{"record":{"id":"ccb812af335a8edb","repo":"nats-io/nats-server","slug":"unable-to-create-seed-v","errorCode":null,"errorMessage":"unable to create seed: %v","messagePattern":"unable to create seed: (.+?)","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"server/tpm/js_ek_tpm_windows.go","lineNumber":158,"sourceCode":"if err := tpm2.FlushContext(rwc, sessHandle); err != nil {\n\treturn \"\", fmt.Errorf(\"unable to flush session: %v\", err)\n}\n// Seal the data to the parent key and the policy\nuser, err := nkeys.CreateUser()\nif err != nil {\n\treturn \"\", fmt.Errorf(\"unable to create seed: %v\", err)\n}\n// We'll use the seed to represent the encryption key.\njsStoreKey, err := user.Seed()\nif err != nil {\n\treturn \"\", fmt.Errorf(\"unable to get seed: %v\", err)\n}","sourceCodeStart":140,"sourceCodeEnd":176,"githubUrl":"https://github.com/nats-io/nats-server/blob/3a66a489d262bf89b71a71c955c94920394532f3/server/tpm/js_ek_tpm_windows.go#L140-L176","documentation":"nkeys.CreateUser failed while generating the random nkey seed that serves as the JetStream encryption key. This is a local cryptographic randomness failure (crypto/rand read error), not a TPM problem; without a fresh seed there is no key material to seal.","triggerScenarios":"Thrown at server/tpm/js_ek_tpm_windows.go:158 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Check system entropy availability (/dev/urandom) and OS-level crypto/rand errors in the wrapped message","Simply retry: seed generation failures are typically transient","Investigate the host's random source if failures persist"],"exampleFix":null,"handlingStrategy":"retry","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"3a66a489d262bf89b71a71c955c94920394532f3","analyzedAt":"2026-09-02T04:41:54.247Z","contentChangedAt":null,"schemaVersion":2},"datasetVersion":"2026-09-08T10:18:20.063Z"}