What does HRESULT 0x8028008B (TPM_20_E_HANDLE) mean?

TPM_20_E_HANDLE

TPM_20_E_HANDLE meaning

TPM_20_E_HANDLE has value 0x8028008B. TPM 2.0 rejected a handle because it is not valid for the command or object use requested. The handle may name the wrong object type, belong to an expired transient object or session, or be invalid in the current TPM context.

Evidence to collect

Capture the TPM command code, handle area and order, object or session creation path, TPM return value, TBS context, and whether the device was cleared, reset, reprovisioned, or resumed between handle creation and use. Never log private key material.

Recovery and retry

Recreate or reload the required TPM object or session through the supported API and correct command construction. Repeating the same stale handle cannot succeed; clearing the TPM is a destructive last resort and requires a recovery plan.

Official references

• Microsoft: TPM, PLA and FVE HRESULT values
• Microsoft: TPM Base Services
• Trusted Computing Group: TPM 2.0 Library Specification