Sometimes while using Windows Hello, users experience error 0x801c004d or 0x80070490 when trying to add the PIN method to Windows Hello on your Windows 10 computer or while trying to use your existing pin.
Here at Outsource Path, as part of our Technical Support Services, we regularly help our Customers to fix Windows related errors.
In this context, we shall look into the steps to fix this Windows error.
This error can occur either while trying to add the PIN method to Windows Hello on your Windows 10 computer or if you are trying to use your existing pin.
When it occurs, you will get an error message such as;
0x801c004d – Unable to enroll a device to use a PIN for login
0x80070490 - Not recognized, Pin and fingerprint are no longer options for signing in
If you are experiencing any of these error, there are several potential fixes you can check out to resolve them.
You can try to check for any Windows Updates or create the PIN again or check the CNG Key Isolation Service. You could also try to reset the TPM or create a new User Account.
For more information, follow the instructions provided below.
The first thing you can do is to check for any available Windows Updates. It is possible that your computer may be outdated and is the reason why you’re having troubles with Windows Hello.
To check for Windows Updates, follow the steps below;
i. Go to Settings
ii. Navigate to the Update and Security section
iii. Click on Windows Updates located on the left pane and then click on the Check for Updates option.
iv. Now, Wait until the process of checking updates is completed and if it finds new updates, install it.
v. After you install the new Windows Updates, check if you can now add the PIN on Windows Hello or not.
The next thing you can do is to create the PIN again by signing out and signing in again and then try creating the PIN once more. If this does not work, you can try restarting your computer and creating the PIN again. You could also try removing the PIN and then change it.
i. Remove the PIN by going to Settings > Accounts > Sign-in options.
ii. From there, go to the PIN section and click on the Remove button.
iii. You will be asked to verify your account to proceed in removing PIN, enter your credentials.
iv. Restart your computer and then set up a new PIN.
v. Once you’re done, restart your computer and check if the error is gone now.
The CNG Key Isolation Service is the one that stores and uses long-lived keys in a secure process complying with the common criteria requirements and it is possible that the error could be related to this service. This service is hosted in the LSA processes and provides key process isolation to private keys and associated cryptographic operations as required by the common criteria. Thus, you need to check this service to see if it’s the one that’s causing the error.
i. Tap the Win + R keys to open the Run dialog box and type “services.msc” in the field and hit Enter to open the Windows Services Manager.
ii. Next, locate the “CNG Key Isolation Service” and once you find it, double click on it to open its Properties box.
iii. After opening its Properties, check its Startup type and select Manual. This is the default setting and if it is Disabled, then it’s no wonder why you’re getting errors with Windows Hello, thus, you need to enable it.
iv. Once done, restart your computer and check if you can now add the PIN to Windows Hello. If you still get the error, then you might want to try setting the CNG Key Isolation Service from Manual to Automatic and then click on the Start button and see if it fixes the error or not.
You might also want to try resetting the Trusted Platform Module or TPM to fix the error. You can do this by opening Windows PowerShell and then executing the “Clear-Tpm” command. After that, check if the error is now resolved.
You could also try to create a new User Account in your Windows 10 computer to fix the Windows Hello error.
Once you have created a new local user or administrator account in Windows 10, check if you are now able to add the PIN from this newly created user account.