| Previous | Next |
| STATUS_PCP_KEY_NOT_LOADED | STATUS_PCP_KEY_NOT_FINALIZED |
STATUS_PCP_NO_KEY_CERTIFICATION
Key certification evidence is missing, not necessarily the key itself
STATUS_PCP_NO_KEY_CERTIFICATION means that the certification evidence expected for the TPM-backed key has not been generated. It should not be confused with a missing X.509 certificate: the error concerns TPM key certification/attestation material used to demonstrate a key's protected origin or properties.
A normal signing key is not automatically valid for every attestation workflow. The relying party can require evidence created through the intended attestation procedure, with a compatible TPM trust model and key role.
What to check
- Identify the operation that demanded key certification and whether it expects local evidence, enrollment evidence, or CA-mediated TPM key attestation.
- Verify that the correct provider and key type were used before attempting to generate or request new evidence.
- Preserve any CA or enrollment-server diagnostic detail, including the requested certificate template and attestation policy.
References
Looking for a different code? Search another status or error code.