| Previous | Next |
| STATUS_TPM_DOING_SELFTEST | STATUS_TPM_COMMAND_CANCELED |
STATUS_TPM_DEFEND_LOCK_RUNNING
Dictionary-attack defense is deliberate rate limiting
STATUS_TPM_DEFEND_LOCK_RUNNING means that the TPM is in a timeout period while defending against dictionary attacks. This is a security control, not an indication that a valid secret will succeed if it is sent often enough.
Stop uncontrolled credential retries and identify the component submitting them. Windows documents TPM lockout management separately because the threshold, recovery time and reset behavior are platform-dependent. Clearing the TPM is not a first-line response: it can remove protected keys and can create a more serious recovery problem than the temporary lockout.
What to establish before changing state
- Find the service, user action or deployment workflow generating failed authorization attempts.
- Record the lockout state and vendor-specific recovery behavior before changing policy.
- Use documented recovery and recovery-key procedures for TPM-backed services instead of guessing a lockout reset.
References
- Microsoft: manage TPM lockout
- TCG TPM 1.2 non-fatal return values
- Microsoft: TPM error-code reference
Looking for a different code? Search another status or error code.