1. Corrupted TPM Keys – Clear and Reseal BitLocker
In 9 out of 10 cases, this error means the TPM's internal keys got corrupted during a firmware update or a sudden power loss. I've seen it happen most often after a BIOS update on Dell OptiPlex 7080s and Lenovo ThinkStation P350s. Windows hits the DAA (Direct Anonymous Attestation) consistency check and it fails because the stored keys don't match the TPM's current state.
Don't bother running tpm.msc – it won't show anything useful. The real fix is to clear the TPM keys and let Windows re-seal them.
- Back up your BitLocker recovery key. Skip this and you'll lose data. Go to https://account.microsoft.com/devices/recoverykey and save the 48-digit key.
- Open an elevated Command Prompt or PowerShell.
- Run
manage-bde -statusto confirm which drive uses TPM-only protection. Write down the drive letter. - Run
manage-bde -protectors -disable C:(replace C: with your drive). This disables BitLocker protection temporarily. - Clear the TPM:
tpm.msc→ right-click TPM → Clear TPM. Accept the restart prompt. During reboot, the BIOS will ask you to confirm TPM clear – press F12 (or your vendor's key). - After Windows loads, re-enable BitLocker:
manage-bde -protectors -enable C: - Run
tpm.mscagain to verify the TPM status shows Ready.
If the error still appears after clearing TPM, move to the next fix.
2. BIOS/TPM Firmware Corruption – Force a Chip Reset
Sometimes clearing TPM from within Windows doesn't actually reset the chip's internal state. I've had this happen on HP EliteBooks where the TPM firmware partially bricked after a failed Intel ME update. The consistency check on inputData0 fails because the chip's NVRAM holds garbage.
The aggressive fix is to reset the TPM at the hardware level.
- Power off the machine completely.
- Unplug the power cord and remove the CMOS battery for 30 seconds. On laptops, also disconnect the internal battery if possible.
- While the battery is out, press and hold the power button for 30 seconds to drain residual charge.
- Reinsert the CMOS battery, reconnect power, and boot into BIOS.
- In BIOS, locate the TPM settings (usually under Security or Advanced). Look for an option like Reset TPM to Factory Defaults or Clear TPM. Enable it, save, and exit.
- Allow the machine to boot into Windows. You'll see a prompt about TPM being cleared – accept it.
- Run
tpm.mscto confirm the TPM is back to Ready state.
If your BIOS doesn't have a factory reset option, you can also try updating the TPM firmware from the vendor's website. On Dell systems, use the Dell Command | Update tool. On Lenovo, use Lenovo Vantage. On HP, use HP Support Assistant.
3. Corrupt Windows TPM Driver or Virtual Smart Card
Less common, but I've seen it cause this exact error on Windows 10 21H2 after a feature update. The TPM driver gets hung or the Microsoft Virtual Smart Card service holds a stale handle. The DAA inputData0 check fails because the driver layer isn't talking to the chip properly.
- Open Device Manager. Expand Security devices. Right-click Trusted Platform Module 2.0 and select Update driver → Browse my computer for drivers → Let me pick from a list. Choose the standard Microsoft driver (usually dated 2006). Click Next.
- Restart the machine.
- If that doesn't fix it, open an elevated Command Prompt and run:
net stop vmicvss
net stop vmicrdv
net stop vmsmp
sc config vmicvss start= disabled
sc config vmicrdv start= disabled
sc config vmsmp start= disabled - Reboot and test. If the error disappears, the Virtual Smart Card service was the culprit. You can re-enable those services later with
sc config vmicvss start= demandetc.
If none of these work, the TPM chip itself is physically failing. I've seen that on some Intel NUC8i7BEH units after 2+ years of heavy use. In that case, replace the motherboard or disable TPM in BIOS and use a software-based BitLocker key protector (PIN + USB).
Quick-Reference Summary Table
| Cause | Fix | Time Estimate |
|---|---|---|
| Corrupted TPM keys | Clear TPM from tpm.msc then reseal BitLocker | 15 minutes |
| BIOS/TPM firmware corruption | Clear CMOS, reset TPM in BIOS, update TPM firmware | 30-45 minutes |
| Corrupt TPM driver or Virtual Smart Card | Reinstall TPM driver, disable vmic* services | 20 minutes |
Start with fix #1 – it's the most common and quickest. If you're on a Dell or Lenovo, fix #2 is often needed after a BIOS update. Fix #3 is a hail mary but has saved me on Windows 10 builds after a feature update.