Windows 10: Infineon TPM Security Vulnerablity - Is my TPM affected by this?

Judging from the attached image of my TPM manufacturer information by going into the TPM.msc properties, is my TPM affected by the Infineon TPM chip security vulnerability?

TPMupdate - Infineon Technologies
ROCA: Infineon TPM and Secure Element RSA Vulnerability Guidance - NCSC Site

If it was shown as "IFX" would that indicate that the TPM chip was made by Infineon?

My next question, when buying another laptop, how can I ensure NOT to get one that has a TPM chip made by Infineon?

After these security issues, I don't think I want to trust TPM Infineon chips...

:)

 

Windows update fails repeatedly to install 1709

I get following message:

You need to remove these apps yourself and then press REFRESH: INFINEON TPM Professional Package

I search my C Drive for Infineon and find two Infineon Folders (one in AppData/Roaming and one C:/Program Data) plus a dll file "Infineon.SecurityPlatform.Reporting"

The folders contain several subfolders and files, but none named TPM Professional package.

What should I do? Delete all Infineon folders/files? Or some of them? Which?

Then, assuming 1709 installs OK, what about Infineon TPM, will the PC remain without Infineon TPM??

Or should I ignore completely the 1709 Update? Is it essential?

Thank for any help

Cheers

 

Repeated Failure with Windows 10 Update to 1709

Q: Remove Infineon TPM for Winsows Update to install 1709

I get following message:

You need to remove these apps yourself and then press REFRESH: INFINEON TPM Professional Package

I search my C Drive for Infineon and find two Infineon Folders (one in AppData/Roaming and one C:/Program Data) plus a dll file "Infineon.SecurityPlatform.Reporting"

The folders contain several subfolders and files, but none named TPM Professional package.

What should I do? Delete all Infineon folders/files? Or some of them? Which?

Then, assuming 1709 installs OK, what about Infineon TPM, will the PC remain without Infineon TPM?? Are the Infineon files really needed on the C-Drive for the system to function OK?? If so, Should I save the Infineon Folders to
a pen drive, then delete them from the C Drive, run the 1709 Update and (assuming it succeeds) then, if I really must have the Infineon in my C drive, shift the folders back to where they were before in the C Drive?

Or should I ignore completely the 1709 Update? Is it essential?

Thank for any help

Cheers

 

Still no responses?
I guess people don't take encryption too seriously...What a shame, since this is the first line of defense to protect data.

 

You have an Atmel TPM, not an Infineon. As you said, Infineon uses IFX as the ID. The tpm.msc will actually tell you if you are vulnerable.

You have to ask the manufacturer, find the spec sheet online, or check with other owners of the laptop to see what TPM they are using. But all the new IFX chips would have this issue fixed and the major OEMs would have already updated to the latest TPM firmware by now.

I imagine few home users would be affected since not many apps use the TPM to generate RSA keys, aside from Bitlocker and Windows Hello. Bitlocker uses 2048-bit keys, which require 140 CPU years/$20K to crack. MS doesn't specify the key length for Hello but I would guess it would be the same.

 

All I really read is that only Infineon chips are affected.
So I guess I’m safe.

So the TPM.msc console would have a warning on this? Which section?

Good to know, because I was looking for a script or program that would let me know if my TPM is safe or not.

Thanks

 

https://portal.msrc.microsoft.com/en...sory/ADV170012