Je suis investigating a TPM lockout sur mon Windows machine. Comment puis-je find out what caused a TPM lockout?
My environment:
- Windows 11 24H2 Pro
- [MSI GS76 Stealth 11UH](https://us-store.msi.com/GS76-Stealth-11UH-078?search=%2011UH-078) laptop ([mirror](https://web.archive.org/web/20220723053332/https://us-store.msi.com/GS76-Stealth-11UH-078?search=%2011UH-078))
- [Information](https://i.sstatic.net/OKibtE18.png) from `tpm.msc`:
- TPM Specification Version: Your système is running 2.0.
- Manufacturer Name: The module is manufactured by INTC (Intel).
- Manufacturer Version: The specific firmware version is 600.7.0.0.
My situation:
- I ne recall entering incorrect PIN codes récemment but Je sun'est pas around my laptop 24/7 and I do have a cat.
- I had a recent laptop shutdown earlier dans le day. Je ne sais pas what caused it.
So Je ne sais pas si le TPM lockout was caused by incorrect PIN codes, an unexpected laptop shutdown or quelque chose else. Comment puis-je find out what caused a TPM lockout?
Comment puis-je find out what caused a TPM lockout?
Re: Comment puis-je find out what caused a TPM lockout?
Use `tpmtool gatherlogs %userprofile%\Desktop` and vérifiez le `TpmEvents.evtx` event log it generates for clues. (From what Je peux tell, this basically does the same as filtering the Windows > Système event viewer log for events from "TPM" and "TPM-WMI").
Causes for TPM locks could include Windows Hello auth failures, inadvertent power downs that increment the échoué authentication register, typos at the prompt etc.
Installed any logiciel or pilote mises à jour récemment, including ones that updated any UEFI/BIOS?
Might be worth checking event viewer for any other Critical/Warning/Erreur level logs (filter the Windows logs), as suggested in this discussion sur le [MS community forums](https://learn.microsoft.com/en-us/answers/questions/5634945/i-keep-getting-problems-with-tpm-wmi-event-code-10).
Other tools vous pouvez query to vérifiez le TPM is fonctionnel correctly are `get-tpm` in an Administrator PowerShell, and the `tpm.msc` management console snap-in.
Some event IDs that pourrait être pertinent include
- 14: TPM périphérique pilote encountered a non-recoverable erreur, preventing TPM services.
- 17: TPM matériel échoué to execute a command.
- 1040: problème related vers le TPM and Secure Boot
- 1796: another Secure Boot mise à jour problème ('not disponible', etc)
*Related reading*
- [https://learn.microsoft.com/en-us/troubleshoot/windows-client/windows-security/tpm-device-driver-error-log](https://learn.microsoft.com/en-us/troubleshoot/windows-client/windows-security/tpm-device-driver-error-log)
Causes for TPM locks could include Windows Hello auth failures, inadvertent power downs that increment the échoué authentication register, typos at the prompt etc.
Installed any logiciel or pilote mises à jour récemment, including ones that updated any UEFI/BIOS?
Might be worth checking event viewer for any other Critical/Warning/Erreur level logs (filter the Windows logs), as suggested in this discussion sur le [MS community forums](https://learn.microsoft.com/en-us/answers/questions/5634945/i-keep-getting-problems-with-tpm-wmi-event-code-10).
Other tools vous pouvez query to vérifiez le TPM is fonctionnel correctly are `get-tpm` in an Administrator PowerShell, and the `tpm.msc` management console snap-in.
Some event IDs that pourrait être pertinent include
- 14: TPM périphérique pilote encountered a non-recoverable erreur, preventing TPM services.
- 17: TPM matériel échoué to execute a command.
- 1040: problème related vers le TPM and Secure Boot
- 1796: another Secure Boot mise à jour problème ('not disponible', etc)
*Related reading*
- [https://learn.microsoft.com/en-us/troubleshoot/windows-client/windows-security/tpm-device-driver-error-log](https://learn.microsoft.com/en-us/troubleshoot/windows-client/windows-security/tpm-device-driver-error-log)