- Software and digital services
- Operating system
0x8009000F
Windows 0x8009000F on PC: key container already exists
Risk level
Low
Usually safe to check without specialist tools.
Urgency
Medium
Quick answer
Error 0x8009000F occurs during Windows Hello PIN creation when the key or container already exists. Try signing out and signing in again or restarting the PC first; on organization-joined devices, unjoin the device from Microsoft Entra ID and rejoin.
Safety first
Stop and check this first
- Before clicking Disconnect from organization in Settings, System, About, confirm with your IT administrator that your account has permission to rejoin devices to Microsoft Entra ID.
Safe checks you can perform
- Sign out, sign back in, and retry creating the PIN
- Reboot the PC and check for system updates
- Locate Disconnect from organization in System, About
Leave these tasks to a qualified professional
- Do not attempt this professional task: Unjoin the device from Microsoft Entra ID and rejoin
- Do not attempt this professional task: Contact Microsoft Support if the code returns
What a technician must be able to justify
Technician visit
These are the steps they must carry out and show you. Tick them as they work: if steps are skipped, do not accept a part swap.
These are not instructions for opening or handling the equipment yourself. They are the checks that should support a technical conclusion.
Unjoin the device from Microsoft Entra ID and rejoin
What they doYour IT administrator or support technician disconnects the PC via Settings, System, About, Disconnect from organization, verifies user join permissions and device quota in Microsoft Entra ID, and rejoins the device so you can create the PIN.
They must show youthe restored Microsoft Entra join state in Settings, System, About and the completed PIN setup.
In writingconfirmation that the device was unjoined and rejoined via Settings without unsupported manual folder deletion.
Contact Microsoft Support if the code returns
What they doIf unjoining and rejoining Microsoft Entra ID does not resolve 0x8009000F during the Create a PIN step, open a support request with Microsoft Support.
They must show youthe mitigation steps already completed and the exact 0x8009000F error screen.
In writingthe Microsoft Support ticket number and the official resolution provided.
Before accepting a part or repair
Nothing has been shown yet. Do not accept a part swap based on the code alone.
Follow these steps
Note: Follow the documented order. An error code identifies the affected system, but it does not prove by itself which part has failed.
Sign out, sign back in, and retry creating the PIN
- Who:
- you in your Windows user session.
- How:
- when the Create a PIN prompt fails, sign out of your account, sign back in, and attempt to create the PIN again, since many PIN setup errors are transient.
- Result that matters:
- testing whether a fresh user session clears the container conflict on its own.
- If PIN creation succeeds after signing back in:
- no organization unjoin is needed.
- If 0x8009000F appears again:
- move on to rebooting and checking for Windows updates.
- Evidence to keep:
- timestamp of the attempt and a screenshot of the 0x8009000F prompt.
Evidence: Windows Hello errors during PIN creation in Windows 10 - Windows Client · Windows Hello common issues and troubleshooting tips
Reboot the PC and check for system updates
- Who:
- you with an active internet connection.
- How:
- reboot the device, check for pending system updates in Windows, and try to create or reset your PIN again from Sign-in options.
- Result that matters:
- ruling out an incomplete security update that triggered the repeat PIN prompt.
- If the PIN is accepted after the reboot or update:
- test locking and unlocking the PC.
- If 0x8009000F persists on a work or school PC:
- inspect the organization connection under System, About.
- Evidence to keep:
- screenshot of recent update status and Sign-in options.
Evidence: Windows Hello errors during PIN creation in Windows 10 - Windows Client · Windows Hello common issues and troubleshooting tips
Locate Disconnect from organization in System, About
- Who:
- you, coordinating with IT if work-managed.
- How:
- open Settings, System, About and locate Disconnect from organization to see whether the device is joined to Microsoft Entra ID before unjoining.
- Result that matters:
- confirming whether the official Microsoft Entra ID unjoin and rejoin mitigation applies to your PC.
- If you have permission and credentials to rejoin the organization:
- follow your IT procedure to disconnect, rejoin, and create the PIN.
- If you are unsure about your Microsoft Entra join permissions or device quota:
- ask your IT admin to handle the unjoin and rejoin.
- Evidence to keep:
- screenshot of the Settings, System, About organization join status.
Evidence: Windows Hello errors during PIN creation in Windows 10 - Windows Client
Still not solved
If the error persists, stop here. See what the technician must do and show you.
Where this code applies
A code is meaningful only inside the right product and version context.
Primary scope
- System
- Software and digital services
- Brand
- Microsoft Windows
- Product type
- Operating system
Known code variants
- 0x80090005
- 0x8009000F
- 0x80090011
- 8009000F
- El contenedor o la clave ya existen 0x8009000F
- error 0x8009000F Windows Hello
- The container or key already exists 0x8009000F
- Windows Hello error 0x8009000F
What it means
According to Microsoft documentation for Windows 10 and Windows 11, error code 0x8009000F shows up during the Create a PIN step when the container or key already exists, alongside related codes 0x80090005 (NTE_BAD_DATA) and 0x80090011 (the container or key was not found). Microsoft explains that security updates or system changes can prompt you to create a PIN again, and recommends trying again, signing out and back in, or rebooting before unjoining the device from Microsoft Entra ID and rejoining. This code alone never indicates faulty hardware.
Warnings and stop conditions
- Mediumsource verified
Before clicking Disconnect from organization in Settings, System, About, confirm with your IT administrator that your account has permission to rejoin devices to Microsoft Entra ID.
Evidence: Windows Hello errors during PIN creation in Windows 10 - Windows Client
Symptoms and causes
Probable causes · in order
- Existing cryptographic key or container conflictCommon
Microsoft lists The container or key already exists as the direct cause of 0x8009000F when provisioning a Windows Hello PIN.
Evidence: Windows Hello errors during PIN creation in Windows 10 - Windows Client
- Repeat PIN prompt after security updates or system changesPossible
Microsoft's Windows Hello troubleshooting guide notes that being asked to create a PIN again after already having one can follow security updates or system changes.
Evidence: Windows Hello common issues and troubleshooting tips
- Stale Microsoft Entra ID device registration statePossible
Just like 0x80090005 and 0x80090011, a mismatched organization registration requires unjoining the device from Microsoft Entra ID and rejoining.
Evidence: Windows Hello errors during PIN creation in Windows 10 - Windows Client
Virtual technician
Does 0x8009000F still appear after these checks?
Answer a few questions to narrow down the likely cause and the safest next action. Guidance only - it never replaces a professional.
Sources and technical references
- 1
Windows Hello errors during PIN creation in Windows 10 - Windows Client
Microsoft · 2026 · official_doc
- 2
Errores de Windows Hello durante la creación de PIN en Windows 10 - Windows Client
Microsoft · 2026 · official_doc
- 3
Windows Hello common issues and troubleshooting tips
Microsoft · 2026 · official_doc
- 4
Problemas comunes y sugerencias para la solución de problemas de Windows Hello
Microsoft · 2026 · official_doc
Was this entry useful?