TPM_E_DISABLED (0x80280007): TPM Disabled Fix That Works

1. TPM is Disabled in BIOS/UEFI — The Real Culprit

This is the one that gets 9 out of 10 people. The TPM_E_DISABLED error means your computer's Trusted Platform Module is sitting there, powered off, ignored by the firmware. It's like having a car with the battery disconnected. Most common trigger? A BIOS update that resets your TPM setting to "Disabled" or "Hidden." Had a client last month whose Dell OptiPlex 7080 threw this error after a Windows 11 feature update — the update didn't break TPM, it just exposed that the BIOS had quietly turned it off.

How to Enable TPM in BIOS/UEFI

1. Restart your PC and mash the BIOS key. Common keys: F2 (Dell, Lenovo), F10 (HP), Del (custom builds), Esc (some HP/Asus). If you're not sure, spam all of them.
2. Once in BIOS, look for a section labeled Security or Advanced. On some boards it's under Trusted Computing.
3. Find the TPM setting. It might be called TPM Device, Security Chip, Intel PTT (on Intel systems with firmware TPM), or AMD fTPM (on AMD systems).
4. Set it to Enabled or On. If you see Discrete TPM vs Firmware TPM, pick Firmware TPM unless you have a physical TPM chip.
5. Save and exit — usually F10, then confirm.

If you're on a Dell, here's the exact path: System Configuration → Security → TPM 2.0 Security → ON. HP: Security → TPM Embedded Security → Enable. Lenovo ThinkPad: Security → Security Chip → Enabled.

After boot, run tpm.msc from Run (Win+R) to confirm TPM status. If it says "The TPM is ready for use," you're golden.

2. TPM Firmware Corruption or Bad Update

Sometimes the TPM is physically enabled but its firmware is hosed. I saw this on a Lenovo ThinkCentre M910q after a BIOS update that partially borked the TPM firmware. You'll get the same 0x80280007 error even though the setting is on.

Fix: Clear TPM from Windows (If You Can Boot)

1. Open Windows Security (search for it).
2. Go to Device Security → Security Processor Details → Security Processor Troubleshooting → Clear TPM.
3. Click Clear and restart. Windows will reboot and re-initialize the TPM.

If you can't boot into Windows, you can do this from the BIOS/UEFI. Look for an option called Clear TPM, Reset TPM, or Factory Defaults under the Security menu. On Dell systems, it's under System Configuration → TPM 2.0 Security → Clear. On HP, it's Security → TPM Embedded Security → Reset to Factory Defaults.

Important: Clearing the TPM will wipe any keys stored on it — that means BitLocker will ask for your recovery key. If you don't have it, pause BitLocker first (in Windows) or backup your recovery key before clearing. I had a call from a panicked small business owner who cleared TPM without the recovery key — had to reimage the whole machine. Don't be that guy.

3. Outdated or Missing TPM Driver

Less common, but I've seen it on older Windows 10 machines that got pushed to Windows 11. The TPM driver doesn't match the Windows version. You'll see the error in Device Manager under Security Devices — yellow exclamation mark next to Trusted Platform Module 2.0.

Fix: Update TPM Driver

1. Press Win + X → Device Manager.
2. Expand Security Devices.
3. Right-click Trusted Platform Module 2.0 → Update driver.
4. Choose Browse my computer for drivers → Let me pick from a list of available drivers.
5. If you see multiple TPM drivers, pick the one with a recent date — typically from 2022 or later. Avoid any that say "Microsoft" with no version number.

If that doesn't work, go to your motherboard or PC manufacturer's support site and download the latest TPM or chipset driver. For Dell, search your model + "TPM driver" on Dell's support page. For HP, same thing on HP's site. Don't use third-party driver updaters — they cause more problems than they fix.

Quick-Reference Summary Table

Start with the BIOS check — that's the fix 90% of the time. If you're still stuck after trying these three, your TPM chip might be physically dead, which is rare but happens. In that case, you're looking at a motherboard replacement. But don't jump to that conclusion until you've checked the BIOS and cleared the TPM. I've had clients who bought new hardware only to realize they just needed to flip one BIOS setting. Save yourself the headache.