What does HRESULT 0x80290304 (TPM_E_PPI_BLOCKED_IN_BIOS) mean?

 
Previous Next
TPM_E_PPI_NOT_SUPPORTED TPM_E_PCP_ERROR_MASK

TPM_E_PPI_BLOCKED_IN_BIOS

TPM_E_PPI_BLOCKED_IN_BIOS means the requested TPM Physical Presence Interface action is blocked by the current BIOS/UEFI security settings.

What to check for TPM_E_PPI_BLOCKED_IN_BIOS

  • Inspect the firmware TPM/security configuration and any setting that restricts physical-presence commands.
  • Change firmware settings only through the device owner or organization’s approved process.
  • If the request is to clear TPM data, verify BitLocker recovery material and dependent identities before changing the firmware policy.

Microsoft: Win32_Tpm class

Microsoft: Troubleshoot the TPM

Microsoft: TPM and PCP error codes

Diagnostic interpretation

This result has the HRESULT value 0x80290304. AllStat records the condition as “The Physical Presence command was blocked by current BIOS settings. The system owner may be able to reconfigure the BIOS settings to allow the command.”.

Evidence to capture

  • Capture any IErrorInfo text, activity identifier, event-log entry, and subsystem trace that mentions this result or the tpm / ppi / blocked / in / bios operation.
  • check the documented return contract of the specific API because the same HRESULT can require different recovery in different interfaces.

Retry and recovery

Retry this result only when the owning API documents a transient state or after the condition described as “The Physical Presence command was blocked by current BIOS settings. ” has changed.


Looking for a different code? Search another status or error code.