Windows 10: TPM 1.2 upgrade to TPM 2.0 is showing on manufacture website but not in windows to be used.

Hello I was one of the few that updated a TPM firmware on a 1.2 with the registry issues and getting the auto generated key that users can not see with reg edit and being able to update my firmware. My issue now is on the manufacture website the TPM chip shows it can now update to 2.0. However they do not have a download, Windows update has not updated this now as 2.0 is better managed and does most of the updates now.


Question 1. How can I use group policy on a domain to force update the TPM firmware on systems that are already using bit locked drives if they all use a Infineon IFX older version of firmware as it was hard to do it locally? Also if I had to edit all of the registry settings to do this, is windows able to manage this with current 2.0 chips?



Question 2. Why after my update did the Get-TPM no longer show the version of the chip?


This shows a good update with 4.43 in use. the version that says it can go to 2.0 and my highlighted laptop version that is a good laptop. Bitlocker is in use and working. How can you update this in a group policy on more then one system on encrypted drives?








Model number shown for chip SLB 9660 TPM 1.2


Website shows new update but is not useable why has it not gone to 2.0 yet. How can I update this with a group user policy with multiple systems I can see the security risk if that, so then how come windows can not preform a update that shows it can be done? it is updateable I was able to get to 4.43 and have bitlocker running.










works cited:



“TPM Update .” Infineon Technologies Trusted Platform Modules TPMs, Security Feature Bypass Vulnerability, support.dynabook.com/sscontent?contentId=4015874.

:)

 

Issue after upgrading TPM firmware

Hello,

This is the update that I am trying to accomplish: https://support.microsoft.com/en-us/help/4096377/windows-10-update-security-processor-tpm-firmware

However after completing the steps that are listed within this article I am still not able to complete the actual upgrade. I still have the pop up that states i need to upgrade.

I followed the following steps:

1. ensure all upgrades are up to date.

2. download the specific .EXE firmware update file and run it on my machine as an administrator

3. clear TPM and restart.

however simple these steps are I have not been able to complete the update.

I am on a HP Z240 SFF 1.2 TPM

What can I do to ensure that my TPM is updated to the latest firmware?

 

Need help on whether to clear TPM on not

It's clear as mud. As far as I can tell, it's specific to Windows, not necessarily activated programs like MacAfee, games, etc etc etc. MS Office, I have no idea.

Here's a lengthy doc on it: https://docs.microsoft.com/en-us/wi...initialize-and-configure-ownership-of-the-tpm

 

TPM update

Don't know if this is the right place for this thread but whatever, laptop informed me that " a firmware update is needed for you security processor (TPM)," now, i looked up what to do and from a microsoft support thing, the last step says to clear the tpm. it has a warning saying to back up my data, i would like to know what clearing the tpm does, and what measures i need to take to make sure nothing goes wrong.