| Previous | Next |
| TPM_E_INAPPROPRIATE_ENC | TPM_E_INVALID_PCR_INFO |
TPM_E_MIGRATEFAIL
TPM_E_MIGRATEFAIL is a TPM 1.2 key-migration authorization failure. It does not merely mean that a file copy failed: migration is a protected TPM operation with authorization rules governing whether and how a key may be moved to a new parent or platform.
The code is different from a malformed blob, an invalid key handle, or a general authorization failure. The relevant evidence is the key’s migration policy and the migration authorization material, not just the account running the migration tool.
Safe diagnostic sequence
- Identify the key’s migration attributes and the intended destination or parent key.
- Verify that the application used the intended TPM 1.2 migration workflow and did not substitute a TPM 2.0 object-import flow.
- Preserve existing key material and recovery records before retrying. Do not clear either TPM to work around a migration authorization failure.
For managed devices, perform migration only through the owning security product’s documented process; a manually reconstructed blob can make recovery impossible.
References
- Microsoft: TPM HRESULT values in Winerror.h
- TCG TPM 1.2 Part 1: Design Principles
- TCG TPM 1.2 Part 3: Commands
Looking for a different code? Search another status or error code.