Hello Sanjay,
Thank you for posting question on Microsoft Windows Forum.
Based on the provided error codes 0x80098034 and 0x80098057 which point to a driver/firmware mismatch between your camera’s biometric hardware and Windows Hello’s secure path requirements. In short, Windows recognizes the camera but cannot initialize it as a secure biometric sensor. This might happen when the OEM driver is not fully compatible with the current Windows build, or when the “Windows Hello Face” optional feature is not properly paired with the hardware.
On the other hand, the Event IDs 1105 and 1109 point to a failure within the Windows Biometric Service when trying to initialize and configure the Facial Recognition (Windows Hello) Software Device.
The following are some suggestions which are worth for consideration regarding this issue.
1.Check TPM.
- Since Windows Hello security relies heavily on the TPM. The insecure sensor error 0x80098057 might suggest an issue here.
- Press Win + R and type tpm.msc.
- Verify the Status is "The TPM is ready for use." and check the Specification Version. If it is not ready, you might need to enable it in the BIOS/UEFI.
2.Check Secure Boot.
- Press Win + Rand type msinfo32 (System Information).
- Check the values for BIOS Mode (should be UEFI) and Secure Boot State (should be On). If it is off, enable it in the BIOS/UEFI.
3.Power Cycle / Reset Sensor Connection.
- As the sensor's connection state occasionally gets stuck. A full power drain can reset the sensor hardware.
- Shut down your laptop completely.
- Unplug the power adapter.
- Hold the power button for 30-60 seconds to drain any residual charge.
- Plug it back in and reboot.
4.Check camera compatibility (IR vs generic USB).
- Windows Hello Face expects an IR (or compatible camera) or a camera that supports the required secure path. Generic UVC color webcams often can’t provide the secure data path. The device IDs you posted (USB\VID_13D3&PID_56EB…) suggest a USB vendor camera — it may be non-IR or not exposing the correct interfaces (MI_00/MI_02 etc). In case you are using an external/third-party camera, try the laptop’s built-in IR camera (if present).
- For more information https://support.microsoft.com/en-us/windows/enhanced-sign-in-security-in-windows-936c06ed-4024-4521-921f-faa97925a16e
5.BIOS / firmware setting: “Enhanced Windows Biometric Security”.
- Some vendors. Include BIOS flags that affect ESS or secure routing for biometric devices. If your machine (or its firmware) has an Enhanced Windows Biometric Security option, try toggling it (typically under Security / Advanced). If you have a brand machine check vendor docs (Lenovo/Dell/HP have notes).
6.Check Group Policy.
- If your system was part of a domain or had policies applied, Windows Hello Face can be disabled.
- Run gpedit.msc and then navigate to the following path:
- Computer Configuration > Administrative Templates > Windows Components > Biometrics
- Ensure “Allow the use of biometrics” and “Allow users to log on using biometrics” are enabled. You can refer to the following article for more information regarding the issue.
- https://learn.microsoft.com/en-us/troubleshoot/windows-client/user-profiles-and-logon/facial-recognition-logon-not-work-group-policy-setting
Hope the above information is helpful!