Windows 10: TPM lockout for 2 hours

Why do I get TPM locked out of Windows 10 for two hours with error "This sign in option is disabled because of failed sign in attempts or repeated shutdowns. Use a different sign in option or keep your device powered on for at least two hours and then try again." after entering wrong PIN too many times? There is no option to sign in with Microsoft account password on Windows 10 v2004 since it requires Windows Hello sign-in for Microsoft accounts. I had to wait two hours for the lockout to expire and if I get one more incorrect pin attempt I get locked out again for another two hours. Is there a way to reset the TPM 2.0 lockout on Windows 10 v2004. The TPM lockout makes the computer unusable for the next two hours. I have an ASUS motherboard and an ASUS TPM-M R2.0 module plugged into the motherboard TPM connector.

:)

 

TPM 1.2 Lockout

I entered a bitlocker key incorrectly and was told that there were too many attempts. This was about 36 hours ago

I used the recovery key to get onto my laptop but every time I restarted my machine the same error came up.

I have now done the following about 24-hours ago:

• Disabled Bitlocker including decrypting the drive
• Disabled the TPM
• Re-enabled the TPM
• Cleared the TPM

When I try and enable bitlocker again I get the message "The TPM is defending against dictionary attacks and is in a time-out period"

Questions

1) How do I overcome this block?

2) How does the time-out period work - do you have to keep the computer turned on for the whole period for it to reset?

3) Does every time I try and re-enable bitlocker reset the lockout period timer?

It is a Dell laptop so I think the lockout period is 24-hours.

 

TPM 1.2 Lockout

Hi RobBoston83-

I'm Kevin B. Independent advisor and a Windows 10 user like you. I do apologize that you are experiencing this kind of inconvenience.

For some reason, there's nothing much that w can do since it is not software related problem.

As a security feature the TPM will lock itself to help prevent attacks or any kind of unauthorized access. Below will provide some information on TPM failure attempt options, lockout recovery times and lockout recovery.

Failure Tries:

Up to 13 per day. Please see the following table for detailed failure-lockout periods.

While TPM is in lockout, no authorization command will be accepted during lockout period.

Failure Tries Recovery Time:

The failure try counts will be reset after 24 hours from last failure try.

The timer will be reset after the TPM VSB (TPM chip power cell) is powered-up.

Lockout Recovery:

Keep the TPM VSB powered during the lockout period and wait for the lockout duration period to expire.

Or

Reset both the failure tries and the lockout state by using the Microsoft TPM Management Console with correct owner password.

Hope this will help and have a blessed day!

Thanks.

Kevin B.

Independent advisor

 

Windows 10 BitLocker and TPM lockout

I checked the TPM lockout status 6 hours later and it had cleared thankfully. I have now been able to re-enable BitLocker.

It still seems crazy you can't manually reset the status when you are successfully logged in as an Administrator because Windows now holds the keys and doesn't let you access them at all. You are therefore left for hours waiting on the natural timeout process.

Stephen.