What does NTSTATUS 0xC0290005 (STATUS_TPM_CLEAR_DISABLED) mean?

 
Previous Next
STATUS_TPM_AUDITFAILURE STATUS_TPM_DEACTIVATED

STATUS_TPM_CLEAR_DISABLED

Why TPM clear is a special operation

STATUS_TPM_CLEAR_DISABLED belongs to the TPM 1.2 state vocabulary. It means that a clear operation is not available through the current authorization path. It is different from an ordinary access failure: clearing changes long-lived TPM state and can remove keys and owner authorization held by the module.

On a Windows PC, a clear request can be routed through the firmware-backed Physical Presence Interface (PPI). A command such as Clear-Tpm is therefore not a harmless retry mechanism for an application failure. First identify which protector, virtual smart-card, Windows Hello credential, BitLocker key protector, attestation enrollment, or management workflow depends on the TPM.

What to establish before changing state

  • Capture Get-Tpm output and the platform firmware version before requesting a state change.
  • Preserve recovery material for TPM-backed features before a clear request; clearing cannot be undone by re-enabling the module.
  • Determine whether the platform requires PPI confirmation at reboot instead of trying to bypass the firmware decision.

References


Looking for a different code? Search another status or error code.