| Previous | Next |
| TPMAPI_E_TCG_INVALID_DIGEST_ENTRY | TBSIMP_E_BUFFER_TOO_SMALL |
TPMAPI_E_POLICY_DENIES_OPERATION
TPMAPI_E_POLICY_DENIES_OPERATION is a Windows TPM API result. It indicates that the active TPM, platform, or administrative policy explicitly disallows the requested operation.
What to check for TPMAPI_E_POLICY_DENIES_OPERATION
- Identify the relevant TPM policy, device-management policy, and the operation being denied.
- Verify that the caller, authorization session, PCR state, and key policy satisfy the intended rules.
- Ask the responsible administrator to change policy only when the operation is expected to be permitted.
Microsoft documentation for TPMAPI error codes
Diagnostic interpretation
This result has the HRESULT value 0x8029011E. AllStat records the condition as “The requested operation was blocked by current TPM policy. Please contact your system administrator for assistance.”.
Evidence to capture
- Capture any IErrorInfo text, activity identifier, event-log entry, and subsystem trace that mentions this result or the tpmapi / policy / denies / operation operation.
- Preserve the first failure in the call chain; a later HRESULT can describe cleanup rather than the original tpmapi / policy / denies / operation condition.
Retry and recovery
Retry this result only when the owning API documents a transient state or after the condition described as “The requested operation was blocked by current TPM policy. ” has changed.
Looking for a different code? Search another status or error code.