---
name: "Fapi_Unseal"
section: "3"
platform: "linux"
package: "tpm2-tss"
version: "4.2.0-2"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/Fapi_Unseal"
---

# Fapi\_Unseal(3)

Fapi\_Unseal

## NAME

Fapi\_Unseal - Fapi\_Unseal

## SYNOPSIS

### Functions

TSS2\_RC **Fapi\_Unseal** (**FAPI\_CONTEXT** \*context, char const \*path, uint8\_t \*\*data, size\_t \*size)\
 TSS2\_RC **Fapi\_Unseal\_Async** (**FAPI\_CONTEXT** \*context, char const \*path)\
 TSS2\_RC **Fapi\_Unseal\_Finish** (**FAPI\_CONTEXT** \*context, uint8\_t \*\*data, size\_t \*size)\

## Detailed Description

FAPI functions to invoke Unseal either as one-call or in an asynchronous manner.

## Function Documentation

### TSS2\_RC Fapi\_Unseal (FAPI\_CONTEXT \* context, char const \* path, uint8\_t \*\* data, size\_t \* size)

One-Call function for Fapi\_Unseal

Unseals data from a seal in the FAPI metadata store.

**Parameters**

*context* The **FAPI\_CONTEXT** \
 *path* The path to the sealed data \
 *data* The decrypted data after unsealing. May be NULL \
 *size* The size of data in bytes. May be NULL

**Return values**

*TSS2\_RC\_SUCCESS* if the function call was a success. \
 *TSS2\_FAPI\_RC\_BAD\_REFERENCE* if context or path is NULL. \
 *TSS2\_FAPI\_RC\_BAD\_CONTEXT* if context corruption is detected. \
 *TSS2\_FAPI\_RC\_BAD\_PATH* if path does not point to a sealed data object. \
 *TSS2\_FAPI\_RC\_BAD\_VALUE* if the digestSize is zero. \
 *TSS2\_FAPI\_RC\_BAD\_SEQUENCE* if the context has an asynchronous operation already pending. \
 *TSS2\_FAPI\_RC\_IO\_ERROR* if the data cannot be saved. \
 *TSS2\_FAPI\_RC\_MEMORY* if the FAPI cannot allocate enough memory for internal operations or return parameters. \
 *TSS2\_FAPI\_RC\_NO\_TPM* if FAPI was initialized in no-TPM-mode via its config file. \
 *TSS2\_FAPI\_RC\_TRY\_AGAIN* if an I/O operation is not finished yet and this function needs to be called again. \
 *TSS2\_FAPI\_RC\_PATH\_NOT\_FOUND* if a FAPI object path was not found during authorization. \
 *TSS2\_FAPI\_RC\_KEY\_NOT\_FOUND* if a key was not found. \
 *TSS2\_FAPI\_RC\_GENERAL\_FAILURE* if an internal error occurred. \
 *TSS2\_FAPI\_RC\_SIGNATURE\_VERIFICATION\_FAILED* if the signature could not be verified \
 *TSS2\_ESYS\_RC\_\** possible error codes of ESAPI. \
 *TSS2\_FAPI\_RC\_NOT\_PROVISIONED* FAPI was not provisioned. \
 *TSS2\_FAPI\_RC\_AUTHORIZATION\_UNKNOWN* if a required authorization callback is not set. \
 *TSS2\_FAPI\_RC\_AUTHORIZATION\_FAILED* if the authorization attempt fails. \
 *TSS2\_FAPI\_RC\_POLICY\_UNKNOWN* if policy search for a certain policy digest was not successful.

### TSS2\_RC Fapi\_Unseal\_Async (FAPI\_CONTEXT \* context, char const \* path)

Asynchronous function for Fapi\_Unseal

Unseals data from a seal in the FAPI metadata store.

Call Fapi\_Unseal\_Finish to finish the execution of this command.

**Parameters**

*context* The **FAPI\_CONTEXT** \
 *path* The path to the sealed data

**Return values**

*TSS2\_RC\_SUCCESS* if the function call was a success. \
 *TSS2\_FAPI\_RC\_BAD\_REFERENCE* if context or path is NULL. \
 *TSS2\_FAPI\_RC\_BAD\_CONTEXT* if context corruption is detected. \
 *TSS2\_FAPI\_RC\_BAD\_PATH* if path does not point to a sealed data object. \
 *TSS2\_FAPI\_RC\_BAD\_VALUE* if the digestSize is zero. \
 *TSS2\_FAPI\_RC\_BAD\_SEQUENCE* if the context has an asynchronous operation already pending. \
 *TSS2\_FAPI\_RC\_IO\_ERROR* if the data cannot be saved. \
 *TSS2\_FAPI\_RC\_MEMORY* if the FAPI cannot allocate enough memory for internal operations or return parameters. \
 *TSS2\_FAPI\_RC\_NO\_TPM* if FAPI was initialized in no-TPM-mode via its config file.

### TSS2\_RC Fapi\_Unseal\_Finish (FAPI\_CONTEXT \* context, uint8\_t \*\* data, size\_t \* size)

Asynchronous finish function for Fapi\_Unseal

This function should be called after a previous Fapi\_Unseal\_Async.

**Parameters**

*context* The **FAPI\_CONTEXT** \
 *data* The decrypted data after unsealing. May be NULL \
 *size* The size of data in bytes. May be NULL

**Return values**

*TSS2\_RC\_SUCCESS* if the function call was a success. \
 *TSS2\_FAPI\_RC\_BAD\_REFERENCE* if context is NULL. \
 *TSS2\_FAPI\_RC\_BAD\_CONTEXT* if context corruption is detected. \
 *TSS2\_FAPI\_RC\_BAD\_SEQUENCE* if the context has an asynchronous operation already pending. \
 *TSS2\_FAPI\_RC\_IO\_ERROR* if the data cannot be saved. \
 *TSS2\_FAPI\_RC\_MEMORY* if the FAPI cannot allocate enough memory for internal operations or return parameters. \
 *TSS2\_FAPI\_RC\_TRY\_AGAIN* if the asynchronous operation is not yet complete. Call this function again later. \
 *TSS2\_FAPI\_RC\_PATH\_NOT\_FOUND* if a FAPI object path was not found during authorization. \
 *TSS2\_FAPI\_RC\_KEY\_NOT\_FOUND* if a key was not found. \
 *TSS2\_FAPI\_RC\_BAD\_VALUE* if an invalid value was passed into the function. \
 *TSS2\_FAPI\_RC\_GENERAL\_FAILURE* if an internal error occurred. \
 *TSS2\_FAPI\_RC\_SIGNATURE\_VERIFICATION\_FAILED* if the signature could not be verified \
 *TSS2\_ESYS\_RC\_\** possible error codes of ESAPI. \
 *TSS2\_FAPI\_RC\_NOT\_PROVISIONED* FAPI was not provisioned. \
 *TSS2\_FAPI\_RC\_BAD\_PATH* if the path is used in inappropriate context or contains illegal characters. \
 *TSS2\_FAPI\_RC\_AUTHORIZATION\_UNKNOWN* if a required authorization callback is not set. \
 *TSS2\_FAPI\_RC\_AUTHORIZATION\_FAILED* if the authorization attempt fails. \
 *TSS2\_FAPI\_RC\_POLICY\_UNKNOWN* if policy search for a certain policy digest was not successful.

## Author

Generated automatically by Doxygen for tpm2-tss from the source code.