diff --git a/tpm/tpm_migration.c b/tpm/tpm_migration.c
index f9157fc..5087696 100644
--- a/tpm/tpm_migration.c
+++ b/tpm/tpm_migration.c
@@ -389,6 +389,7 @@
   info("TPM_CMK_ApproveMA()");
   /* verify authorization */
   res = tpm_verify_auth(auth1, tpmData.permanent.data.ownerAuth, TPM_KH_OWNER);
+  if (res != TPM_SUCCESS) return res;
   /* create hmac of a TPM_CMK_MA_APPROVAL structure */
   buf[0] = (TPM_TAG_CMK_MA_APPROVAL >> 8) & 0xff;
   buf[1] = TPM_TAG_CMK_MA_APPROVAL & 0xff;