What does NTSTATUS 0xC0290028 (STATUS_TPM_BAD_KEY_PROPERTY) mean?

 
Previous Next
STATUS_TPM_INAPPROPRIATE_SIG STATUS_TPM_BAD_MIGRATION

STATUS_TPM_BAD_KEY_PROPERTY

The TPM does not support the requested key properties

STATUS_TPM_BAD_KEY_PROPERTY is a Windows NTSTATUS value mapped from the TPM facility. For STATUS_TPM_BAD_KEY_PROPERTY, in this package the code belongs to TPM 1.2 style command processing, where Windows software, TBS, the TPM driver, and the hardware device all may be visible in the same failure path.

The relevant area is TPM key parameter validation. Key creation and loading commands carry key parameters such as algorithm, scheme, size, usage, and TPM-specific attributes. This status means the requested key properties are not supported by this device.

Capabilities differ across TPM implementations and versions. Do not assume that a key template copied from another machine is valid on this TPM. Query device capabilities and compare the complete key template before attempting to create or load the key.

Diagnostic focus

  • Dump the full key parameter block, not just the algorithm name.
  • Query TPM capabilities for supported algorithms, schemes, key sizes, and attributes.
  • Create separate templates for TPM 1.2 and TPM 2.0 paths instead of sharing one structure.

References for STATUS_TPM_BAD_KEY_PROPERTY


Looking for a different code? Search another status or error code.