0X80290213

Fix TBSIMP_E_RESOURCE_EXPIRED (0X80290213) Fast

This error means the Trusted Platform Module (TPM) resource timed out or was revoked. Fix it by clearing TPM or restarting the service.

The 30-Second Fix: Restart the TPM Service

This is the first thing I try on any machine hitting the 0X80290213 error. Open a Command Prompt as Administrator (right-click Start, pick Command Prompt (Admin) or Windows Terminal (Admin)). Then run:

net stop tbs && net start tbs

That stops and restarts the TPM Base Services. Most of the time, this clears the stale resource lock. Had a client last month whose print queue and VPN both threw this after a Windows update. This single command fixed both.

If you get an access denied, you're not running as admin. Right-click and choose Run as administrator.

The 5-Minute Fix: Clear the TPM

If restarting the service didn't work, the TPM itself has a bad token or session. You need to clear it. Warning: Clearing the TPM will invalidate BitLocker keys, Windows Hello, and any other TPM-dependent features. Make sure you have a backup of your BitLocker recovery key—stored in your Microsoft account or a file. Also, you'll need to re-enroll Windows Hello (fingerprint, PIN).

  1. Open Windows Security (shield icon in system tray).
  2. Click Device security.
  3. Under Security processor, click Security processor details.
  4. Click Security processor troubleshooting.
  5. Click Clear TPM. Confirm any prompts.

The machine will reboot. After reboot, Windows will reinitialize the TPM. Your BitLocker will ask for the recovery key—enter it. Then re-set up PIN or fingerprint. The 0X80290213 error should be gone. I've done this on dozens of Dell and HP business machines, and it sticks 9 times out of 10.

If you can't get into Windows at all, you can also clear the TPM from the BIOS/UEFI. Restart, hit F2 (Dell) or F10 (HP) to enter setup, look for Security > TPM > Clear.

The 15+ Minute Fix: Update TPM Driver or Replace Hardware

If clearing the TPM didn't help, the problem is likely a corrupt driver or failing hardware. Let's test the driver first.

1. Update the TPM Driver

Open Device Manager (right-click Start, pick Device Manager). Expand Security devices. You'll see Trusted Platform Module 2.0. Right-click it, choose Update driver > Search automatically for drivers. If Windows finds nothing, go to your laptop or motherboard manufacturer's site and download the latest chipset or TPM driver. On a Lenovo ThinkPad, I've seen a 2023 driver fix this exact error on Windows 11 22H2.

If that doesn't work, uninstall the device: right-click, Uninstall device. Check Delete the driver software for this device if it appears. Reboot—Windows will reinstall the generic driver.

2. Check for Firmware Update

Many TPM issues got fixed in BIOS/UEFI updates, especially for Intel PTT or AMD fTPM. Go to your PC maker's support site, find your model, and install the latest BIOS. After flashing, enter BIOS and confirm TPM is still enabled (usually under Security or Advanced). On AMD systems, disable fTPM, save and exit, re-enable it on next boot—this resets the fTPM state without losing keys.

3. Test Hardware

If none of that worked, the TPM chip itself might be dying. I've seen this on older machines (pre-2018) with discrete TPM chips. Run a TPM diagnostic:

tpmtool getdeviceinformation

Look for errors in the output. If you see TPM is not usable or TPM command failed, it's likely hardware. Try the PowerShell command:

Get-WmiObject -Namespace root/cimv2/security/microsofttpm -Class Win32_Tpm

If IsEnabled_InitialValue is False or IsActivated_InitialValue is False, you can try to activate it in BIOS, but if it's dead, you need to replace the motherboard or disable TPM entirely (and lose BitLocker). For business laptops under warranty, I've had HP swap the system board for this error.

Real story: Had a client with a 2019 Lenovo ThinkPad X1 Carbon that kept throwing 0X80290213 every few days. All software fixes failed. Finally, a BIOS update (version 1.48) explicitly fixed a TPM timeout issue. After flashing, the error never returned. Always check for BIOS updates first before replacing hardware.

If you're stuck and just need the machine to boot without TPM features, you can disable TPM in BIOS, but that kills BitLocker and Windows Hello. Only do this as a temporary workaround.

Related Errors in Windows Errors
0XC00D10D5 Fix NS_E_WMP_FORMAT_FAILED 0XC00D10D5 in Windows Media Player 0X00002193 Fix 0x00002193: Disabled Cross-Ref Replica Change 0X00000270 DLL init failed during logoff: what 0x00000270 means 0XC00D10A7 Fix NS_E_WMPCORE_PLAYLIST_EVENT_EMPTY (0XC00D10A7) in Windows Media Player

Was this solution helpful?

EP
Erropedia Team
Tech Support Editors
The Erropedia editorial team researches and documents real-world tech errors from across Windows, Linux, macOS, networking, databases, cloud platforms, and more. Every solution is reviewed for accuracy and updated as software and systems evolve.