TakeOwnership method of the Win32_Tpm class
The TakeOwnership method of the Win32_Tpm class installs an owner for the TPM. The owner of the TPM can make full use of TPM capabilities. After an owner is set, no other user or software can claim ownership of the TPM.
The IsEnabled, IsActivated, and IsOwnershipAllowed methods must all be true before the TakeOwnership method can succeed.
Syntax
uint32 TakeOwnership(
[in, optional] string OwnerAuth
);
Parameters
-
OwnerAuth [in, optional]
-
Type: string
A string that identifies the TPM owner. This string must be a base64-encoded null-terminated string that contains exactly 20 bytes of binary data. Use the ConvertToOwnerAuth method to translate a passphrase to this expected format. The OwnerAuth parameter is read from the registry if none is provided.
Return value
Type: uint32
All TPM errors as well as errors specific to TPM Base Services can be returned.
The following table lists some of the common return codes.
| Return code/value | Description |
|---|---|
|
The method was successful. |
|
The OwnerAuth parameter is not valid. |
|
An owner already exists on the TPM. |
|
No endorsement key can be found on the TPM. To create an endorsement key pair on the TPM, see the CreateEndorsementKeyPair method. |
|
An owner cannot be installed on this TPM. For information about how to allow installation of a device owner, see SetPhysicalPresenceRequest. |
|
The TPM is defending against dictionary attacks and is in a time-out period. For more information, see the ResetAuthLockOut method. |
Remarks
The methods IsEnabled, IsActivated, and IsOwnershipAllowed must all be true before TakeOwnership can succeed.
You should use the ConvertToOwnerAuth method to change a passphrase into the input value used for the OwnerAuth parameter.
The TakeOwnership method backs up the owner authorization value to Active Directory if the appropriate Group Policy settings have been configured.
Managed Object Format (MOF) files contain the definitions for Windows Management Instrumentation (WMI) classes. MOF files are not installed as part of the Windows SDK. They are installed on the server when you add the associated role by using the Server Manager. For more information about MOF files, see Managed Object Format (MOF).
Requirements
| Requirement | Value |
|---|---|
| Minimum supported client |
Windows Vista [desktop apps only] |
| Minimum supported server |
Windows Server 2008 [desktop apps only] |
| Namespace |
Root\CIMV2\Security\MicrosoftTpm |
| MOF |
|
| DLL |
|
See also
Feedback
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see: https://aka.ms/ContentUserFeedback.
Submit and view feedback for