| Previous | Next |
| STATUS_PCP_FLAG_NOT_SUPPORTED | STATUS_PCP_BUFFER_TOO_SMALL |
STATUS_PCP_NOT_SUPPORTED
Unsupported Platform Crypto Provider operation
STATUS_PCP_NOT_SUPPORTED means the requested CNG key-storage operation is outside the capabilities of Microsoft Platform Crypto Provider or the underlying TPM. The provider is designed for TPM-protected private keys, not as a drop-in replacement for every software-KSP algorithm and property.
The most useful distinction is between provider availability and operation support. A TPM may be present and the provider may open successfully while a particular algorithm, key usage, export policy, or attestation-related operation is still unsupported.
Diagnostic focus
- Confirm provider availability separately from the specific operation that failed.
- Compare the requested algorithm, key size, padding mode, and key usage with TPM/provider capabilities.
- Use the software KSP only as a capability comparison; do not silently migrate protected keys out of hardware without policy approval.
References
- Microsoft: CNG key storage providers
- Microsoft: NCryptOpenStorageProvider
- Microsoft: Key storage and retrieval
- Microsoft: TPM Base Services
- Microsoft: COM error codes for TPM, PLA and FVE
Looking for a different code? Search another status or error code.