Windows 10: what if a tpm chip fails?

all i want to know, is if you lose any data, if you do not encrypt your drive and tpm fails.from what i understand, you wont be able to login, but the data is recoverable, right?also, is it possible, that it will prevent me from entering the bios?and how likely/unlikely is a tpm fail anyway?

:)

 

TPM chip locked out

Something went wrong with a TPM chip on one of our laptops.

The laptop asked for the Bitlocker recovery key (which it accepted) but didn't let us into the Azure connected Windows account with the PIN we created.

We logged in under the Local Admin account and turned Bitlocker off.

Now the TPM chip is locked. We can't enable it from tpm.msc as it says;





It's been like this for 24 hours now.

I've clear the TPM chip in the BIOS

I've also flashed the BIOS

I've reset Windows using the 'Recovery' console in the settings.

I even tried enabling Bitlocker without a TPM chip from gpedit.msc and we're getting the same error message.

What can we do? How do we clear the TPM chip since we are the owners?

 

Verify Trusted Platform Module (TPM) Chip on Windows PC


Something I came across not long ago, is Firmware-based Trusted Platform Modules (fTPM). Whereas before in order to take advantage of a TPM you needed to have a physical TPM chip soldered to the motherboard, that seems to have changed at some point. You can now have either a Discrete TPM (Physical chip) or Firmware-based TPM.

As per THIS article, fTPM is acknowledged by the Trusted Computing Group (TCG) as a perfectly valid form of TPM and seems to perform much the same functions as a physical TPM. For Intel, their fTPM is called Intel Platform Trust Technology (PTT). I don't know what chips/motherboards/BIOS support PTT, however due to it being Firmware based (as the name suggests) and not requiring a separate physical chip, it means for some devices it's possible to retrospectively add a TPM to devices that didn't have one before.

Looking through the Intel NUC list, it's not just 6th gen Skylake NUC's that it's supported on, but also 5th gen Broadwell NUC's and 4th gen Haswell NUC's too. So if you have a NUC and you have the latest BIOS, then the chances are you have a TPM 2.0 module even if you didn't think you did. You just need to enable 'Intel Platform Trust Technology' in BIOS. As previously mentioned, I don't know what other manufacturers support/will support fTPM too.


The Intel Platform Trust Technology (PTT) setting in Intel VisualBIOS:





With Intel PTT on in BIOS, Device Manager and tpm.msc show a TPM 2.0 module installed.

 

TPM option not displaying.

Hi Normal,

No problem at all!

According to the HP website, the specifications for that model do not list a TPM chip.

https://support.hp.com/th-en/document/c04025680

Many consumer grade computers do not come with TPM chips. Generally a business level computer could include them.

Were you trying to perform something that requires a TPM chip, such as enabling BitLocker, that we could possibly help with?

-Ashton