Windows 10: Should be in UEFI Settings under…? Can I see if TPM is status ENABLED from Windows 10,...

Lse123polis · Sep 8, 2022

I have a custom PC with Asus motherboard z370-A, 2017-2018 model According to info onlinehttps://techguided.com/how-to-enable-secure-boot-windows-11/Windows 11 has strict installation requirements. Microsoft demands that users enable Trusted Platform Module TPM and Secure Boot before they can install Windows 11.Q1.How to enable TPM…? Should be in UEFI Settings under…? Can I see if TPM is status ENABLED from Windows 10, without entering UEFI Settings?Q2.Installation of Windows 11 Pro in an empty NVMe, as a dual boot system, along with Windows 10 Pro in the initial NVMe, is

:)

Frick · Sep 8, 2022

Windows 10 devices now requires hardware encryption/TPM

Stolen from Sweclockers, but it's in swedish.

So from now on devices (OEM built) needs a TPM module. Relevant bit:

As of July 28, 2016, all new device models, lines or series must implement and be in compliance with the International Standard ISO/IEC 11889:2015 or the Trusted Computing Group TPM 2.0 Library and a component which implements the TPM 2.0 must be present and enabled by default from this effective date.

The following requirements must be met:

All TPM configurations must comply with local laws and regulations.

Firmware-based components that implement TPM capabilities must implement version 2.0 of the TPM specification.

An EK certificate must either be pre-provisioned to the TPM by the hardware vendor or be capable of being retrieved by the device during the first boot experience.

It must ship with SHA-256 PCR banks and implement PCRs 0 through 23 for SHA-256. Note that it is acceptable to ship TPMs with a single switchable PCR bank that can be utilized for SHA-256 measurements.

It must support TPM2_HMAC command.

A UEFI firmware option to turn off the TPM is not required. OEM systems for special purpose commercial systems, custom order, and customer systems with a custom image are not required to ship with a TPM support enabled.
Click to expand...

Pretty interesting, but there's tons of questions I guess. I don't actually now anything about how TPM works, just that it's hardware, meaning the key is stored in a physical chip and that the decryption has to run through this chip. But I have no idea how let's say biometrics is tied to this. Or what the implications will be, or what exactly is encrypted. The entire storage or just the log in details as such?

Low Tom Son · Sep 8, 2022

Windows 11, problems with enabling TPM 2.0

Hi, I usually don't need help in that kind of situation, but I just cannot figure it out. Basically I'm just not able to enable tpm 2.0 on my computer. I turned it on in my UEFI, tried setting it up in gpedit.msc. Normally at this point I would just buy a TPM 2.0 module but its weird for me that I can't enable it at my AMD Ryzen 3500x witch is on the list of comatibility, as well as my ASRock B550M Phantom Gaming 4 mainboard. Please help!

Sasqui · Sep 8, 2022

Need help on whether to clear TPM on not

Hi there! I'm here because I accidentally downloaded a malware and was suggested to reboot the laptop to get rid of it. I still do want to use the laptop afterwards and I've moved my documents and images onto a seperate device. The programmes i have installed, sadly no. So currently facing the same circumstances and so if the TPM is cleared, does this mean like the activation keys to softwares like MacAfee be cleared? Or like wifi passwords etc. Sorry I'm quite blur hahahahah.
Click to expand...

It's clear as mud. As far as I can tell, it's specific to Windows, not necessarily activated programs like MacAfee, games, etc etc etc. MS Office, I have no idea.

Here's a lengthy doc on it: https://docs.microsoft.com/en-us/wi...initialize-and-configure-ownership-of-the-tpm

Clear all the keys from the TPM
With Windows 10, in most cases, we recommend that you avoid configuring the TPM through TPM.msc. The one exception is that you can use TPM.msc to clear the TPM, for example, as a troubleshooting step, or as a final preparation before a clean installation of a new operating system. Preparing for a clean installation in this way helps ensure that the new operating system can fully deploy any TPM-based functionality that it includes, for example, attestation. However, even if the TPM is not cleared before a new operating system is installed, most TPM functionality will probably work correctly.

Clearing the TPM resets it to an unowned state. After you clear the TPM, the Windows 10 operating system will automatically re-initialize it and take ownership again.
Click to expand...

Windows 10: Should be in UEFI Settings under…? Can I see if TPM is status ENABLED from Windows 10,...

Should be in UEFI Settings under…? Can I see if TPM is status ENABLED from Windows 10,...

Should be in UEFI Settings under…? Can I see if TPM is status ENABLED from Windows 10,...

Should be in UEFI Settings under…? Can I see if TPM is status ENABLED from Windows 10,...

Should be in UEFI Settings under…? Can I see if TPM is status ENABLED from Windows 10,... - Similar Threads - Should UEFI Settings

I have tpm 2.0 enabled in bios but windows is unable to see it.

I have tpm 2.0 enabled in bios but windows is unable to see it.

I don't have the option "UEFI firmware settings" from the recovery menu. How can I enable...

I don't have the option "UEFI firmware settings" from the recovery menu. How can I enable...

Should be in UEFI Settings under…? Can I see if TPM is status ENABLED from Windows 10,...

Enable TPM

How do I enable the Status Bar on "Windows Settings"

Enable the Status Bar on "Windows Settings"

Should I enable UEFI Boot in BIOS before Win 10 install?