| Previous | Next |
| TPM_20_E_ATTRIBUTES | TPM_20_E_VALUE |
TPM_20_E_HASH
TPM 2.0 uses hash-algorithm selectors in several different places: the nameAlg of a public object, scheme details, PCR selections and command-specific structures. A hash identifier can be defined by the TCG yet still be unavailable in a particular TPM implementation, or it can be invalid in the field where it was supplied.
Why the same hash may work elsewhere
The object name algorithm and the hash used by a signing or key-exchange scheme have different roles. A successful host-side hash operation therefore does not prove that the TPM accepts the same identifier in a given TPM2B_PUBLIC or command parameter.
- Query the TPM algorithm capabilities instead of inferring support from the Windows cryptography provider or from another computer.
- Check the exact template field:
nameAlg, scheme hash, PCR bank or KDF parameter. - Preserve the complete command trace, because a tool may select defaults when an algorithm was not explicitly requested.
TCG: algorithm interface types · tpm2_create: hash algorithm and object name · Microsoft: TPM HRESULT mapping
Looking for a different code? Search another status or error code.