| Previous | Next |
| STATUS_TPM_BAD_HANDLE | STATUS_TPM_BADCONTEXT |
STATUS_TPM_BAD_DELEGATE
Delegation data does not authorize the requested TPM operation
STATUS_TPM_BAD_DELEGATE is a TPM 1.2 delegation-policy failure. Delegation allows limited authority to be represented without handing every operation the full owner authorization secret, but the delegate blob and selected command must match the policy.
This status indicates that the TPM did not accept the delegation material for the attempted command. The delegate may be malformed, expired by family state, not authorized for that ordinal, or bound to different owner/entity context.
It is different from STATUS_TPM_AUTHFAIL. Authorization may be syntactically present, but the delegated authority is not correct for this operation.
Diagnostic focus
- Identify the delegate family, delegate blob, and command ordinal.
- Check whether delegate-family counters or revocation state changed.
- Verify that the caller is not using an owner-only command through a restricted delegate.
References
- TCG: TPM 1.2 Main Specification
- TCG: TPM 1.2 Part 1 Design Principles
- TCG: TPM 1.2 Part 2 Structures of the TPM
- TCG: TPM 1.2 Part 3 Commands
- Microsoft: TPM Base Services
- Microsoft: MS-ERREF NTSTATUS values
Looking for a different code? Search another status or error code.