What does NTSTATUS 0xC0290033 (STATUS_TPM_NOTLOCAL) mean?

STATUS_TPM_NOTLOCAL

STATUS_TPM_NOTLOCAL is a Windows NTSTATUS value in the TPM facility. it belongs to the TPM 1.2 error family and is normally surfaced through the Windows TPM stack, such as TPM Base Services, rather than by ordinary file, registry or network APIs.

TPM locality is part of the platform security model: certain commands are only valid when the TPM can associate the request with an allowed locality. This status appears when a reset operation needs locality information and the command path does not carry the required locality modifier.

The important point is that the same PCR index can behave differently depending on the execution path. A user-mode component going through the normal Windows TPM stack usually cannot manufacture a firmware locality after boot.

Diagnostic focus

• Log both the PCR index and locality expected by the platform profile.
• Check whether the failing operation belongs in firmware, measured launch or early-boot code rather than a normal service.
• Do not diagnose this as bad authorization data; the failure is about command origin/locality.

References for STATUS_TPM_NOTLOCAL

• TCG: TPM 1.2 Main Specification
• Microsoft: TPM Base Services
• Microsoft: NTSTATUS values
• Linux kernel: TPM event log and PCR measurements