← cd ~/intune-errors
// intune-errors · Enrollment
0x80280036TPM_E_NOTFIPS
Automatic device registration failed because the TPM has FIPS mode enabled, which is not supported for Azure device registration.
| Hex | 0x80280036 |
|---|---|
| Decimal | -2144862154 (unsigned 2150105142) |
| Area | Enrollment |
How to fix it
Do not use FIPS mode on the TPM for devices that need to register with Microsoft Entra ID.
Find it on the device
Enrolment errors are logged in Event Viewer under Applications and Services Logs › Microsoft › Windows › DeviceManagement-Enterprise-Diagnostics-Provider › Admin:
Get-WinEvent -LogName "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin" -MaxEvents 200 |
Where-Object Message -match "0x80280036" |
Format-List TimeCreated, Id, MessageOther enrollment errors
- 0x8018000A The device is already enrolled.
- 0x8007064C The machine is already enrolled.
- 0x80180026 Something went wrong. Confirm you are using the correct sign-in information...
- 0x8018002B Auto MDM Enroll: Failed (Event ID 76)
- 0x80180003 This user is not authorized to enroll.
- 0x801C0003 This user is not authorized to enroll.
- 0x80180018 Something went wrong.
- 0x80180002 MENROLL_E_DEVICE_AUTHENTICATION_ERROR
- 0x80180001 MENROLL_E_DEVICE_MESSAGE_FORMAT_ERROR
- 0x80180004 MENROLL_E_DEVICE_CERTIFCATEREQUEST_ERROR