| Previous | Next |
| STATUS_TPM_NO_NV_PERMISSION | STATUS_TPM_KEY_NOTSUPPORTED |
STATUS_TPM_REQUIRES_SIGN
STATUS_TPM_REQUIRES_SIGN is a Windows NTSTATUS value in the TPM facility. For STATUS_TPM_REQUIRES_SIGN, it belongs to the TPM 1.2 error family and is normally surfaced through the Windows TPM stack, such as TPM Base Services, rather than by ordinary file, registry or network APIs.
Certain TPM 1.2 administrative operations require signed command authorization instead of a simple unauthenticated request. This status means the command form does not satisfy that requirement.
The relevant diagnostic is not whether the caller is an administrator in Windows, but whether the TPM command includes the cryptographic signature and key relationship required by the TPM specification for that operation.
Diagnostic focus
- Inspect the command wrapper and authorization session type used by the TPM library.
- Verify that the signing key or authority is the one expected by the TPM command, not merely by the application protocol.
- Do not retry the same unsigned command in a loop; the command layout must change.
References for STATUS_TPM_REQUIRES_SIGN
Looking for a different code? Search another status or error code.