NTSTATUS 0xC0290023 (STATUS_TPM_NO

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

No TPM endorsement key is available for a workflow that requires TPM identity material.

Previous	Next
STATUS_TPM_INVALID_AUTHHANDLE	STATUS_TPM_INVALID_KEYUSAGE

STATUS_TPM_NO_ENDORSEMENT

Endorsement key availability is a provisioning fact

STATUS_TPM_NO_ENDORSEMENT means that the TPM reports no installed Endorsement Key (EK). An EK is TPM identity material; it is distinct from an EK certificate, a Windows user certificate and a key protector stored by an application.

The practical impact depends on the workflow. Attestation, enrollment or management software may require EK public information or a certificate chain, while other TPM uses can fail for a different reason. Start by inventorying the key and certificate information exposed by the Windows TPM tools, then compare it with the requirements of the product that initiated the request.

What to establish before changing state

Query EK information and record whether the issue is an absent key, absent certificate, or an application trust-chain problem.
Do not generate substitute identity material unless the deployed platform and management design explicitly supports it.
For a newly provisioned device, check firmware updates and OEM provisioning guidance before clearing or replacing TPM state.

References

Looking for a different code? Search another status or error code.