NTSTATUS 0xC0291004 (STATUS_TPM_ACCESS

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

The caller lacks rights for the TPM-stack operation; this is not TPM command authorization failure.

Previous	Next
STATUS_TPM_NOT_FOUND	STATUS_TPM_INSUFFICIENT_BUFFER

STATUS_TPM_ACCESS_DENIED

Caller authorization versus TPM authorization

STATUS_TPM_ACCESS_DENIED states that the caller does not have appropriate rights for the requested operation. This belongs to the Windows-facing access boundary. It is distinct from STATUS_TPM_AUTHFAIL, where the TPM rejects authorization material supplied for a protected TPM command.

Diagnose the user, service account, token elevation, device-management policy and API being used. Changing TPM state or repeatedly changing owner/authorization material cannot grant a caller permission that the Windows stack or management policy denies.

What to establish before changing state

Capture the calling process, identity, elevation state and exact management API.
Separate Windows/management authorization failures from TPM command authorization failures.
Use least-privilege deployment permissions rather than running broad TPM reset operations as a workaround.

References

Looking for a different code? Search another status or error code.