| Previous | Next |
| STATUS_TPM_DAA_STAGE | STATUS_TPM_DAA_WRONG_W |
STATUS_TPM_DAA_ISSUER_VALIDITY
DAA issuer validity checking failed inside the TPM path
STATUS_TPM_DAA_ISSUER_VALIDITY reports a Direct Anonymous Attestation issuer-validity failure. The issuer material was present, but the validity check over that material did not match the TPM command requirements.
This should not be collapsed into a generic authentication failure. The problem belongs to the DAA issuer data and its relationship to the current DAA flow, not necessarily to the user secret, owner secret, or key authorization value.
For auditing, keep the issuer identity, issuer-settings values, DAA stage, and raw TPM response together. Those details allow comparison with the issuer-side transcript.
Diagnostic focus
- Verify the issuer public data used by the DAA operation.
- Check whether the issuer-side transcript corresponds to this TPM and this DAA stage.
- Avoid replacing TPM owner data before checking issuer validity and transcript consistency.
References
- TCG: TPM 1.2 Main Specification
- TCG: TPM 1.2 Part 1 Design Principles
- TCG: TPM 1.2 Part 2 Structures of the TPM
- TCG: TPM 1.2 Part 3 Commands
- Microsoft: TPM Base Services
- Microsoft: MS-ERREF NTSTATUS values
Looking for a different code? Search another status or error code.