{"record":{"id":"aed3f6d672eb1068","repo":"nats-io/nats-server","slug":"unable-to-get-seed-v","errorCode":null,"errorMessage":"unable to get seed: %v","messagePattern":"unable to get seed: (.+?)","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"server/tpm/js_ek_tpm_windows.go","lineNumber":163,"sourceCode":"user, err := nkeys.CreateUser()\nif err != nil {\n\treturn \"\", fmt.Errorf(\"unable to create seed: %v\", err)\n}\n// We'll use the seed to represent the encryption key.\njsStoreKey, err := user.Seed()\nif err != nil {\n\treturn \"\", fmt.Errorf(\"unable to get seed: %v\", err)\n}\nprivateArea, publicArea, err := tpm2.Seal(rwc, srkHandle, srkPassword, jsKeyPassword, policy, jsStoreKey)\nif err != nil {\n\treturn \"\", fmt.Errorf(\"unable to seal data: %v\", err)\n}","sourceCodeStart":145,"sourceCodeEnd":181,"githubUrl":"https://github.com/nats-io/nats-server/blob/3a66a489d262bf89b71a71c955c94920394532f3/server/tpm/js_ek_tpm_windows.go#L145-L181","documentation":"nkeys user.Seed() failed to return the seed string for the newly created user key. Although CreateUser succeeded, extracting the seed bytes failed, so there is no JetStream encryption key string to seal into the TPM.","triggerScenarios":"Thrown at server/tpm/js_ek_tpm_windows.go:163 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Retry key creation; the failure is normally transient","Check the nkeys library version for known Seed() issues","If persistent, regenerate after verifying system entropy"],"exampleFix":null,"handlingStrategy":"retry","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"3a66a489d262bf89b71a71c955c94920394532f3","analyzedAt":"2026-09-02T04:41:54.247Z","contentChangedAt":null,"schemaVersion":2},"datasetVersion":"2026-09-08T10:18:20.063Z"}