| Previous | Next |
| TPM_20_E_DISABLED | TPM_20_E_AUTH_TYPE |
TPM_20_E_EXCLUSIVE
An exclusive audit session changes command scheduling
TPM_20_E_EXCLUSIVE maps to TPM_RC_EXCLUSIVE. TPM 2.0 supports command-audit sessions that accumulate a digest of commands and responses. When a session is marked exclusive, the TPM tracks whether another command has intervened. A command that cannot preserve the required audit continuity fails rather than silently producing an incomplete audit record.
The error is therefore about audit sequencing, not exclusive access to the TPM device in the ordinary file-locking sense. Opening another TBS context, retrying from a different process, or increasing a timeout does not repair a broken exclusive sequence.
Diagnostic questions
- Determine which authorization session is carrying the audit attribute and whether it is intended to be exclusive.
- Trace all TPM commands between creation of the session and the failing operation, including commands sent by helper libraries.
- Keep the same session context and connection when the resource manager cannot preserve an exported session across clients.
- Flush or deliberately restart the audit session only after deciding whether the partial audit digest must be retained.
References
- TCG Part 1: sessions and command auditing
- TCG Part 2: TPMA_SESSION and TPM_RC_EXCLUSIVE
- tpm2-tools: starting audit and policy sessions
Looking for a different code? Search another status or error code.