The 30-Second Fix: Restart the TPM Service
This is the first thing I try on any machine hitting the 0X80290213 error. Open a Command Prompt as Administrator (right-click Start, pick Command Prompt (Admin) or Windows Terminal (Admin)). Then run:
net stop tbs && net start tbsThat stops and restarts the TPM Base Services. Most of the time, this clears the stale resource lock. Had a client last month whose print queue and VPN both threw this after a Windows update. This single command fixed both.
If you get an access denied, you're not running as admin. Right-click and choose Run as administrator.
The 5-Minute Fix: Clear the TPM
If restarting the service didn't work, the TPM itself has a bad token or session. You need to clear it. Warning: Clearing the TPM will invalidate BitLocker keys, Windows Hello, and any other TPM-dependent features. Make sure you have a backup of your BitLocker recovery key—stored in your Microsoft account or a file. Also, you'll need to re-enroll Windows Hello (fingerprint, PIN).
- Open Windows Security (shield icon in system tray).
- Click Device security.
- Under Security processor, click Security processor details.
- Click Security processor troubleshooting.
- Click Clear TPM. Confirm any prompts.
The machine will reboot. After reboot, Windows will reinitialize the TPM. Your BitLocker will ask for the recovery key—enter it. Then re-set up PIN or fingerprint. The 0X80290213 error should be gone. I've done this on dozens of Dell and HP business machines, and it sticks 9 times out of 10.
If you can't get into Windows at all, you can also clear the TPM from the BIOS/UEFI. Restart, hit F2 (Dell) or F10 (HP) to enter setup, look for Security > TPM > Clear.
The 15+ Minute Fix: Update TPM Driver or Replace Hardware
If clearing the TPM didn't help, the problem is likely a corrupt driver or failing hardware. Let's test the driver first.
1. Update the TPM Driver
Open Device Manager (right-click Start, pick Device Manager). Expand Security devices. You'll see Trusted Platform Module 2.0. Right-click it, choose Update driver > Search automatically for drivers. If Windows finds nothing, go to your laptop or motherboard manufacturer's site and download the latest chipset or TPM driver. On a Lenovo ThinkPad, I've seen a 2023 driver fix this exact error on Windows 11 22H2.
If that doesn't work, uninstall the device: right-click, Uninstall device. Check Delete the driver software for this device if it appears. Reboot—Windows will reinstall the generic driver.
2. Check for Firmware Update
Many TPM issues got fixed in BIOS/UEFI updates, especially for Intel PTT or AMD fTPM. Go to your PC maker's support site, find your model, and install the latest BIOS. After flashing, enter BIOS and confirm TPM is still enabled (usually under Security or Advanced). On AMD systems, disable fTPM, save and exit, re-enable it on next boot—this resets the fTPM state without losing keys.
3. Test Hardware
If none of that worked, the TPM chip itself might be dying. I've seen this on older machines (pre-2018) with discrete TPM chips. Run a TPM diagnostic:
tpmtool getdeviceinformationLook for errors in the output. If you see TPM is not usable or TPM command failed, it's likely hardware. Try the PowerShell command:
Get-WmiObject -Namespace root/cimv2/security/microsofttpm -Class Win32_TpmIf IsEnabled_InitialValue is False or IsActivated_InitialValue is False, you can try to activate it in BIOS, but if it's dead, you need to replace the motherboard or disable TPM entirely (and lose BitLocker). For business laptops under warranty, I've had HP swap the system board for this error.
Real story: Had a client with a 2019 Lenovo ThinkPad X1 Carbon that kept throwing 0X80290213 every few days. All software fixes failed. Finally, a BIOS update (version 1.48) explicitly fixed a TPM timeout issue. After flashing, the error never returned. Always check for BIOS updates first before replacing hardware.
If you're stuck and just need the machine to boot without TPM features, you can disable TPM in BIOS, but that kills BitLocker and Windows Hello. Only do this as a temporary workaround.