What does NTSTATUS 0xC0290008 (STATUS_TPM_DISABLED_CMD) mean?

 
Previous Next
STATUS_TPM_DISABLED STATUS_TPM_FAIL

STATUS_TPM_DISABLED_CMD

A disabled command is narrower than a disabled TPM

STATUS_TPM_DISABLED_CMD means that the target TPM command is disabled. The distinction matters: the module can still be reachable and other TPM functions can work, while this operation is not permitted in the present state or configuration.

This status is most useful when the caller can identify the TPM command or the Windows feature that requested it. Compare a command-level restriction with STATUS_TPM_DISABLED, which describes the broader TPM state, and with STATUS_TPM_ACCESS_DENIED, which describes the caller side. Changing settings without that separation can break a working provisioning or protection configuration.

What to establish before changing state

  • Identify the exact TPM operation and the component that issued it.
  • Collect TPM version, enabled/ready state and firmware policy information before changing any platform setting.
  • Check feature support rather than assuming that a command exposed by one TPM generation exists on another.

References


Looking for a different code? Search another status or error code.