| Previous | Next |
| STATUS_PCP_BUFFER_LENGTH_MISMATCH | STATUS_PCP_TICKET_MISSING |
STATUS_PCP_IFX_RSA_KEY_CREATION_BLOCKED
RSA key creation is blocked by a TPM security mitigation
STATUS_PCP_IFX_RSA_KEY_CREATION_BLOCKED is a deliberate security block, not a transient failure. Windows refuses the requested TPM RSA key creation because the platform is affected by a known security vulnerability. The useful response is to preserve the security boundary while identifying the supported remediation for the TPM and system.
Do not work around this by disabling security checks or silently moving a security-sensitive identity to a software key. That may restore an application flow while removing the hardware protection that the caller or relying party expects.
What to check
- Identify TPM manufacturer, firmware version, Windows servicing state, requested RSA parameters, and the product that requested the key.
- Follow Microsoft and the device manufacturer's security guidance for firmware or platform remediation.
- After a supported update, validate whether affected enrollment or key-rotation workflows require a new key and certificate.
References
Looking for a different code? Search another status or error code.