What does NTSTATUS 0xC029002D (STATUS_TPM_BAD_PRESENCE) mean?

 
Previous Next
STATUS_TPM_BAD_MODE STATUS_TPM_BAD_VERSION

STATUS_TPM_BAD_PRESENCE

Physical presence is a firmware authorization channel

STATUS_TPM_BAD_PRESENCE is a legacy TPM 1.2 result associated with operations that require physical presence. It is not the same thing as an interactive Windows logon or elevation prompt: the authorization may be asserted and confirmed in the pre-OS firmware environment.

The PPI exists so operating systems can request sensitive TPM state changes while firmware controls the confirmation process. Diagnose this status by identifying the requested action and the firmware/PPI capability. A script cannot reliably replace a required firmware confirmation, and attempting to do so changes the security model rather than fixing an application request.

What to establish before changing state

  • Identify the specific state-changing TPM action that requested physical presence.
  • Check whether a PPI prompt or pending operation is expected at the next restart.
  • Record BitLocker and other recovery prerequisites before approving any clear, enable, disable or ownership action.

References


Looking for a different code? Search another status or error code.