Windows 10: The TPM is defending against dictionary attacks and is in a time-out period.

I have recently re-imaged a laptop with Windows Pro 1909 and upon attempting to enable Bitlocker on the device, I am confronted with the following error:




"The TPM is defending against dictionary attacks and is in a time-out period."


I have tried resetting and clearing TPM following these guides and forums to no success:

• https://docs.microsoft.com/en-us/windows/security/information-protection/tpm/manage-tpm-lockout
• https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/ts-bitlocker-cannot-encrypt-tpm-issues
• https://docs.microsoft.com/en-us/windows/security/information-protection/tpm/initialize-and-configure-ownership-of-the-tpm#clear-all-the-keys-from-the-tpm
• https://community.spiceworks.com/how_to/140181-how-to-reinitialize-bitlocker-and-tpm
• https://community.spiceworks.com/topic/1165283-tpm-lockout-after-imaging-surface-pro-3

This is what my TPM.msc currently looks like:






Any help or guidance on this would be greatly appreciated.

:)

 

TPM 1.2 Lockout

I entered a bitlocker key incorrectly and was told that there were too many attempts. This was about 36 hours ago

I used the recovery key to get onto my laptop but every time I restarted my machine the same error came up.

I have now done the following about 24-hours ago:

• Disabled Bitlocker including decrypting the drive
• Disabled the TPM
• Re-enabled the TPM
• Cleared the TPM

When I try and enable bitlocker again I get the message "The TPM is defending against dictionary attacks and is in a time-out period"

Questions

1) How do I overcome this block?

2) How does the time-out period work - do you have to keep the computer turned on for the whole period for it to reset?

3) Does every time I try and re-enable bitlocker reset the lockout period timer?

It is a Dell laptop so I think the lockout period is 24-hours.

 

Unable to log into Windows 10 using Microsoft O365 Work Account

Hi Mark,

Further to this, the TPM chip is now in a lockout period. I'm unable to enable Bitlocker back on the device. We get this message - "TPM is defending against dictionary attacks and is in a time-out period"

I've tried setting 'enable bitlocker without a TPM chip' from gpedit.msc but we are getting the same error message.

I've cleared the TPM chip in the BIOS, and all the actions in tpm.msc are greyed out in Windows.

The only option available is 'Prepare TPM chip' which then restarts Windows, prompts to press F10 to clear the chip, then presents the same message in Windows again - "TPM is defending against dictionary attacks and is in a time-out period"

I even tried flashing the BIOS but getting the same error message.

What has happened and how can we get Bitlocker to work again?

This is a very very time consuming exercise considering we are not an attacker???

 

dictionary attack

every time I try to add an email account and add the pin, it wont let me due to a dictionary attack. I have no idea what to do.