| Previous | Next |
| TPM_E_KEY_NOT_AUTHENTICATED | TPM_E_KEY_NOT_SIGNING_KEY |
TPM_E_PCP_KEY_NOT_AIK
TPM_E_PCP_KEY_NOT_AIK means the selected TPM-backed key is not an Attestation Identity Key (AIK), but the requested operation requires one.
What to check
- Use the attestation workflow to identify or create the correct AIK rather than substituting an arbitrary signing key.
- Check the key type and properties returned by the provider before requesting AIK-specific attestation data.
- Keep certificate enrollment and attestation roles separate from normal application signing keys.
Microsoft: TPM key attestation
Microsoft: CNG key storage providers
Microsoft: TPM and PCP error codes
Looking for a different code? Search another status or error code.