What does NTSTATUS 0xC029005C (STATUS_TPM_MA_TICKET_SIGNATURE) mean?

STATUS_TPM_MA_TICKET_SIGNATURE

The migration authority ticket signature is invalid

STATUS_TPM_MA_TICKET_SIGNATURE belongs to TPM 1.2 migration-authority handling, especially certified migratable key flows. The TPM rejected the signature on a migration-authority ticket.

This is a trust-path problem for key migration, not a general key-load failure. The migration ticket may have been signed by the wrong authority, modified after signing, or paired with the wrong key/migration destination.

For investigation, preserve the ticket, signing authority identity, source key information, and destination information. Retrying the same ticket will not help unless the validation input changes.

Diagnostic focus

• Verify the migration authority public key and certificate chain used by the caller.
• Check that the ticket is for the same key and migration destination.
• Look for byte-order or hashing mismatches in ticket construction.

References

• TCG: TPM 1.2 Main Specification
• TCG: TPM 1.2 Part 1 Design Principles
• TCG: TPM 1.2 Part 2 Structures of the TPM
• TCG: TPM 1.2 Part 3 Commands
• Microsoft: TPM Base Services
• Microsoft: MS-ERREF NTSTATUS values

Looking for a different code? Search another status or error code.