TPM 1.2 NV index would allow writes without the authorization/protection required by the command or platform policy. This is a definition-time policy problem, not an exhausted NV-write counter.

Evidence to capture

Capture the complete NV permission bitmap, auth mode, locality masks, index number, and the command used to define the index. Compare with a known-good index created for the same purpose.

Focused correction

Define the NV index with a protection model accepted by the TPM/platform policy. Keep size and payload fixed while changing permissions so later failures can be attributed to a specific policy field.

Technical references

• TCG: TPM 1.2 Main Specification.
• TCG: TPM 1.2 Part 2 — NV structures and permissions.
• TCG: TPM 1.2 Part 3 — NV commands.
• Microsoft: Win32_Tpm class.