7 Fixes: Your Computer’s Trusted Platform Module Has Malfunctioned

Introduction

Do you know what causes “Your computer’s trusted platform module has malfunctioned,” or how would you stop its occurrence in the first place? If you aren’t sure, continue reading this! The “TPM has malfunctioned” error can be tricky due to the mixture of error codes. But one of the enumerated fixes is foolproof to aid you!

Why your computer’s trusted platform module has malfunctioned error?

The TPM error is usually encountered on Windows 10 due to interference with the PC Health Checkup application. The PC Health Checkup is used to check whether your device is compatible with Windows 11 or not.

Other possible reasons that may trigger this issue are if the bootloader file has been tempered or if your device is infected with a specific type of virus or malware.

How to fix Your computer’s trusted platform malfunctioned error?

Here are some troubleshooting ideas that you could employ to get past the TPM error on Windows.

1. Clear the TPM Keys
2. Manually Enable/Disable the TPM Service
3. Scan your Device for Virus or Malware
4. Clear the Application’s Credentials in the Credential Manager
5. Disable Modern Authentication—Microsoft Office
6. Bear Ownership of the Ngc Folder. Then, Delete It
7. Login Using a New Local User Account

The Trusted Platform Module is the service operated to guard your PC. Unfortunately, like some users, you may face the error that your computer’s trusted platform module has malfunctioned in Microsoft Teams or other Microsoft 365 applications.

Since this error is related to your system security, ignoring it can be a big problem for you; learn how you can fix this error all at once on your system.

1. Clear the TPM Keys

You could utilize the Windows Defender Security Center app for clearing the TPM as a troubleshooting measure or as a final trial before a clean building of a new operating system.

Equipping for a clean installation in this manner ensures that the latest operating system shall completely deploy any TPM-based functionality that it comprises, for instance, attestation.

Nevertheless, even when the TPM is not removed before a renewed operating system is set up, most TPM functionality would presumably function rightly.

Removing the TPM resets it to an unowned condition. The Windows operating system shall automatically initialize it again and bear ownership similarly After you clear the TPM

Clearing the TPM may end up in a loss of data. To safeguard against such loss, check the following precautions:

• Removing the TPM drives you to lose every created key related to the TPM and information guarded by those keys, such as a virtual smart card and a PIN to sign in. Ensure that you have a backup and recovery method for any data shielded or encrypted by the TPM.
• Don’t clear the TPM on an appliance you do not possess, such as a professional or university PC, not being mandated to do such by your IT executive.
• Suppose you want to temporarily suspend TPM operations and have TPM 1.2 with Windows 10, version 1507 or 1511, or Windows 11. In that case, you can turn the TPM off. 
• Consistently use functionality in the operating system (such as TPM.msc) to clear the TPM. It would be good not to clear the TPM straight from UEFI.
• As your TPM security hardware is a physical part of your computer, you may wish to check the manuals or instructions that have come with your device or explore the manufacturer’s website before clearing the TPM.
• Membership in the local Administrators team, or similar, is the least needed to finish this process.

For clearing the TPM

• Check the Windows Defender Security Center app, Open it.
• Choose Device security.
• Choose Security processor details.
• Choose Security processor troubleshooting.
• Choose Clear TPM.
• The system would prompt you to restart the computer. While the restart, you may be prompted by the UEFI to select a button to ensure that you want to clear the TPM.
• After the system restarts, your TPM shall be automatically equipped for usage by Windows.

2. Manually Enable/Disable the TPM Service

Suppose you have already disabled TPM, Do follow the actions below to activate the TPM.

• Do boot the system through F2 into the BIOS setup mode.
• Find the “Security” option on the left and expand.
• Find the “TPM” option nested under the “Security” setting.
• For enabling the TPM settings, you have to inspect the options down for enabling the TPM hard drive security encryption.

Confirm that the “Activate” radio button is kept on to ensure the TPM option functions.

For disabling the TPM module, Stick to the steps given.

• Do boot your system through F2 into the BIOS setup mode.
• Find the “Security” option On the left and expand.
• Find the “TPM” option nested under the “Security” setting.
• For disabling the TPM settings, you have to check the “TPM 2.0 Security” box to disable the TPM hard drive security encryption.
• You shall also uncheck the “TPM On” and “Attestation Enable” boxes.

Confirm that the “Deactivate” radio button is kept On to ensure the TPM is deactivated. Suppose the TPM is ‘Deactivated,’ or the TPM Security is not enabled; the drive may not encrypt till those settings are completed. Ensure you confirm these TPM changes by restarting them after they are used.

