How to Fix Fix Error 0x80090020 — NTE_FAIL Cryptographic Error on Windows
Getting error 0x80090020 (NTE_FAIL)? Cryptographic operation failed? TPM error, certificate issue, or security provider failure? Fix this Windows cryptography error.
Symptoms
You might be experiencing this problem if you notice:
- •Windows Hello PIN setup fails with 0x80090020
- •VPN connection fails with cryptographic error
- •Certificate-based authentication rejected
- •TPM operations failing with NTE_FAIL
- •BitLocker operations fail with this error code
- •Signing or encryption operations fail in applications
Common Causes
- ⚠TPM (Trusted Platform Module) in bad state
- ⚠Cryptographic key container corrupted
- ⚠Windows Hello NGC (Next Generation Credential) data corrupted
- ⚠Security provider (CSP/KSP) registration damaged
- ⚠Certificate store corruption
- ⚠TPM firmware needs update
Solutions
Solution 1: Reset Windows Hello PIN/NGC
- 1If error occurs with Windows Hello:
- 2Settings → Accounts → Sign-in options
- 3Under PIN: click "I forgot my PIN"
- 4Follow prompts to reset PIN
- 5If that fails: delete NGC folder:
- 6CMD as Admin:
- 7takeown /f C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC /r /d y
- 8icacls C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC /grant administrators:F /t
- 9rd /s /q C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC
- 10Restart PC → set up PIN again
Solution 2: Fix TPM Issues
- 1Open TPM Management: tpm.msc
- 2Check TPM status — should say "The TPM is ready for use"
- 3If not: try "Clear TPM" (WARNING: removes all TPM keys)
- 4This will require BitLocker recovery key if enabled
- 5Back up BitLocker recovery key FIRST:
- 6manage-bde -protectors -get C:
- 7After clearing TPM: restart PC → reconfigure
- 8Check for TPM firmware update in manufacturer's support page
- 9BIOS/UEFI: ensure TPM is enabled and set to version 2.0
Solution 3: Repair Cryptographic Services
- 1CMD as Admin:
- 2net stop cryptsvc
- 3ren C:\Windows\System32\catroot2 catroot2.old
- 4net start cryptsvc
- 5Re-register crypto DLLs:
- 6regsvr32 rsaenh.dll
- 7regsvr32 cryptdlg.dll
- 8regsvr32 dssenh.dll
- 9sfc /scannow
- 10DISM /Online /Cleanup-Image /RestoreHealth
- 11Restart PC → retry the operation
FIXES THIS IN 5 MINUTES
Fix Fix Error 0x80090020 — NTE_FAIL Cryptographic Error Automatically
RescuePC Toolkit includes 109+ automated repairs that fix this problem with one click. No command line knowledge required.
Download Now - Free TrialNo credit card required • Works on Windows 10 & 11