| Previous | Next |
| STATUS_TPM_MA_SOURCE | STATUS_TPM_PERMANENTEK |
STATUS_TPM_MA_AUTHORITY
The migration authority is not the expected authority
STATUS_TPM_MA_AUTHORITY points to the authority component of a TPM migration flow. The TPM did not accept the migration authority as the entity allowed to approve this operation.
This is a policy and trust error. The command may contain well-formed source and destination material, but the authority that signed or authorized the move is not the one expected for the key or migration scheme.
Diagnosis should therefore focus on authority identity, certificate/public-key selection, and whether the key was created with the expected migratable policy.
Diagnostic focus
- Record the migration authority public key or certificate selected by the caller.
- Check the key creation policy for allowed migration authority.
- Make sure the migration ticket was not issued under a development or previous authority.
References
- TCG: TPM 1.2 Main Specification
- TCG: TPM 1.2 Part 1 Design Principles
- TCG: TPM 1.2 Part 2 Structures of the TPM
- TCG: TPM 1.2 Part 3 Commands
- Microsoft: TPM Base Services
- Microsoft: MS-ERREF NTSTATUS values
Looking for a different code? Search another status or error code.