

The request sent to the server was invalid. Token was not found in the Authorization header. Multi-factor authentication is required for a 'ProvisionKey' operation, but was not performed.
#Pin pops windows
Server failed to authorize user or device.Ĭheck if the token is valid and user has permission to register Windows Hello for Business keys. Go to and verify that the CLIENTCONFIG element contains a valid URL. The federation provider client configuration URL is empty Go to and verify that the FPDOMAINNAME element is not empty. Go to and verify that the file is not empty. The federation provider configuration is empty Join the device to an Active Directory domain. The device is required to be joined to an Active Directory domain. The attestation statement of the transport key is invalid.ĭiscovery request is not in a valid format. The AIK certificate is not valid or trusted. Operation successful, but the device requires a reboot.

Unjoin some other device that is currently joined using the same account or increase the maximum number of devices per user. Policy requires TPM and the device does not have TPM.Ĭhange the Windows Hello for Business policy to not require a TPM.Ĭheck if the user has permission to perform the operation. If the error occurs again after rebooting, reset the TPM or run Clear-TPM. In the Actions pane, select Prepare the TPM.Ĭlose programs which are taking up memory and try again. Select Start, type tpm.msc, and select tpm.msc Microsoft Common Console Document. Unjoin the device from Azure AD and rejoin. When no mitigation is listed in the table, contact Microsoft Support for assistance.
#Pin pops code
If the error occurs again, check the error code against the following table to see if there is another mitigation for that error. To unjoin a device, go to Settings > System > About > Disconnect from organization. Unjoin the device from Azure Active Directory (Azure AD), rejoin, and then try to create the PIN again.Reboot the device and then try to create the PIN again.Sign out, sign in, and try to create the PIN again.Some errors are transient and resolve themselves. Many errors can be mitigated by one of these steps. When a user encounters an error when creating the work PIN, advise the user to try the following steps. The following image shows an example of an error during Create a PIN. If you get an error code that is not listed here, contact Microsoft Support. This topic lists some of the error codes with recommendations for mitigating the problem.

We suggest that you do not store salt within the hopper when the gun is not being used.When you set up Windows Hello in Windows client, you may get an error during the Create a PIN step. If you live in an area with high humidity, the salt may clump up quickly, resulting in a clogged salt pin. If you leave your gun in a cold damp place, like your garage or basement, it may take even longer to dry out! If you don't have time for the drying technique, we recommend allowing at least 48 hours for your salt hopper to dry before loading it back up with Salt. Leaving your BUG-A-SALT outside in the sun (for an afternoon) is another good option. We’ve had good luck using a hairdryer to speed up the drying process.

The salt pin in your gun may become stuck/sticky.
