| Previous | Next |
| TPM_E_NOSRK | TPM_E_OWNER_SET |
TPM_E_NOTSEALED_BLOB
TPM_E_NOTSEALED_BLOB (0x80280013) is a TPM 1.2 result meaning that the encrypted blob supplied to the operation is invalid or was not created by this TPM. The important evidence is the exact blob and the TPM that originally produced it, not general information about whether the computer has a TPM.
What to check
- Confirm that the caller passed the sealed-data blob expected by the TPM operation rather than another serialized TPM object.
- Compare the blob length and bytes with the value originally stored; truncation, text conversion, or application-level reserialization can invalidate it.
- Determine whether the blob was created on the same physical TPM. Data protected by one TPM cannot simply be moved to another TPM and treated as a locally sealed blob.
- Preserve the associated key/container identity and the operation that created the blob if that information is available.
Recovery
Restore the original valid blob or recreate the protected data through the application's supported provisioning path. Do not clear the TPM as the first troubleshooting step: clearing can remove keys and make other TPM-protected material inaccessible while doing nothing to repair a malformed or foreign blob.
Technical references
Looking for a different code? Search another status or error code.