| Previous | Next |
| STATUS_TPM_ENCRYPT_ERROR | STATUS_TPM_INVALID_AUTHHANDLE |
STATUS_TPM_DECRYPT_ERROR
The TPM decryption step failed
STATUS_TPM_DECRYPT_ERROR is a Windows NTSTATUS value mapped from the TPM facility. For STATUS_TPM_DECRYPT_ERROR, in this package the code belongs to TPM 1.2 style command processing, where Windows software, TBS, the TPM driver, and the hardware device all may be visible in the same failure path.
The relevant area is TPM cryptographic processing. This status is returned after the TPM attempts a decryption operation and cannot complete it for the supplied object, key, or command data.
A decryption error is not the same as an authorization failure. Authorization may pass, but the encrypted blob can still be incompatible with the key, corrupted, created under a different SRK/parent key, or encoded with an unsupported scheme.
Diagnostic focus
- Record parent key identity, blob size, scheme, and whether the TPM owner/SRK state changed.
- Compare against blob-corruption and wrong-parent-key evidence before changing authorization data.
- For sealed data, verify PCR policy separately from decryption compatibility.
References for STATUS_TPM_DECRYPT_ERROR
- TCG: TPM 1.2 Part 1 Design Principles
- TCG: TPM 1.2 Part 2 Structures of the TPM
- TCG: TPM 1.2 Part 3 Commands
- Microsoft: TPM fundamentals
- UAPI Group: Linux TPM PCR Registry
- Microsoft: MS-ERREF NTSTATUS values
Looking for a different code? Search another status or error code.