| Previous | Next |
| TPM_E_KEY_NOT_FINALIZED | TPM_E_NOT_PCR_BOUND |
TPM_E_ATTESTATION_CHALLENGE_NOT_SET
TPM_E_ATTESTATION_CHALLENGE_NOT_SET means a caller requested attestation output before supplying the challenge required for that attestation flow.
What to check
- Verify the expected protocol sequence: challenge acquisition, key or AIK selection, then attestation response generation.
- Ensure the challenge is fresh and is passed to the same key/provider context that will generate the response.
- If a CA or device-management service supplies the challenge, inspect the enrollment transaction for the preceding request failure.
Microsoft: TPM key attestation
Microsoft: CNG key storage providers
Microsoft: TPM and PCP error codes
Looking for a different code? Search another status or error code.