Windows 10: Issue after upgrading TPM firmware

Ethan.ASI · Jul 13, 2018

Hello,

This is the update that I am trying to accomplish: https://support.microsoft.com/en-us/help/4096377/windows-10-update-security-processor-tpm-firmware

However after completing the steps that are listed within this article I am still not able to complete the actual upgrade. I still have the pop up that states i need to upgrade.

I followed the following steps:

1. ensure all upgrades are up to date.

2. download the specific .EXE firmware update file and run it on my machine as an administrator

3. clear TPM and restart.

however simple these steps are I have not been able to complete the update.

I am on a HP Z240 SFF 1.2 TPM

What can I do to ensure that my TPM is updated to the latest firmware?

:)

ReeeeallyThough · Jul 13, 2018

TPM update

Don't know if this is the right place for this thread but whatever, laptop informed me that " a firmware update is needed for you security processor (TPM)," now, i looked up what to do and from a microsoft support thing, the last step says to clear the tpm. it has a warning saying to back up my data, i would like to know what clearing the tpm does, and what measures i need to take to make sure nothing goes wrong.

Brink · Jul 13, 2018

RSA Keys Generated by Infineon TPMs are Insecure

Lenovo Security Advisory: LEN-15552

Potential Impact: RSA keys generated by the Infineon TPM using certain firmware levels are insecure

Severity: Varies; None to High

Scope of Impact: Industry-Wide

CVE Identifier: CVE-2017-15361

Summary Description:

A vulnerability was identified in the RSA key generation method used by Trusted Platform Modules (TPMs) manufactured by Infineon and contained in some Lenovo products. RSA public keys generated by the Infineon TPM for use by certain software programs should be considered insecure. No TPMs from other manufacturers are affected.

Only software that uses RSA keys generated by the TPM is affected by this vulnerability. No Lenovo-developed software uses the TPM for this purpose. Please see the Infineon advisory located here for more details.

The Trusted Platform Module (TPM) is a microcontroller on the system board used to securely store artifacts used to authenticate the platform, such as passwords, certificates or encryption keys, or measurements to ensure your system is trustworthy.

Mitigation Strategy for Customers (what you should do to protect yourself):

The sequence of steps required to mitigate this issue depends on the application and/or operating of your system. Follow the mitigation instructions provided by your software supplier to avoid data loss when mitigating this issue:

For Microsoft users, follow the procedure located here. Be sure to install the Microsoft patch first in order to determine if your system is affected. If it is affected, then install the TPM Firmware update by following the link in the Product Impact section of this advisory. If you install the TPM firmware update first, the Microsoft tool included in the patch that detects if your system is affected will give incorrect results. For Chromebook users, see the information located here.

Lenovo does not have information for other software that may use the TPM (WinMagic, Linux applications, other Windows applications, etc). To determine what steps should be taken to mitigate this issue (if any) without data loss, you should contact your software supplier.

Some systems in the affected list have 2 TPM’s to allow the user to select between TPM 1.2 and TPM 2.0 (Only one of these TPMs can be active). In the case where the Infineon TPM is not the active TPM, the checking and update tools will indicate the system is not affected. If you change the active TPM at some future date, Lenovo recommends that you re-run the checking and update tools to ensure that the TPM firmware is updated in your new configuration.

Even if you are not currently using any software that uses the TPM, Lenovo recommends that you apply the update contained in the link for your product to prevent generation of weakened keys if you install software that uses the TPM in the future.

Product Impact:
Lenovo is urgently working on qualifying and applying the fixes provided by Infineon on supported systems. Please continue to refer to this advisory to identify fixes as they are posted for your systems.
Click to expand...

Read more: RSA Keys Generated by Infineon TPMs are Insecure

FinnSvenning · Jul 13, 2018

Update your security processor (TPM) firmware

Is it just piece of cake or is this operation dangerous? I'm afraid to loose all my encrypted data???

3. Clear your TPM

Important

Before clearing your TPM, be sure to back up your data.
Do not clear the TPM on a device you do not own, such as a work or school PC, without being instructed to do so by your IT administrator.

Follow these steps to clear your TPM:

Go to Start > Settings >
Update & Security > Windows Security >
Device security .

Under Security processor, select
Security processor details.

Select Security processor troubleshooting, and then under
Clear TPM, select Clear TPM.

Your device will need to restart before the process is complete.

Windows 10: Issue after upgrading TPM firmware

Issue after upgrading TPM firmware

Issue after upgrading TPM firmware

Issue after upgrading TPM firmware

Issue after upgrading TPM firmware - Similar Threads - Issue upgrading TPM

Upgrading TPM Issues

Upgrading TPM Issues

Upgrading TPM Issues

TPM issues after hardware upgrade

TPM issues after hardware upgrade

TPM issues after hardware upgrade

BSOD after changing tpm settings from Descrete to Firmware

Upgrade Firmware

TPM firmware update... WTF?

Users found this page by searching for:

not able to clear TPM after 1809 patch

issues with TPM and winmagic

TPM using certain firmware levels are insecure