I'm getting same error as mentioned in this post: TPM 2.0 simulator error DA lockout mode but with a discrete hardware tpm 2.0 module instead of simulator.
Tried clearing ownership:
# tpm2_takeownership -c -L lockpass ERROR: Clearing Failed! TPM error code: 0x921 ERROR: Unable to run tpm2_takeownership
Tried clearing dictionary lockout:
# tpm2_dictionarylockout -c -P lockpass ERROR: 0x921 Error clearing dictionary lockout. ERROR: Unable to run tpm2_dictionarylockout
The error id decode says:
linux-hf35:~ # tpm2_rc_decode 0x921 error layer hex: 0x0 identifier: TSS2_TPM_RC_LAYER description: Error produced by the TPM format 0 warning code hex: 0x21 name: TPM2_RC_LOCKOUT description: authorizations for objects subject to DA protection are not allowed at this time because the TPM is in DA lockout mode
Can't figure out how to get out of this lockout state. Has someone came across same error before? How to fix it? Thanks.