| Previous | Next |
| TPM_E_PCP_KEY_NOT_AIK | TPM_E_LOCKED_OUT |
TPM_E_KEY_NOT_SIGNING_KEY
TPM_E_KEY_NOT_SIGNING_KEY means the selected TPM-backed key does not have signing capability, but a signing operation or attestation flow was requested.
What to check for TPM_E_KEY_NOT_SIGNING_KEY
- Verify the key algorithm and usage properties at creation time.
- Use the correct TPM-backed signing key or create a separate one with the permitted signing usage.
- Do not treat encryption or storage keys as interchangeable with signing keys.
Microsoft: CNG key storage providers
Microsoft: TPM key attestation
Microsoft: TPM and PCP error codes
Diagnostic interpretation
This result has the HRESULT value 0x8029041A. AllStat records the condition as “The TPM key is not a signing key.”.
Evidence to capture
- Capture any IErrorInfo text, activity identifier, event-log entry, and subsystem trace that mentions this result or the tpm / key / signing / key operation.
- check the documented return contract of the specific API because the same HRESULT can require different recovery in different interfaces.
Retry and recovery
” has changed.
Looking for a different code? Search another status or error code.