0X8028001F

Fix TPM_E_IOERROR (0X8028001F) - Stop the I/O Error Loop

That TPM I/O error (0X8028001F) usually means your PC can't talk to the TPM chip. We'll fix it in three steps, from a quick reboot to resetting the TPM.

What's happening when you see this error

That 0X8028001F code means Windows sent a command to your TPM chip and the chip didn't respond properly. Think of it like a phone call where the line goes dead. This usually happens right after a Windows update, a BIOS update, or if you've been messing with BitLocker or Secure Boot settings. You might see it as a pop-up from the TPM management tool, or as an error in Event Viewer under System logs.

Don't panic. Nine times out of ten, this is a temporary glitch. We'll start with the fastest fix and work our way up.

Fix 1: The 30-Second Try – Reboot

Seriously. Just restart your PC. The TPM can get stuck in a bad state after a Windows update or a sleep/wake cycle. A clean boot resets the communication channel between Windows and the TPM hardware.

  1. Click Start, then the Power icon.
  2. Select Restart. Don't choose Shut down and turn back on manually – that skip the full reset cycle on some modern PCs.
  3. After the computer comes back up, open TPM Management by pressing Win + R, typing tpm.msc, and hitting Enter.
  4. Look at the status. If it says "The TPM is ready for use," you're golden. If you still see the error, move to Fix 2.

Expected outcome: The TPM status should show as ready. If it still says "Compatible TPM cannot be found" or the same error code, keep going.

Fix 2: The 5-Minute Moderate Fix – Clear TPM Driver Cache

Sometimes the driver Windows uses to talk to the TPM gets stale or corrupted. You don't need to uninstall it – just force Windows to reload it.

  1. Press Win + X and select Device Manager.
  2. Expand the Security devices section. You should see something like "Trusted Platform Module 2.0."
  3. Right-click that entry and select Disable device. When prompted, click Yes.
  4. Wait 10 seconds, then right-click it again and choose Enable device.
  5. Close Device Manager and reboot your PC.
  6. Check TPM status again via tpm.msc.

What to expect: After the reboot, the TPM should show as ready. If you still get the I/O error, we need to go deeper.

Pro tip: If you don't see a "Security devices" section, your PC might have an older TPM version. Check under "System devices" – sometimes they hide there. If you still can't find it, your TPM might be disabled in BIOS (we'll cover that in Fix 3).

Fix 3: The 15+ Minute Advanced Fix – Clear and Reset the TPM

This is the nuclear option. It wipes the TPM's internal storage, which includes any BitLocker keys or certificate data stored on the chip. Important: If you use BitLocker, pause or turn it off first. Go to Control Panel > BitLocker Drive Encryption and select Suspend protection for all drives. Otherwise, you'll be locked out of your data.

  1. Press Win + R, type tpm.msc, and hit Enter.
  2. In the right-hand Actions pane, click Clear TPM.... You'll see a warning – read it, then click Clear TPM and restart.
  3. Your PC will restart. During the reboot, you'll likely see a BIOS-level prompt asking you to press F1 (or F2 on some systems) to confirm clearing the TPM. Do it. This is normal – it's a security measure to prevent software from silently wiping your keys.
  4. After Windows loads, Windows will automatically re-initialize the TPM. Open tpm.msc again – it should now show "The TPM is ready for use."
  5. If you suspended BitLocker earlier, re-enable it now by going back to BitLocker Drive Encryption and clicking Resume protection.

Still broken? Then it's a hardware problem. Check your BIOS settings:

  • Reboot and enter BIOS (usually Del or F2 during startup).
  • Look for a section called Security or Trusted Computing.
  • Make sure TPM Device or Security Device is set to Enabled, not Disabled or Firmware TPM (if you have a CPU with firmware TPM, use that setting).
  • Save and exit.

If it's still failing after a BIOS check, your TPM chip might be physically faulty. On a desktop, you can sometimes reseat the TPM module (if it's a discrete one). On laptops, you're looking at a motherboard replacement.

When to just give up and disable the TPM

If you don't use BitLocker, Windows Hello, or any app that relies on the TPM (like some VPNs or password managers), you can disable the TPM in BIOS. It won't hurt your system. But if you're on Windows 11, the OS checks for TPM 2.0 during installation – disabling it won't stop updates, but some newer security features may not work. Honestly, the clear-and-reset step works for 95% of cases, so try that first.

Related Errors in Windows Errors
0x8007232B Windows Activation Server Unreachable? Here's the Fix 0XC00D104E 0XC00D104E fix: Windows Media Player preroll status error 0XC00D158D Fix NS_E_ARCHIVE_REACH_QUOTA (0XC00D158D) – Archive Plug-In Quota Hit 0XC00D006D Fix NS_E_WAVE_OPEN (0XC00D006D) error when opening wave device in use

Was this solution helpful?

EP
Erropedia Team
Tech Support Editors
The Erropedia editorial team researches and documents real-world tech errors from across Windows, Linux, macOS, networking, databases, cloud platforms, and more. Every solution is reviewed for accuracy and updated as software and systems evolve.