← cd ~/intune-errors
// intune-errors · Enrollment
0x80090016NTE_BAD_KEYSET / Keyset does not exist
Device registration could not save the device key because the TPM keys were not accessible, usually because Windows is not the owner of the TPM.
| Hex | 0x80090016 |
|---|---|
| Decimal | -2146893802 (unsigned 2148073494) |
| Area | Enrollment |
How to fix it
Clear the TPM (Windows Security > Device security > Security processor details > Security processor troubleshooting) and restart the device.
Find it on the device
Enrolment errors are logged in Event Viewer under Applications and Services Logs › Microsoft › Windows › DeviceManagement-Enterprise-Diagnostics-Provider › Admin:
Get-WinEvent -LogName "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin" -MaxEvents 200 |
Where-Object Message -match "0x80090016" |
Format-List TimeCreated, Id, MessageOther enrollment errors
- 0x8018000A The device is already enrolled.
- 0x8007064C The machine is already enrolled.
- 0x80180026 Something went wrong. Confirm you are using the correct sign-in information...
- 0x8018002B Auto MDM Enroll: Failed (Event ID 76)
- 0x80180003 This user is not authorized to enroll.
- 0x801C0003 This user is not authorized to enroll.
- 0x80180018 Something went wrong.
- 0x80180002 MENROLL_E_DEVICE_AUTHENTICATION_ERROR
- 0x80180001 MENROLL_E_DEVICE_MESSAGE_FORMAT_ERROR
- 0x80180004 MENROLL_E_DEVICE_CERTIFCATEREQUEST_ERROR