Share via

TPM-WMI error ID 1796 in Event Viewer after Win11 24H2 update

Anonymous
2024-12-02T12:08:24+00:00

After updating Win11 24H2, I get a TPM-WMI error in the event viewer.

Event ID 1796,TPM-WMI

Secure boot update failed to update secure boot variable. The error is: Incorrect parameter. The For more information, see https://go.microsoft.com/fwlink/?linkid=2169931

Previously the secure boot update was successful; this error has been occurring since the Win11 24H2 update.

Ignoring it and continuing to use it may be an option, but to resolve it, do I have to clear the TPM on the PC, e.g., from the BIOS?

If I clear the TPM, will it break the authentication relationship with the OS or other software and cause problems?

***moved from Windows / Windows 11 / Performance and system failures***

Windows for business | Windows Client for IT Pros | Devices and deployment | Install Windows updates, features, or roles

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question. To protect privacy, user profiles for migrated questions are anonymized.

0 comments

10 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2024-12-03T01:22:19+00:00

    When I cleared the TPM from tpm.msc, instead of resolving this error, the following failure audit was recorded in the security category of the event viewer...

    Event 5061,Microsoft-Windows-Security-Auditing

    I had the “Failure audit is recorded regarding Microsoft Windows security auditing” trouble before, but this was caused by clearing TPM.

    https://learn.microsoft.com/en-us/answers/questions/1867274/an-audit-failure-log-for-microsoft-windows-securit

    Since the TPM is within the PC itself, I guess there is no way to clear this error anymore.

    Also, the WMI error 1796 in this case may possibly be due to the fact that you upgraded to 24H2 with Secure Boot disabled. 24H2's key update mechanism is different from that of 23H2 and before, so even if you enable Secure Boot again, it may continue to give the error for a long time to come. If you re-enable Secure Boot, the error may continue to occur.

    Would it be better for my mental health to disable Secure Boot and ignore the TPM related errors as well as the WMI error 1796 in this case?

    (This PC is for home use only, not taken outside the home)

    1 person found this answer helpful.
    0 comments
  2. Anonymous
    2024-12-03T13:40:59+00:00

    I have the same issue with my completely new build. I've spent days searching for a solution to the problem, but not of the fixes have delivered the expected results.
    Today, I decided to install a 23H2 version. Until Microsoft resolve this issue, I won't be using 24H2.

    10 people found this answer helpful.
    0 comments
  3. Anonymous
    2024-12-07T11:08:07+00:00

    When I disable the l1vhlwf service in the registry, not only the l1vhlwf service error ID 7000 but also the TPM-WMI error ID 1796 disappear.

    These two Event Viewer errors may be bugs in the 24H2 l1vhlwf service (l1vhlwf.sys; Nested Network Virtualization).

    https://answers.microsoft.com/ja-jp/windows/forum/windows_11-other_settings/win11/b78a5121-85ce-4786-828e-556f8a7ce11d?page=2

    2 people found this answer helpful.
    0 comments
  4. Anonymous
    2024-12-26T10:19:44+00:00

    I have the same issue with my completely new build. I've spent days searching for a solution to the problem, but not of the fixes have delivered the expected results. Today, I decided to install a 23H2 version. Until Microsoft resolve this issue, I won't be using 24H2.

    Thank you so much for your answer about it. That was the only thing that fixed my issue too. I really believe there is a bug on last version 24H2 and Microsoft must give a look and fix. Windows 24H2 seems doesn't identify BIOS configurations at all...

    2 people found this answer helpful.
    0 comments
  5. Anonymous
    2024-12-26T12:19:38+00:00

    Sames issues here with clean install

    <Event xmlns="**http://schemas.microsoft.com/win/2004/08/events/event**">

    • <System> <Provider Name="Microsoft-Windows-TPM-WMI" Guid="{7d5387b0-cbe0-11da-a94d-0800200c9a66}" /><EventID>1796</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime="2024-12-26T11:05:17.5509525Z" /><EventRecordID>4839</EventRecordID><Correlation /><Execution ProcessID="3324" ThreadID="19888" /><Channel>System</Channel><Computer>DESKTOP-######</Computer><Security UserID="S-1-5-18" /></System>
    • <EventData> <Data Name="HResult">-2147024809</Data></EventData>

    Another bug probably related

    Log Name: Application Source: Microsoft-Windows-CertificateServicesClient-CertEnroll Date: 26/12/2024 11:05:19 Event ID: 86 Task Category: None Level: Error Keywords: Classic User: SYSTEM Computer: DESKTOP-#######Description: SCEP Certificate enrollment initialization for WORKGROUP\DESKTOP-######$ via https://AMD-KeyId-52fb59e29aa83a962fb9eef0fe5b4811de6b751e.microsoftaik.azure.net/templates/Aik/scep failed: GetCACaps GetCACaps: Not Found {"Message":"The authority "amd-keyid-#######################################.microsoftaik.azure.net" does not exist."} HTTP/1.1 404 Not Found Date: Thu, 26 Dec 2024 11:05:23 GMT Content-Length: 121 Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000;includeSubDomains x-ms-request-id: bc9c0aab-f6de-4eb6-8819-3f3c43bb902b Method: GET(1031ms) Stage: GetCACaps Not found (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND) Event Xml: 86 0 2 0 0 0x80000000000000 2525 Application DESKTOP-######### WORKGROUP\DESKTOP-#######$ https://AMD-KeyId-52fb59e29aa83a962fb9eef0fe5b4811de6b751e.microsoftaik.azure.net/templates/Aik/scep GetCACaps GetCACaps: Not Found {"Message":"The authority "amd-keyid-5################################.microsoftaik.azure.net" does not exist."} HTTP/1.1 404 Not Found Date: Thu, 26 Dec 2024 11:05:23 GMT Content-Length: 121 Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000;includeSubDomains x-ms-request-id: bc9c0aab-f6de-4eb6-8819-3f3c43bb902b GET(1031ms) GetCACaps Not found (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

    0 comments