| Previous | Next |
| TPM_E_ASYMMETRIC | TPM_20_E_HASH |
TPM_20_E_ATTRIBUTES
A TPM public area is a coupled template: type, objectAttributes, algorithm parameters and the intended object role cannot be chosen independently. This status is raised when the TPM finds an internally inconsistent TPMA_OBJECT combination while validating the command input, before the requested object can be created or loaded.
Where the inconsistency usually is
- Bits describing signing, decryption, restricted use, duplication, parent binding, password authorization and policy authorization do not match the intended object type.
- A parent or restricted key has an incompatible symmetric or asymmetric parameter block.
- The template was copied from another TPM, tool version or policy without rechecking the capabilities and the object purpose on the current device.
What to inspect
Capture the complete TPM2B_PUBLIC submitted to the command, including the raw TPMA_OBJECT mask. Compare it with the key type, scheme and parent role, then retry with the smallest template that expresses the required use. Do not treat this as a generic authorization failure: changing a password or policy will not repair contradictory public attributes.
TCG: TPM 2.0 Part 2 structures · tpm2-tools: object attributes · tpm2_create template options
Looking for a different code? Search another status or error code.