What does HRESULT 0x8028009B (TPM_20_E_SIGNATURE) mean?

 
Previous Next
TPM_20_E_INSUFFICIENT TPM_20_E_KEY

TPM_20_E_SIGNATURE

TPM_20_E_SIGNATURE maps to TPM_RC_SIGNATURE. It reports that a signature supplied as command data did not validate. It is distinct from an authorization-HMAC failure: the latter protects command authorization, while this code concerns a signature object and the digest or public key used for signature verification.

Diagnostic boundary

  • Confirm the exact digest bytes, hash algorithm, signature scheme, and public key material used by the caller.
  • Verify that a signature structure uses the union member selected by its scheme and carries the expected parameter sizes.
  • Do not replace a failed signature with a new arbitrary ticket; tickets are validated separately and can produce TPM_20_E_TICKET.

TCG TPM 2.0 Part 2: TPM_RC_SIGNATURE · TCG TPM 2.0 Part 3: signing and validation command definitions


Looking for a different code? Search another status or error code.