What does NTSTATUS 0xC029004B (STATUS_TPM_DELEGATE_LOCK) mean?

STATUS_TPM_DELEGATE_LOCK

STATUS_TPM_DELEGATE_LOCK is a Windows NTSTATUS value in the TPM facility. For STATUS_TPM_DELEGATE_LOCK, it belongs to the TPM 1.2 error family and is normally surfaced through the Windows TPM stack, such as TPM Base Services, rather than by ordinary file, registry or network APIs.

TPM 1.2 delegation lets the owner authorize limited command sets without exposing full owner authority. This status reports that delegation administration is locked, so management of delegation state is currently refused.

The lock can be an intentional owner policy or a state reached after administrative operations. The caller should not interpret it as a missing family or malformed delegation blob.

Diagnostic focus

• Identify the administrative operation: table update, family management or delegated credential creation.
• Check whether owner policy intentionally locked delegation administration.
• Separate this from STATUS_TPM_DELEGATE_ADMIN, where delegation table management is not enabled.

References for STATUS_TPM_DELEGATE_LOCK

• TCG: TPM 1.2 Main Specification
• Microsoft: TPM Base Services
• Microsoft: NTSTATUS values

Looking for a different code? Search another status or error code.