| Previous | Next |
| STATUS_TPM_TRANSPORT_NOTEXCLUSIVE | STATUS_TPM_DAA_RESOURCES |
STATUS_TPM_OWNER_CONTROL
Owner-controlled key eviction prevents the requested context operation
STATUS_TPM_OWNER_CONTROL concerns TPM 1.2 key lifetime policy. Some keys are controlled by owner-evict semantics: the TPM owner decides whether the key remains resident or can be evicted, rather than letting an arbitrary caller context-save it.
The failure is therefore about key control policy, not about a missing key blob or incorrect key usage. A loaded key can be valid and still be ineligible for the context-save operation requested by the caller.
When this appears in Windows, separate the TPM object policy from TBS scheduling. TBS may have delivered the command correctly; the TPM can still reject it because the target key is owner controlled.
Diagnostic focus
- Identify the key handle and whether it is owner-evict controlled.
- Check whether the caller expected to persist, evict, or context-save the key.
- Use the TPM owner-management path rather than retrying ordinary key context operations.
References
- TCG: TPM 1.2 Main Specification
- TCG: TPM 1.2 Part 1 Design Principles
- TCG: TPM 1.2 Part 2 Structures of the TPM
- TCG: TPM 1.2 Part 3 Commands
- Microsoft: TPM Base Services
- Microsoft: MS-ERREF NTSTATUS values
Looking for a different code? Search another status or error code.