Fix TPM_E_BAD_MODE (0X8028002C) in 3 Steps

What Triggers TPM_E_BAD_MODE (0x8028002C)?

You'll see this error when Windows can't talk to your TPM chip properly. I've seen it most often after a BIOS update, a sudden power outage during boot, or if you've switched between TPM 1.2 and 2.0 in the BIOS. The TPM gets stuck in what Microsoft calls a "bad mode" — it won't respond to normal commands like encryption or attestation. The exact error code is 0x8028002C. Don't panic — it's fixable.

Quick Fix (30 seconds): Restart and Check TPM Status

Before you do anything drastic, try this first. Sometimes the TPM just needs a full reset of its state. A cold boot can clear whatever temporary lock it's in.

1. Click the Windows button, then the power icon, and choose Restart. Not Shut down — Restart. Windows 10 and 11 use Fast Startup, so a shutdown alone won't fully reset the TPM.
2. When the computer comes back up, press Win + R, type tpm.msc, and hit Enter. The TPM Management console should open.
3. Look at the status. If it says "The TPM is ready for use" and the error code is gone, you're done.
4. If you still see a yellow warning or the error, move to the next step.

Expected outcome: After the restart, the console should show a green "Ready" status. If it doesn't, the TPM is still stuck.

Moderate Fix (5 minutes): Clear TPM from Windows

If a restart didn't work, we'll clear the TPM through Windows. This resets the chip to its factory state. Important: If you use BitLocker or Windows Hello (PIN, fingerprint), this will turn them off. You'll need your BitLocker recovery key to get back in — have it ready or stored on your Microsoft account.

1. Press Win + I to open Settings. Go to Update & Security (Windows 10) or Privacy & Security (Windows 11), then click Windows Security.
2. Click Device security under the Security at a glance section.
3. Under Security processor, click Security processor details.
4. You'll see a link that says Security processor troubleshooting. Click it.
5. On the next page, click Clear TPM. Windows will prompt you to confirm — you'll need to restart your PC.
6. Click Clear and restart. The computer will reboot and clear the TPM silently. No blue screen, no extra keys.
7. After the restart, open tpm.msc again. The TPM should now be ready.

What you should see: After the restart, the TPM management console will show a clean, ready state. If you had BitLocker, you'll be asked to enter your recovery key on the next boot — that's normal.

Advanced Fix (15+ minutes): Reset TPM from BIOS/UEFI

If Windows can't clear the TPM, the problem might be at the firmware level. This happens on some Dell, Lenovo, or HP machines where the TPM is locked by BIOS settings. You'll need to enter your system's BIOS.

1. Restart your PC. As it boots, press the key to enter BIOS — usually F2, Del, F10, or Esc, depending on your motherboard. Watch for a splash screen that says "Press F2 to enter Setup."
2. Once inside BIOS, look for Security or Advanced tab. The exact name varies. On a Lenovo ThinkPad, it's under Security > Security Chip. On a Dell XPS, look under Security > TPM 2.0 Security.
3. Find the option to Clear, Reset, or Disable the TPM. It might say "Clear TPM" or "Factory Reset." Select it.
4. If there's no clear option, set TPM to Disabled, save and exit. Then re-enter BIOS and set it back to Enabled. This effectively resets it.
5. Save changes and exit. The PC will reboot. On some systems, you'll see a message like "TPM cleared. Press any key to continue."
6. After booting back to Windows, open tpm.msc. You should see the TPM is ready.

Real-world example: I had a user with a Dell Precision 3650 that got error 0x8028002C after a BIOS update. Windows couldn't clear it. In the BIOS, under Security > TPM 2.0 Security, we toggled it from "Enabled" to "Disabled," saved, rebooted, then re-enabled it. The error was gone.

What If None of These Work?

If you've tried all three steps and still see the error, you might have a hardware failure. The TPM chip itself could be damaged. Check your motherboard manual — some have a physical jumper to reset the TPM. If not, you'll likely need to replace the motherboard or the TPM module (if it's a separate daughterboard). For laptops, that often means sending it to the manufacturer.

One last thing — make sure your BIOS firmware is up to date. TPM bugs are sometimes fixed in newer BIOS versions. Check your manufacturer's support site for a BIOS update, install it, then try the moderate fix again.