Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 15 Source: TPM

The device driver for the Trusted Platform Module (TPM) encountered a non-recoverable error in the TPM hardware which prevents TPM services (such as data encryption) from being used. For further help please contact the computer manufacturer.
You can safely ignore these errors because Windows will fall back to the same mechanisms that are used to generate random numbers on systems that do not have a TPM chip. Additionally Windows periodically retrieves a random number from the TPM chip. If this event is logged only one time operating system was able to successfully obtain a random number.

When the TPM chip resumes from sleep it must receive a command to continue a self-test before it is ready to process other commands. On many computers the system BIOS will issue a command to the TPM chip to continue the self-test. If Windows tries to retrieve a random number while this self-test is being processed the command fails with TPM_DOING_SELFTEST. When Windows receives this error it retries up to three times. If the command continues to fail the operating system logs the event that is mentioned in the "Symptoms" section and then moves on.

For information about a similar problem on a computer that is running Windows Server 2008 or Windows Vista see ME950330.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.