| Previous | Next |
| STATUS_TPM_INVALID_POSTINIT | STATUS_TPM_BAD_KEY_PROPERTY |
STATUS_TPM_INAPPROPRIATE_SIG
The signature data has an inappropriate encoding for the TPM command
STATUS_TPM_INAPPROPRIATE_SIG is a Windows NTSTATUS value mapped from the TPM facility. For STATUS_TPM_INAPPROPRIATE_SIG, in this package the code belongs to TPM 1.2 style command processing, where Windows software, TBS, the TPM driver, and the hardware device all may be visible in the same failure path.
The relevant area is TPM signature input and encoding rules. This status is associated with signature data that is not in the format expected by the TPM command. The TPM is not merely saying that a signature check failed; it is objecting to how the signed data is represented.
The distinction matters in code that mixes raw digests, DER-wrapped structures, certificate signatures, and TPM-specific signature commands. Feed the command exactly the data form it expects rather than wrapping or stripping layers after the fact.
Diagnostic focus
- Record whether the caller supplied a raw digest, a DER object, a certificate signature, or TPM-specific signature structure.
- Check the command documentation for whether it signs/verifies a digest or a structured value.
- Normalize signature input at the API boundary instead of in the TPM error handler.
References for STATUS_TPM_INAPPROPRIATE_SIG
- TCG: TPM 1.2 Part 2 Structures of the TPM
- TCG: TPM 1.2 Part 3 Commands
- Microsoft: TPM fundamentals
- Microsoft: MS-ERREF NTSTATUS values
Looking for a different code? Search another status or error code.