This post presents solutions to fix Microsoft 365 Apps activation error The Trusted Platform Module is not working correctly. Microsoft 365 is a subscription-based service that offers collaborative and up-to-date features. It offers different Office applications including Word, PowerPoint, Excel, etc. But recently, some users have complained that their TPM is not working properly when trying to activate Microsoft 365. Fortunately, you can follow some suggestions to fix it.
The Trusted Platform Module on your computer is not working correctly. If this error persists, contact your system administrator.
Along with this, you might see error codes 80090016, 80090034, C0090030, etc.
The attached server message you see could be any of these:
- Keyset does not exist
- The device required by this cryptographic device is not ready to use
- encryption failed
Fix Trusted Platform module not working correctly, Microsoft 365 Apps activation error
Arrange Trusted Platform Module is not working correctly: Keyring does not exist, encryption failed, or cryptographic device is not ready, with error codes 80090016, 80090034, or C0090030follow these suggestions:
- Reset Microsoft 365 activation status
- Clear TPM
- Remove Office credentials
- Delete BrokerPlugin data
- Enable Office protection policy
- Disconnect from and connect to Azure Active Directory
- Enable memory integrity
- Check if TPM 2.0 is active
- Sign in with a different account
- update bios
Let’s look at these in detail.
1]Reset Microsoft 365 Activation Status
Microsoft Support and Recovery Assistant can help resolve Microsoft 365, Outlook, OneDrive, and other Office-related issues. This tool can help solve problems with Windows activation, updates, update, Office installation, activation, uninstallation, Outlook email, folders, etc.
Run the Microsoft Support and Recovery Assistant (SaRA) to reset Microsoft 365 activation status and see if it helps.
2]Clear TPM
Clearing the TPM will reset it to its default state and remove the owner authorization value and stored keys. This is how you can clear your TPM:
- press the Windows key + I open settings.
- navigate to System > Recovery and click Restart now next to Advanced startup.
- Once your device restarts, click on Troubleshoot > Advanced Options > UEFI Firmware Settings. This will take you to the BIOS.
- In the BIOS, navigate to the Security tab, and here you will see an option Clear TPM.
- Select Clear TPM and save the changes.
- Once your device restarts, try to activate Microsoft 365 again.
Before clearing your TPM, turn off BitLocker on all your drives or save the encryption password somewhere. You should do this to avoid losing the encryption keys for your drives and you will not be able to read them again.
Alternatively, you can also clear TPM via Powershell.
3]Remove Office credentials
Activation errors can occur if Office credentials become corrupted. Removing these credentials may help fix the error. That is how:
- Click on the windows key search Credentials Managerand open it.
- navigate to Windows credentialsselect the arrow next to Microsoft Office16and then select Eliminate.
- Close Credential Manager once done.
- Open windows settings and navigate to Accounts > Sign in to work or schoolI
- Choose Disconnect if the account you use to sign in to office.com appears there, but the account you use to sign in to Windows does not.
- Restart your device and try to activate Microsoft 365 again.
4]Delete BrokerPlugin data
BrokerPlugin.exe is an AAD token broker plugin file used to access virtualized applications from various devices. Sometimes your data gets corrupted, leading to Microsoft 365 activation errors. Please delete the Broker plugin data and then reinstall it to fix the problem. That is how:
5]Enable Office Protection Policy
The Office Protection Policy manages and protects your organization’s data. Manages most Microsoft Office applications. If this policy is disabled, you might be having trouble activating Microsoft 365. Enable the policy and see if the error is fixed. That is how:
- Open any Office app, select your name and profile photo at the top, and click Disconnect.
- press the Windows key + I open settings.
- navigate to Settings > Accounts > Sign in to work or school.
- Select the account you use to sign in to Office.com and click Disconnect.
- Click on the Begin button, type regedit and press Get into.
- Once Registry Editor opens, navigate to the following path:
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Protect\Providers\df9d8cd0-1501-11d1-8c7a-00c04fc297eb
- Right-click the key and select New > DWORD (32-bit) Value.
- Name the newly created value as protection policyset the value data as 1 and click OK to save the changes.
- Reboot your device and see if the error is fixed.
6]Disconnect from and connect to Azure Active Directory
Azure Active Directory is a cloud-based identity service from Microsoft that offers single sign-on, multi-factor authentication, and protection against data breaches and cybersecurity attacks. Azure AD requires TPM with HMAC and EK certificates for key attestation support. Disconnecting and reconnecting to Azure AD can help fix activation errors due to TPM malfunction. That is how:
- press the Windows key + I open settings.
- navigate to Accounts > Sign in to work or school.
- Select the Azure AD connection, click Disconnectand restart your PC.
- Again, navigate to the Access the work or school page and select Join this device to Azure Active Directory.
- Enter your account credentials and select Let my organization manage my device.
- Restart your device once you’re done and try to activate Office 365.
7]Enable memory integrity
Memory integrity is a core isolation feature that prevents malicious code from accessing your device’s core processes in the event of an attack. If this feature is disabled, users may face errors while activating Microsoft 365. Please enable it and try to activate Microsoft 365 again. That is how:
- press the Windows key + I open settings.
- navigate to Update & security > Windows security > Device security.
- Select Core Isolation Details under Core Isolation and enable memory integrity.
8]Check if TPM 2.0 is active
Trusted Platform Module 2.0 offers several hardware-based security-related features. If you are facing activation errors, please check if the feature is enabled on your PC. That is how:
- press the Windows key + I open settings.
- navigate to System > Recovery and click Restart now next to Advanced startup.
- Here click Troubleshoot > Advanced Options > UEFI Firmware Settings > Restart.
- navigate to Security and enable Trusted Platform Module (TPM).
- Save your changes, restart your system, and try to activate Microsoft 365 again.
9]Sign in with a different account
The problem may be within your Microsoft account. If that’s the case, try signing in with another account. However, you can also sign in with a local account and check if the problem is fixed.
10]Update BIOS
If none of the above steps can help you, update the motherboard BIOS. An outdated or damaged BIOS may be the real culprit. By updating the BIOS, your TPM error should be resolved.
I hope this post helps you.
Read: Fix Event IDs 14 and 17: TPM Command Failure on Windows
How to fix Microsoft Trusted Platform Module not working correctly?
To fix the Microsoft Trusted Platform Module malfunction error, first, check if TPM 2.0 is enabled in the BIOS. If it is enabled, try clearing the TPM. To do this, open the Run dialog box, type tpm.msc and press Enter. Now, click on the Clear TPM option on the page that opens.
Does Clear TPM erase data?
Clearing the TPM resets the security chip to its default state. This means that all keys associated with the TPM and its protected data will be deleted. Before doing so, be sure to back up any data encrypted by the TPM.
