| Previous | Next |
| WINBIO_E_PROPERTY_UNAVAILABLE | WINBIO_E_INSECURE_SENSOR |
WINBIO_E_POLICY_PROTECTION_UNAVAILABLE
WINBIO_E_POLICY_PROTECTION_UNAVAILABLE belongs to the secure biometric protection model. Microsoft’s secure sensor design uses TPM 2.0 session authorization together with feature extraction and matching in a trusted execution environment. If TPM 2.0 is absent or unsupported, that policy-protection path is not available.
Verify platform capability before changing biometric data
- Confirm TPM 2.0 presence and operational state and distinguish it from a sensor capture failure.
- Check whether the biometric sensor actually advertises the secure sensor capability required by the protected flow.
- Correlate the result with VBS/Enhanced Sign-in Security configuration on systems using ESS.
The protected design keeps the shared secret in the TPM and secure sensor and exposes only a short-lived HMAC during authentication. A system that cannot establish that model cannot be repaired by collecting a better fingerprint sample. Diagnose hardware, firmware, TPM, and security-policy capability first. Enrollment removal should not be the first response because it can destroy state without adding the missing platform protection feature.
Secure biometric sensor requirements · Enhanced Sign-in Security
Looking for a different code? Search another status or error code.