HRESULT 0x80280151 (TPM_20_E_CPHASH): meaning and diagnosis

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

A policy session cpHash constraint is already set or does not match.

Previous	Next
TPM_20_E_BAD_CONTEXT	TPM_20_E_PARENT

TPM_20_E_CPHASH

TPM_20_E_CPHASH maps to TPM_RC_CPHASH. A policy session has a stored cpHash constraint that either differs from the supplied command hash or has already been set by a mutually exclusive policy mechanism. The policy is binding authorization to a specific command representation.

What to compare

Use the policy session’s hash algorithm and the exact command parameters that the policy was designed to authorize.
Keep PolicyCpHash, NameHash, parameter-hash, template-hash, and bound-session workflows distinct when they share the same policy-session state.
Restart and rebuild the policy session when the requested command is intentionally different; do not mutate a previously constrained session.

TCG TPM 2.0 Part 2: TPM_RC_CPHASH · TCG TPM 2.0 Part 3: PolicyCpHash session rules

Looking for a different code? Search another status or error code.