How to Fix Fix Error 0x80090016 — Keyset Does Not Exist (TPM/Crypto Error) on Windows
Getting error 0x80090016 "Keyset does not exist" during sign-in, VPN, certificate operations, or Outlook? Fix this Windows cryptographic key storage error.
📖
Main Troubleshooting Guide
How to Fix No Internet Connection →Complete symptoms, causes, and step-by-step solutions
Symptoms
You might be experiencing this problem if you notice:
- •"Keyset does not exist" error when signing into Microsoft account
- •VPN connection fails with error 0x80090016
- •Outlook shows this error when accessing encrypted email
- •Windows Hello PIN setup fails with keyset error
- •Certificate-based authentication fails with this code
- •BitLocker recovery triggered with TPM keyset error
Common Causes
- ⚠NGC (Windows Hello) key container corrupted
- ⚠TPM key storage damaged or cleared
- ⚠User certificate private keys corrupted
- ⚠Crypto key permissions changed after profile migration
- ⚠Windows Credential Guard interfering with key access
- ⚠TPM firmware update invalidated stored keys
Solutions
Solution 1: Reset Windows Hello / NGC Keys
- 1If error is related to Windows Hello PIN:
- 2Settings → Accounts → Sign-in options → PIN → "I forgot my PIN"
- 3Follow prompts to reset PIN
- 4If that fails — delete NGC folder manually:
- 5Take ownership first: CMD as Admin:
- 6takeown /f C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc /r /d y
- 7icacls C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc /grant administrators:F /t
- 8Delete the Ngc folder contents → restart → set up PIN again
Solution 2: Fix Certificate Key Storage
- 1If error is with VPN or certificates:
- 2certutil -user -store My — lists your certificates
- 3Look for the certificate with the error — note the serial number
- 4The private key may need to be re-imported:
- 5Export the certificate with private key (.pfx) from a backup
- 6Delete the problematic certificate: certutil -delstore My "serial"
- 7Re-import the .pfx: certutil -importpfx "path\to\cert.pfx"
- 8For VPN: delete and recreate the VPN connection
Solution 3: Fix TPM Issues
- 1If TPM-related keyset error:
- 2tpm.msc → check TPM status — should show "The TPM is ready for use"
- 3If not ready: try "Clear TPM" (WARNING: this removes all TPM keys)
- 4Only clear TPM if you have BitLocker recovery key saved
- 5After clearing: Windows will re-initialize TPM on restart
- 6If TPM firmware needs update: check PC manufacturer website
- 7For persistent issues: Device Manager → Security devices → "Trusted Platform Module 2.0"
- 8Right-click → Update driver → or Uninstall → restart to reinstall
FIXES THIS IN 5 MINUTES
Fix Fix Error 0x80090016 — Keyset Does Not Exist (TPM/Crypto Error) Automatically
RescuePC Toolkit includes 109+ automated repairs that fix this problem with one click. No command line knowledge required.
Download Now - Free TrialNo credit card required • Works on Windows 10 & 11