3. Scan your Device for Viruses or Malware

Windows 10 and 11 contain Windows Security, which delivers the latest antivirus security. The system would actively defend your device from the point you activate Windows.

Windows Security constantly scans for malicious software, viruses, and safety threats. With this real-time security, updates are downloaded automatically to help in keeping your device secure and guard it against threats.

• For customizing how your device is protected with these Windows Security features select Start > Settings > Update & Security > Windows Security  
• The Status icons show your stage of safety:
• Green shows that there aren’t any recommended functions at present.
• Yellow says that there is a security recommendation for your system.
• Red stands as a warning that something requires your immediate lookout.

Conduct a malware scan manually.

• Suppose you’re worried about threats to a particular file or folder. In that case, you could right-click the file or folder in File Explorer, then choose Scan with Microsoft Defender.
• When you suspect malware or a virus on your system, you have to run a quick scan instantly. It has been much faster than running a complete scan on all your files and folders.

Conduct a quick scan in Windows Security

• Choose Start > Settings > Update & Security > Windows Security and then Virus & threat protection.
• Under Current threats, select Quick Scan (or in early versions of Windows 10, under Threat history, select Scan now).

If the Scan doesn’t find any issues, but you’re still concerned, you may want to check your device more thoroughly.

Run an advanced scan in Windows Security

• Select Start > Settings > Update & Security > Windows Security and then Virus & threat protection.
• In Current threats, choose Scan options (or in early versions of Windows 10, select Run a new advanced scan) under Threat history.

Choose one of the scan options:

• Full Scan (inspect files and programs presently running on your system)
• Custom scan (inspect particular files or folders)
• Microsoft Defender Offline scan (Conduct this Scan when your device has been, or can potentially be, affected by a virus or malware).
• Choose Scan now

4. Remove the Application’s Credentials in the Credential Manager

This fix applies to users finding this problem while launching a Microsoft application like Outlook or Microsoft Office. The process involves removing the specific application’s credentials through the Credential Manager:

• Opening the Start menu search bar, search Credential Manager. In the search results, select Credential Manager.
• Select Windows Credentials.
• In Generic Credentials, choose each Microsoft Office credential and select the arrow pointing to the right to expand them.
• And choose Remove, next to Edit.
• You would have to perform this one by one.
• Do reboot your computer.

5. Disable Modern Authentication – Microsoft Office

The resolution is for people who cannot work on Microsoft Office because of the Trusted Platform Module problem. The resolution includes modifying some entries in the Windows Registry Editor:

• Select Windows Key + R to launch the Run application. Enter ‘Regedit’ in the text box. Select Enter.
• Locate for: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Identity

• Right-click on the blank space in the window and choose New > DWORD – 32-bit – Value.
• Please mention the name for the new entry as EnableADAL, and then double-click over it.
• Do set the Value to 0.
• Also, close Registry Editor and reboot your system.

6. Bear the Ownership of the Ngc Folder and Delete It

One of the easy ways to resolve the TPM malfunction error is to delete the Ngc folder. It shall be located in the C:\ drive but needs ownership to delete it. Look at how you can do it:

• Find a folder named Ngc and right-click on it, then choose Properties.
• In the Security tab, select Advanced.
• In Owner, Select Change. You will need administrative privileges to do such.
• In the text box, type your local account username, which you’re presently using. Select Check names.
• Select OK. Inspect the Replace owner on the sub-containers and objects checkbox.
• Select OK.
• Double-click to extend the Ngc folder and delete all its contents.
• Do reboot your computer.

7. Login Using a New Local User Account

Suppose none of those mentioned above solutions works. In that case, all you can do is create a new user account and use that to login into Windows and Microsoft Office. You can easily do it in the Windows Settings app:

• Select the Start button and then choose Settings.
• Over the Settings dashboard, Select Accounts.
• Over the navigation bar on the left, select Family & other users.
• In Other users, Select Add someone else to this PC.
• Select ‘I don’t have this user’s sign-in information in the user creation wizard.’
• Over the next window, choose ‘Add a user without a Microsoft account.’
• Do fill in all the areas and select OK.
• Reboot your system and sign in employing the newly created user account.

Conclusion

In most cases, you need to clear your TPM keys in solving this issue, but you can try disabling certain Windows components if that doesn’t work. You shall anticipate that these solutions help you fix “Your computer’s trusted platform module has malfunctioned” in your PC.