| Previous | Next |
| STATUS_TPM_MA_TICKET_SIGNATURE | STATUS_TPM_MA_SOURCE |
STATUS_TPM_MA_DESTINATION
The migration destination is not authenticated
STATUS_TPM_MA_DESTINATION reports failure in the destination-authentication part of a TPM key-migration flow. The TPM did not accept the proposed destination as a valid target for the migration operation.
This can occur even when the source key and migration authority are otherwise valid. The destination credential, migration authorization, or policy relationship may not match what the TPM requires.
It is useful to separate source-side and destination-side evidence. A source TPM or key can be healthy while the destination proof is stale, missing, or constructed for a different authority.
Diagnostic focus
- Log the destination public information and migration ticket used by the command.
- Verify that the migration authority explicitly authorized this destination.
- Check whether destination credentials were regenerated after the ticket was issued.
References
- TCG: TPM 1.2 Main Specification
- TCG: TPM 1.2 Part 1 Design Principles
- TCG: TPM 1.2 Part 2 Structures of the TPM
- TCG: TPM 1.2 Part 3 Commands
- Microsoft: TPM Base Services
- Microsoft: MS-ERREF NTSTATUS values
Looking for a different code? Search another status or error code.