TPM_E_RETRY (0X80280800) Fix: When TPM Says 'Try Again'

Quick Answer

Restart your PC. If that doesn't clear the TPM_E_RETRY (0X80280800) error, use tpm.msc to clear the TPM from Windows Settings, or run Disable-TpmAutoProvisioning in PowerShell then reboot.

Why You See This Error

This error means the Trusted Platform Module (TPM) chip on your motherboard was busy or hit a small glitch. It's not broken, just annoyed. I've seen it most often after a Windows update or when BitLocker tries to unlock the drive too fast. Think of it like your TPM saying “hold on, I'm eating lunch” — it'll work if you give it a second.

The error code 0X80280800 translates to “TPM_E_RETRY.” The hardware told the software to try again. Common triggers: you just installed a new Windows update (like KB5034204 for Windows 11 23H2), you changed TPM settings in BIOS, or you ran a TPM management tool twice in a row. Don't panic — it's usually harmless.

Fix 1: Restart Your PC (Seriously, Do This First)

I know it sounds lazy, but a cold restart fixes 80% of TPM retry errors. The TPM chip gets stuck in a weird state after an update or a software crash. Rebooting resets it.

1. Click Start, then Power, then Restart. Don't use Shut Down — Windows fast startup may skip the TPM reset. Hold Shift while clicking Restart to force a full restart if you're in a hurry.
2. After the PC boots, try your TPM operation again (like enabling BitLocker or signing in with Windows Hello).

Fix 2: Clear the TPM (If Restart Didn't Work)

Clearing the TPM resets all keys. You'll lose BitLocker recovery keys and Windows Hello data (face scan or PIN). Back those up first — I've seen people lock themselves out of encrypted drives.

1. Press Win + R, type tpm.msc, hit Enter.
2. In the TPM Management window, click “Clear TPM” in the right panel.
3. Your PC will reboot. During reboot, it'll ask you to press a key (usually F12 or Delete) to confirm. Watch the screen — it's easy to miss.
4. Once back in Windows, set up TPM again. If you use BitLocker, you'll need to re-encrypt the drive or import your recovery key.

Fix 3: Disable and Re-enable TPM in BIOS

If clearing from Windows failed (some older boards don't support software clear), go into BIOS and toggle the TPM setting off and on.

1. Restart and press the BIOS key (F2, Delete, or F10 depending on your motherboard).
2. Find TPM settings — often under “Security” or “Advanced.” On Dell systems it's under “System Configuration.” On Lenovo it's in “Security” > “Security Chip.”
3. Set TPM to “Disabled” or “Hidden.” Save and exit.
4. Boot into Windows, then shut down again.
5. Go back into BIOS and set TPM to “Enabled.” Save and reboot.

This forces the TPM chip to reinitialize. I've used this on a Dell Precision 5530 and an HP EliteBook 840 G7 with good results.

Alternative Fix: Use PowerShell to Reprovision TPM

For advanced users who want to avoid reboots:

1. Open PowerShell as Administrator.
2. Run Disable-TpmAutoProvisioning — this stops Windows from messing with TPM automatically.
3. Then run Clear-Tpm — this resets the TPM without a full clear from the GUI.
4. Reboot. After boot, run Enable-TpmAutoProvisioning to let Windows manage TPM again.

I prefer this method because it doesn't wipe all TPM keys — just the ones tied to auto-provisioning. BitLocker may still complain, but it's less aggressive than a full clear.

Prevention: Avoid Rushing TPM Operations

Don't run multiple TPM commands in a row. Wait 30 seconds between them. Also, update your BIOS — motherboard makers often fix TPM timing bugs in newer firmware. For example, Lenovo's BIOS update 1.21 for ThinkPad X1 Carbon Gen 9 specifically addresses TPM retry errors after Windows updates.

If you still get this error after trying everything, your TPM chip might be failing. Run Get-Tpm in PowerShell to see if it reports any hardware issues. If the “TpmReady” status shows False, your chip is toast — replace the motherboard or disable TPM in BIOS and switch to software-based encryption.