| Previous | Next |
| STATUS_NDIS_DOT11_AP_BAND_NOT_ALLOWED | STATUS_TPM_AUTHFAIL |
STATUS_TPM_ERROR_MASK
TPM facility mask used when decoding hardware responses
STATUS_TPM_ERROR_MASK belongs to the TPM NTSTATUS range, but it is best treated as a decoding helper rather than as an ordinary command result. The AllStat text identifies it as the mask used to convert TPM hardware errors into Windows error values.
When this value appears in code or logs, the important question is whether the caller logged the mask itself or an actual TPM response after masking. For diagnosis, keep the raw TPM return code, the translated NTSTATUS value, and the Windows component that performed the translation together.
This differs from statuses such as STATUS_TPM_BAD_HANDLE or STATUS_TPM_DAA_RESOURCES, which describe a specific TPM command failure. A page or logger should avoid presenting this mask as proof that the TPM executed and rejected a command.
Diagnostic focus
- Preserve the raw TPM return value before conversion to NTSTATUS.
- Check whether the failing layer is TPM Base Services, the TPM driver, firmware, or caller-side decoding code.
- Do not reset or clear the TPM merely because this mask appears in a table or symbolic decoder.
References
- TCG: TPM 1.2 Main Specification
- TCG: TPM 1.2 Part 1 Design Principles
- TCG: TPM 1.2 Part 2 Structures of the TPM
- TCG: TPM 1.2 Part 3 Commands
- Microsoft: TPM Base Services
- Microsoft: MS-ERREF NTSTATUS values
Looking for a different code? Search another status or error code.