| Previous | Next |
| TPMAPI_E_INTERNAL_ERROR | TPMAPI_E_AUTHORIZATION_FAILED |
TPMAPI_E_ACCESS_DENIED
TPMAPI_E_ACCESS_DENIED is a Windows TPM API result. It indicates that the current security context is not authorized to perform the requested TPM API operation.
What to check for TPMAPI_E_ACCESS_DENIED
- Confirm the account, elevation state, local security policy, and application service identity.
- Check whether the operation requires device ownership, administrator privileges, or a policy-approved caller.
- Do not work around the restriction by weakening TPM or platform security policy.
Microsoft documentation for TPMAPI error codes
Diagnostic interpretation
This result has the HRESULT value 0x80290108. AllStat records the condition as “The caller does not have the appropriate rights to perform the requested operation.”.
Evidence to capture
- Capture any IErrorInfo text, activity identifier, event-log entry, and subsystem trace that mentions this result or the tpmapi / access / denied operation.
- compare the failing machine with a working one at the same configuration boundary: component version, policy, registration, identity, and target resource.
Retry and recovery
Preserve the failing evidence for TPMAPI_E_ACCESS_DENIED before recovery. After changing the identified cause, repeat the same minimal operation and compare it with the original trace.
Looking for a different code? Search another status or error code.