What does NTSTATUS 0xC0290031 (STATUS_TPM_AUDITFAIL_SUCCESSFUL) mean?

STATUS_TPM_AUDITFAIL_SUCCESSFUL

STATUS_TPM_AUDITFAIL_SUCCESSFUL is a Windows NTSTATUS value in the TPM facility. For STATUS_TPM_AUDITFAIL_SUCCESSFUL, it belongs to the TPM 1.2 error family and is normally surfaced through the Windows TPM stack, such as TPM Base Services, rather than by ordinary file, registry or network APIs.

This status is subtle: the TPM command being audited succeeded, but the TPM could not construct or update the related audit state. Code that only checks the command semantics may incorrectly treat the whole operation as clean.

For diagnostic purposes, separate the data-plane result from the audit-plane result. The object created, key loaded or NV change may have succeeded, but the expected audit trail cannot be trusted for that command.

Diagnostic focus

• Log the successful command ordinal together with the audit failure status.
• If the caller requires auditability as part of a policy decision, roll back or quarantine the higher-level operation.
• Compare with STATUS_TPM_AUDITFAIL_UNSUCCESSFUL, where the underlying command failed as well.

References for STATUS_TPM_AUDITFAIL_SUCCESSFUL

• TCG: TPM 1.2 Main Specification
• Microsoft: TPM Base Services
• Microsoft: NTSTATUS values

Looking for a different code? Search another status or error code.