Windows 10: TPM - OwnerClearDisabled = True. How to make it false by powershell or cmd

Hi,


I have a requirement where I am stuck with a few machines (probably thousands), where Windows 10 has taken the ownership (conclusion after several hours/days of searching and experimenting) of the TPM and it has disabled clearing the TPM via script/powershell.


I have tried multiple methods to no avail, except for manual clearing from TPM management console.


I even gave a wild shot by directly upgrading/downgrading the TPM, unsuccessfully, tried disabling TPM auto provisioning and rebooting the machine, hoping Windows 10 somehow gives up the ownership (I know this is stupid, but I am trying out every single thing).


As these are predominantly Dell machines, I tried CCTK but couldn't find any suitable command to do what my requirement is.


So, now, I am in desperate need of some assistance on how to disable "OwnerClearDisabled" (or make OwnerClearDisabled = False), via cmd or powershell, so that I can upgrade/downgrade TPM as per the requirement.





In Summary, I want to make "OwnerClearDisabled" value from "true" to "false" on Dell machine using powershell/cmd so that I can upgrade/downgrade TPM on Dell machines.


Any help is appreciated, Thank you very much in advance

:)

 

Initialize-Tpm : Unable to read the TCG Event Log.

I'm trying to configure my TPM device on Windows 10 64.

When I run Get-Tpm I get the following:

TpmPresent : True

TpmReady : False

ManufacturerId : 1229346816

ManufacturerVersion : 5.51

ManagedAuthLevel : Delegated

OwnerAuth :

OwnerClearDisabled : True

AutoProvisioning : Enabled

LockedOut : False

LockoutCount : 0

LockoutMax : 32

SelfTest : {}

Then if I run Initialize-Tpm I get:

Initialize-Tpm : Unable to read the TCG Event Log.

At line:1 char:1

+ Initialize-Tpm

+ ~~~~~~~~~~~~~~

+ CategoryInfo : NotSpecified: (Microsoft.Tpm.C...alizeTpmCommand:InitializeTpmCommand) [Initialize-Tpm], TcgEventLogException

+ FullyQualifiedErrorId : TpmError,Microsoft.Tpm.Commands.InitializeTpmCommand

Any ideas?

Thanks

 

TPM

My computer keeps asking me to update TPM firmware. I tried to clear tpm but nothing changed. can someone help me please??

Also I don't understand this TPM log:

TPM Device Information
-TPM Present: True

-TPM Version: 2.0

-TPM Manufacturer ID: IFX

-TPM Manufacturer Version: 5.61.2785.0

-PPI Spec Version: 1.2

-Ready For Storage: True

-Ready For Attestation: True

-Information Flags: 0x00000000

-Is Capable For Attestation: True

-Clear Needed To Recover: False

-TPM Has Vulnerable FW: True

-TPM FW Vulnerability: 0x00000001

-ADV170012 - IFX ROCA/Riemann

-PCR7 Binding State: 2

-TPM Spec Version 116

-TPM Errata Date: Friday, January 15, 2016

-PC Client Version: 256

I am on windows 10.

 

CMD and PowerShell

Hi Andre,

I did all items you listed.

After reboot, running CMD and powershell (admin) had the same result ("no app associated"). So I turned the feature off in taskbar settings.

Regards,

Danker