In this article, we will talk about the ways to fix the Trusted Platform Module (TPM) has malfunctioned, with Error Code 80090030 or 80090016 in Windows 11/10. According to the affected users, this error message occurs when they sign into their Teams, Outlook account on Outlook desktop or any Microsoft 365 app. This error prevents them from signing into their account.
Trusted Platform Module has malfunctioned, Error 80090030
The error message on the screen is:
Something went wrong. Your computer’s Trusted Platform Module has malfunctioned. If this error persists, contact your system administrator with the error code 80090030. The device that is required by this cryptographic provider is not ready for use.
The following solutions will help you get rid of this issue:
- Disconnect and reconnect your Work or School account
- Disable ADAL or enable Multi-Factor Authentication
- Clear your credentials
- Update TPM Firmware
Let’s see these solutions in detail.
1] Disconnect and reconnect your Work or School account
Sometimes, the Trusted Platform Module fails to initialize the connection protocols due to server issues. In such a case, you may receive error messages like this one. If the error is occurring due to this issue, disconnecting and reconnecting your Work or School account can fix it.
Follow the steps below:
- Launch the Windows 11/10 Settings app.
- Go to “Accounts > Access Work or School.”
- Select the account that you want to disconnect and then click on the Disconnect button.
- Now, click on the Connect button on the Access Work or School page in Settings. Follow the on-screen instructions to add a Work or School account.
Now, check if the issue persists.
2] Disable ADAL or enable Multi-Factor Authentication (MFA)
The major cause reported of this problem is the authentication issue. This can be fixed either by disabling the ADAL or by enabling the MFA (Multi-Factor Authentication). This solution has been proven effective for a lot of users. Hence, you should also try this.
Both of these methods are explained below:
Disable ADAL via Registry Editor
Now, follow the steps below:
Click on the Windows Search and type Registry Editor. Select Registry Editor from the Search Results. Click Yes in the UAC prompt.
Copy the following path and paste it into the address bar of the Registry Editor. After that, hit Enter.
Expand the Common key and select the Identity subkey. Right-click in the empty space on the right side and go to “New > DWORD (32-bit) Value.” Right-click on the newly created value and select Rename. Type EnableADAL.
By default, the Value Data of EnableADAL should be 0. If not, double-click on it and enter 0 in its Value Data. Click OK to save the changes.
Exit the Registry Editor.
This should fix the issue. If the issue still exists, enable the Multi-Factor Authentication.
Enable Multi-Factor Authentication
Some users have reported that the error occurred because MFA was disabled on their Microsoft 365 accounts. By default, the MFA is turned on for security reasons. Check if it is enabled or disabled. If you find the MFA disabled on your account, consider enabling it and see if it fixes the issue. The steps for this are listed below:
- Login to Microsoft 365 admin center.
- Click Show all to expand it and then select Azure Active Directory Admin Center.
- Now, go to “Azure Active Directory > Properties > Manage Security Defaults.”
- On the right side, the switch under the Enable Security Defaults should be set to Yes. If not, click on it to change its position from No to Yes. This will enable the MFA on your account.
- Now, scroll down and click on the Save button.
3] Clear your credentials
The issue might also be associated with the cache of your account. Hence, we suggest you clear your old credentials and see if it brings any changes.
The steps to clear the old credentials are listed below:
- Open the Control Panel.
- Select Large icons in the View by mode.
- Click Credential Manager.
- Select Windows Credentials.
- Expand each credential under the Generic Credentials section and click Remove. You have to delete all the credentials under the Generic Credentials section.
- When you are done, close the Control Panel and restart your computer.
- Now, log in to your account in the Outlook app and check if the issue persists.
4] Update TPM Firmware
If the problem still persists. there may be some problem with your TPM module. Hence, you should consider updating the TPM Firmware.
Trusted Platform Module has malfunctioned, Error code 80090016
The Trusted Platform Module has malfunctioned error code 80090016 is associated with Outlook 365. The affected users have reported that the error code prevents them from signing into their account or adding a new user account to Outlook 365. The complete error message that Outlook 365 displays on the screen is:
Something went wrong. Your computer’s Trusted Platform Module has malfunctioned. If this error persists, contact your system administrator with the error code 80090016. Keyset does not exist.
If you see this error message on your Microsoft 365 app, try the following solutions:
- Disconnect and reconnect your Work or School account
- Create a new Value or modify the existing one in HKLM Registry Hive
- Create new values or modify the existing ones in HKCU Registry Hive
- Delete the data inside Microsoft.AAD folder
Let’s see all these solutions in detail.
1] Disconnect your Work or School account and reconnect it
This is the simplest solution to fix the Trusted Platform Module has malfunctioned error code 80090016 in Outlook 365. Simply disconnect your Work or School account and then reconnect it. This solution has fixed the issue of many users.
We have already explained the process to disconnect and reconnect the Work or School account on Windows 11/10 above in this article.
2] Create a new Value or modify the existing one in HKLM Registry Hive
If disconnecting and reconnecting your Work or School account to Windows 11/10 does not fix your issue, create a new value or modify the existing one in HKEY_LOCAL_MACHINE Registry Hive. Before you proceed, it will be better to create a System Restore Point and back up the Registry.
Follow the steps below:
Press Win + R keys to launch the Run command box. Type
regedit and click OK. Click Yes in the UAC prompt.
Navigate to the following path in the Registry Editor. The simplest way is to copy the below path and paste it into the address bar of the Registry Editor and then hit Enter.
Make sure that the df9d8cd0-1501-11d1-8c7a-00c04fc297eb key is selected on the left pane of the Registry Editor. Now, check whether the value is there on the right side. If not, you have to create it. For this, right-click in the empty space on the right side of the Registry Editor and go to “New > DWORD (32-bit) Value.”
Right-click on the newly created value and select Rename and type ProtectionPolicy. By default, the Value Data of all newly created values in the Registry Editor is 0. You have to change this default value to 1. For this, double-click on the ProtectionPolicy value and enter 1 in its Value Data.
Check if the issue persists. If yes, try the next Registry fix.
3] Create new values in HKCU Registry Hive
Try this solution if the above fix does not solve your problem. The instructions for the same are written below.
Launch the Registry Editor and go to the following path. Simply copy it and paste it into the Registry Editor address bar and then press Enter.
Make sure that you have selected the Identity key on the left side in the Registry Editor. Now, check if the following two values are there on the right side.
If you do not find the above two values, create them by following the same process described above (in solution 2).
Double-click on each of these values one by one and change their Value Data to 1.
4] Delete the data inside Microsoft.AAD folder
Delete the data inside Microsoft.AAD folder. The instructions for the same are explained below:
- Launch the Run command box and type %UserProfile% and click OK.
- Double-click on the AppData folder to open it. By default this folder is hidden. If you do not see it there, you have to enable the hidden items on Windows.
- Now, open the Local folder and then the Packages folder.
- Scroll down the list of folders and locate the Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy folder. You can use the Search feature in File Explorer to find this folder easily.
- Once you locate it, open it and delete all the data inside it.
This should fix the issue.
How do I fix malfunctioned TPM?
To fix a fix malfunctioned TPM, do the following:
- Open Settings > Update & Security > Windows Security > Device Security.
- Under Security processor > Select Security processor details > Security processor troubleshooting.
- Select Clear TPM.
- Restart the device and try to activate Microsoft 365 again.
How do I update a Trusted Platform Module?
You can update the Trusted Platform Module in any of the following ways:
- By installing the latest Windows Update
- By installing the firmware updates from the manufacturer’s website
We have already talked about this above in this article.
Hope this helps.
Read next: TPM missing or not showing in BIOS.