Windows 10: Intel Platform Trust Technology (PTT) Update Advisory

Source: INTEL-SA-00142

:)

 

Verify Trusted Platform Module (TPM) Chip on Windows PC


Something I came across not long ago, is Firmware-based Trusted Platform Modules (fTPM). Whereas before in order to take advantage of a TPM you needed to have a physical TPM chip soldered to the motherboard, that seems to have changed at some point. You can now have either a Discrete TPM (Physical chip) or Firmware-based TPM.

As per THIS article, fTPM is acknowledged by the Trusted Computing Group (TCG) as a perfectly valid form of TPM and seems to perform much the same functions as a physical TPM. For Intel, their fTPM is called Intel Platform Trust Technology (PTT). I don't know what chips/motherboards/BIOS support PTT, however due to it being Firmware based (as the name suggests) and not requiring a separate physical chip, it means for some devices it's possible to retrospectively add a TPM to devices that didn't have one before.

Looking through the Intel NUC list, it's not just 6th gen Skylake NUC's that it's supported on, but also 5th gen Broadwell NUC's and 4th gen Haswell NUC's too. So if you have a NUC and you have the latest BIOS, then the chances are you have a TPM 2.0 module even if you didn't think you did. You just need to enable 'Intel Platform Trust Technology' in BIOS. As previously mentioned, I don't know what other manufacturers support/will support fTPM too.


The Intel Platform Trust Technology (PTT) setting in Intel VisualBIOS:





With Intel PTT on in BIOS, Device Manager and tpm.msc show a TPM 2.0 module installed.

 

Intel platform trust technology high CPU usage

My Lenovo has ALL Microsoft and Lenovo updates and Intel PTT still locks CPU usage at 100%, turning my computer into a paperweight.

Closing Intel PTT solves the problem until you restart your computer, so I pinned the Task Manager to the task bar and close Intel PTT when it appears.

When I looked for a permanent solution, it seemed that the problem was created by using a PIN code to sign on to Windows rather than signing on with my Microsoft password.

I permanently turned on the PIN code sign on function by going to BIOS and editing BIOS by pressing "clear" for the Intel PTT function. You could also select "Disable" for the Intel PTT function. To ensure it does not get activated in the future, I went
to program files, opened the Intel folder, and changed the name of the two files that began with the name "Intel PTT".

These changes eliminate the PIN code sign in option so I must use my full Microsoft password in the future. My computer runs faster and smoother, so I am happy.

The mystery: Intel, Microsoft and computer makers have received hundreds of complaints about Intel PTT locking CPU use at 100%. They have done nothing. No wonder people buy Apple computers.

 

Bitlocker and Trusted Platform Module problems

We appreciate the screenshot you sent.

This issue usually occurs because the Trusted Platform Module (TPM)
uses the manufacturer driver and not the Windows built-in Trusted Platform Module driver.

To resolve this, you can manually uninstall and reinstall Trusted Platform Module. To do so, see the steps below:

• Open Device Manager on the device on which you are experiencing the issue
• Uninstall the Trusted Platform Module driver.

Give us an update after following the troubleshooting steps provided.