| Previous | Next |
| STATUS_TPM_INVALID_STRUCTURE | STATUS_TPM_BAD_COUNTER |
STATUS_TPM_KEY_OWNER_CONTROL
STATUS_TPM_KEY_OWNER_CONTROL is a Windows NTSTATUS value in the TPM facility. For STATUS_TPM_KEY_OWNER_CONTROL, it belongs to the TPM 1.2 error family and is normally surfaced through the Windows TPM stack, such as TPM Base Services, rather than by ordinary file, registry or network APIs.
Some TPM 1.2 keys are under TPM owner control. This status appears when software attempts to context-save or evict such a key in a way that is not permitted to the current caller.
The failure is about ownership semantics, not key lookup. The handle can identify a valid loaded key, while the operation is still invalid because only the TPM owner authority may evict or control that key.
Diagnostic focus
- Record whether the key was created as owner-evict controlled.
- Do not flush or context-save owner-controlled keys from a lower-privileged component.
- Check ownership transitions and owner authorization availability before attempting administrative key cleanup.
References for STATUS_TPM_KEY_OWNER_CONTROL
Looking for a different code? Search another status or error code.