What does NTSTATUS 0xC029001A (STATUS_TPM_SHA_THREAD) mean?

STATUS_TPM_SHA_THREAD

There is no active TPM SHA-1 thread for the command

STATUS_TPM_SHA_THREAD is a Windows NTSTATUS value mapped from the TPM facility. in this package the code belongs to TPM 1.2 style command processing, where Windows software, TBS, the TPM driver, and the hardware device all may be visible in the same failure path.

The relevant area is TPM 1.2 SHA-1 sequencing. Some TPM 1.2 commands support multi-step SHA-1 operations. This status means a continuation or completion command was submitted when the TPM did not have the corresponding SHA thread active.

The fix is to repair the command sequence, not to change key authorization. A caller may have lost state after an error, power transition, context close, or interleaved command sequence that invalidated the in-progress SHA operation.

Diagnostic focus

• Log the sequence of SHA start/update/complete commands around the failure.
• Avoid interleaving unrelated commands if the software assumes a single in-progress TPM SHA operation.
• Restart the hash sequence from the beginning after any earlier SHA sequencing error.

References for STATUS_TPM_SHA_THREAD

• TCG: TPM 1.2 Part 1 Design Principles
• TCG: TPM 1.2 Part 3 Commands
• Microsoft: TPM Base Services
• Microsoft: MS-ERREF NTSTATUS values