What does HRESULT 0x80280024 (TPM_E_INVALID_KEYUSAGE) mean?

TPM_E_INVALID_KEYUSAGE

The key was created for a different class of operation

TPM_E_INVALID_KEYUSAGE (0x80280024) means the key object exists but its usage attributes do not permit the requested TPM command. For example, a signing-only or storage key cannot be substituted freely into another cryptographic role.

Evidence to capture

Record key handle, key usage/type, algorithm parameters, migratable/storage/signing flags, command ordinal, and the key template used at creation. Verify the handle has not been reused for a different loaded key.

Focused correction

Use a key created with usage attributes compatible with the operation, or choose the operation that matches the existing key. Do not simply reload the same incompatible key and expect a state change.

Technical references

• TCG: TPM 1.2 Main Specification.
• TCG: TPM 1.2 Part 2 — Structures.
• TCG: TPM 1.2 Part 3 — Commands.
• Microsoft: TPM Base Services portal.