What does HRESULT 0x8028004B (TPM_E_DELEGATE_LOCK) mean?

TPM_E_DELEGATE_LOCK

Delegation administration is currently locked

TPM_E_DELEGATE_LOCK (0x8028004B) means the TPM delegation-management state machine has been locked, so administrative delegation changes are rejected until the defined lifecycle transition occurs. It is not a malformed delegation blob.

Evidence to capture

Record delegation command, lock state, boot/ownership lifecycle, family/delegate identifiers, and the operation that previously set the lock.

Focused correction

Follow the TPM-defined lifecycle that clears or legitimately changes delegation lock state, then retry the same administration command. Rewriting unrelated delegate permissions will not bypass an active lock.

Technical references

• Microsoft: Resource Virtualization in TBS.
• Microsoft: Command Scheduling in TBS.
• Microsoft: Using TPM Base Services.
• TCG: TPM 1.2 Part 3 — Context commands.