| Previous | Next |
| TPM_E_DEACTIVATED | TPM_E_DISABLED_CMD |
TPM_E_DISABLED
TPM_E_DISABLED means the TPM 1.2 device is disabled. The result describes TPM state, not a bad command buffer and not an authentication failure. A disabled device may still be detected by management software, but normal TPM services are restricted until the platform-approved enable path is used.
The exact control point can be firmware, a physical-presence workflow, or an enterprise management process. Applications should report the state clearly and avoid attempting to create, migrate, or recover TPM-protected objects as though the device were operating normally.
Do not confuse these conditions
TPM_E_DEACTIVATED: the TPM is deactivated rather than permanently disabled.TPM_E_DISABLED_CMD: a particular command is disabled while other TPM functions may remain available.TPM_E_NO_ENDORSEMENT: the TPM is present but lacks the required endorsement-key state.
Before any firmware change, identify users and workloads that depend on the TPM for BitLocker, credentials, or device identity, and ensure their recovery material is available.
References
- Microsoft: TPM HRESULT values in Winerror.h
- TCG TPM 1.2 Part 3: Commands
- Microsoft: TPM security and platform health overview
Looking for a different code? Search another status or error code.