| Previous | Next |
| STATUS_TPM_BAD_LOCALITY | STATUS_TPM_PER_NOWRITE |
STATUS_TPM_READ_ONLY
STATUS_TPM_READ_ONLY is a Windows NTSTATUS value in the TPM facility. For STATUS_TPM_READ_ONLY, it belongs to the TPM 1.2 error family and is normally surfaced through the Windows TPM stack, such as TPM Base Services, rather than by ordinary file, registry or network APIs.
TPM NV indexes can be defined with attributes that make an area read-only after creation, after a write, or under certain platform states. This status reports that the command is trying to modify an area that the TPM exposes only for reading.
The distinction from a Windows file read-only attribute is important: this is enforced by TPM NV index metadata and cannot be changed by altering filesystem ACLs or running the process elevated.
Diagnostic focus
- Query NV public attributes for the index before submitting a write.
- Check whether the index is designed to be provisioned once and then only read by the OS.
- If the data must change, the correct workflow may require redefining the index under owner/platform policy, not overwriting it.
References for STATUS_TPM_READ_ONLY
- TCG: TPM 1.2 Main Specification
- Microsoft: TPM Base Services
- Microsoft: NTSTATUS values
- TCG: TPM Main Part 1, NV storage design principles
Looking for a different code? Search another status or error code.