| Previous | Next |
| STATUS_TPM_IOERROR | STATUS_TPM_DECRYPT_ERROR |
STATUS_TPM_ENCRYPT_ERROR
The TPM encryption step failed
STATUS_TPM_ENCRYPT_ERROR is a Windows NTSTATUS value mapped from the TPM facility. For STATUS_TPM_ENCRYPT_ERROR, in this package the code belongs to TPM 1.2 style command processing, where Windows software, TBS, the TPM driver, and the hardware device all may be visible in the same failure path.
The relevant area is TPM cryptographic processing. This status indicates that the TPM reached an encryption operation but could not complete it successfully.
The important context is what the TPM was encrypting: a key blob, migration payload, sealed data, transport/session material, or command-specific structure. A cryptographic failure can stem from an incompatible scheme, malformed input size, wrong key properties, or device-side self-test/resource problems.
Diagnostic focus
- Record the command ordinal, key usage, scheme, input size, and parent key identity.
- Check for earlier scheme or key-property statuses that better explain the encryption failure.
- Do not expose plaintext fallback paths; fail closed and preserve the TPM trace.
References for STATUS_TPM_ENCRYPT_ERROR
- TCG: TPM 1.2 Part 1 Design Principles
- TCG: TPM 1.2 Part 2 Structures of the TPM
- TCG: TPM 1.2 Part 3 Commands
- Microsoft: TPM fundamentals
- Microsoft: MS-ERREF NTSTATUS values
Looking for a different code? Search another status or error code.