| Previous | Next |
| STATUS_TPM_DECRYPT_ERROR | STATUS_TPM_NO_ENDORSEMENT |
STATUS_TPM_INVALID_AUTHHANDLE
The TPM authorization handle is invalid
STATUS_TPM_INVALID_AUTHHANDLE is a Windows NTSTATUS value mapped from the TPM facility. For STATUS_TPM_INVALID_AUTHHANDLE, in this package the code belongs to TPM 1.2 style command processing, where Windows software, TBS, the TPM driver, and the hardware device all may be visible in the same failure path.
The relevant area is authorization session handles. The command references an authorization session handle that the TPM cannot use. The handle may be unknown, expired, flushed, of the wrong handle class, or owned by a different context.
This is separate from wrong authorization data. The TPM is rejecting the session handle itself before or during session validation. On Windows, TBS context lifetime is critical because objects created by commands are flushed when the context is closed.
Diagnostic focus
- Log the authorization handle, session creation command, TBS context, and command ordinal.
- Check for context close, flush, power management, or retry code that lost the original session.
- Create a fresh authorization session rather than reusing a handle from another context.
References for STATUS_TPM_INVALID_AUTHHANDLE
- TCG: TPM 1.2 Part 1 Design Principles
- TCG: TPM 1.2 Part 2 Structures of the TPM
- TCG: TPM 1.2 Part 3 Commands
- Microsoft: TPM Base Services
- Microsoft: Using TPM Base Services
- Microsoft: MS-ERREF NTSTATUS values
Looking for a different code? Search another status or error code.