The most confirmed cause is corruption or loss of the Ngc folder contents; other triggers include TPM issues, failed updates, or disabled IPsec Policy Agent service. Now that you know the causes, let’s discuss the solutions.
1. Re-sign into Your Microsoft Account
The first step is to try logging out of your Microsoft Account and then signing back in. Many users have reported that simply signing out and back in—and restarting their computer—resolved the problem and allowed them to create a Windows Hello PIN.
2. Reconnect to Azure AD
Remember, Windows Hello’s PIN uses Azure Active Directory (AD). If something is wrong with your Azure AD connection, disconnecting and then reconnecting often solves it. If your device is joined to Azure AD and you see the Hello PIN Error 0x80090011.
3. Refresh the NGC Folder
The NGC folder saves all PIN setup info for Windows Hello. If files here are corrupted, emptying the folder lets Windows rebuild it with healthy files.
4. Check the TPM (Trusted Platform Module)
A not-ready or inactive TPM (Trusted Platform Module) can cause this error. Windows Hello needs TPM to be enabled to work. You can check and set up TPM using the TPM Management tool. Note: Many users have fixed this by ensuring TPM is prepared and enabled.
5. Start the IPsec Policy Agent Service
The IPsec Policy Agent is essential for Windows Hello to work smoothly. Make sure this service is running and set to start automatically.
6. Enable the Logon Policy for PIN Sign-in
A specific Group Policy may be blocking you from creating a Windows Hello PIN. Even administrators can’t bypass this if the policy is off. You need to enable the right setting in the Local Group Policy Editor. Note: The Group Policy Editor is available on all versions of Windows 10/11 except the Home edition.
7. Remove the Latest Windows Update
Problematic Windows updates can corrupt Hello components or introduce bugs. Rolling back recent updates and preventing auto-reinstallation may restore PIN functionality until a patch is released.
8. Create a New PIN
If you’ve tried all the steps above and you’re still getting the 0x80090011 error, you should try setting up a new PIN from scratch. Many users have fixed the error by going to Accounts and selecting the I forgot my PIN option to reset their PIN. Try setting up Windows Hello PIN again. If none of these steps solved your issue, it might be time to reach out to Microsoft support or your IT help desk for more advanced assistance.
