If ErrKindTPMDeviceLockoutLocked is returned because the lockout hierarchy is unavailable and the value of lockoutRecovery (read via the TPM_PT_LOCKOUT_RECOVERY property is 0, then the lockout hierarchy will become available on the next TPM2_Startup. In this case, this error should be associated with ActionReboot.