Windows 10: Windows 11 upgrade cpu and tpm question

So after hearing about how windows 10 is has a end of support date confirmed next year. We are looking at upgrading workers who are still on windows 10 to windows 11 in the near future. For the most part everyone's systems seem to be able to upgrade just fine they just don't want to move over yet. But there are a few workers who's systems have to upgrade their CPU and need to have the ability to use TPM 2.0. Iv been reading that normally TPM is related to the mother board but also that some CPUs can be configured to implement TPM 2.0. So my main question is can we just buy new CPUs for the c

:)

 

TPM Attestation Not Supported after Upgrading CPU

Hi,

after Upgrading my CPU from Ryzen 5 2600 to Ryzen 7 5700x Windows Security Chip App reports "Attestation: Not Supported" but "Memory: Ready".

In die TPM Console it shows that the TPM Module is Ready for use.

The Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TPM\WMI\Endorsement\EKCertStore\Certificates is empty with the R 7 5700x but has an entry when I use my old CPU.



I already tried to reset TPM, CMOS and Secureboot in Bios and in Windows TPM Console.

I disabled/enabled fTPM and Secure Boot several times.

Windows 10 and Windows 11 report the same. I already did a complete reinstall.

fTPM, Securechip, UEFI and Secureboot are enabled in BIOS.

Latest BIOS Updates and Windows Updates are installed.

The Windows Device Manager shows no errors. The AMD PSP 11.0 and TPM 2.0 is installed correctly.

When I switch back to my old Ryzen 5 2600 everything works.

I also cannot find my CPU on the Microsoft Windows 11 AMD CPU Support List.....



My Setup:

Mainboard: ASUS TUF X470-PLUS GAMING

BIOS: Version 6042 from 2022/05/12

CPU: AMD Ryzen 7 5700x

Windows 10 x64 22H2 (also tried with Win11 fresh installed/updated)

 

CPU Change With Activated TPM in Windows 11

Dear Microsoft Community,

Situation:

• I recently replaced my old CPU (Ryzen 5 2600) with a Ryzen 5 5600, see system information below
  
• Failed to consider that TPM was activated; I did not use TPM for BitLocker/drive encryption
  

The first boot up showed the following message:





Initially, I pressed N, which resulted in a re-boot that left me with the same message. Then, I followed the recommendation stated in several online forums and pressed Y (important to note: Z on a German keyboard). This was succeded by a seemingly normal system boot into Windows 11 - all files are (afaik) accessible.

Problem:

Checking the system security reveals that the status for "Nachweis" (~ verification) is "Nicht unterstützt" (not supported), see image below.





Updating the drivers via device manager did not solve the issue.

Questions:

• How do I get TPM to correctly work again? I have not yet tried to remove TPM.
  
• Can I safely sell / pass on my old CPU even though it was removed with an active TPM?
  

System information:

• Previous CPU: AMD Ryzen 5 2600
  
• Current CPU: AMD Ryzen 5 5600
  
• Motherboard: Gigabyte Aorus Pro B450 (F63d)
  
• OS: Windows 11 Education, Version 22H2, Build 22621.819
  

Thank you all for your support - I am happy to provide more information if needed!

 

Windows 11 TPM Questions

Hello. I have a Ryzen 5 5600X and Gigabyte B450 Auros PRO WIFI motherboard on my PC that I built myself. I have upgraded my laptop to Windows 11 and like it so far, but am still on 10 on my PC as I am confused about the TPM requirement. I know there are firmware TPM (FTPM) and dedicated TPM (DTPM). The module I would need for DTPM is being scalped. I ordered one on backorder at a non-scalped price, but I still have not received it after a month and a half. I can cancel the order. I turned on the ftpm in my BIOS settings, and the PC Health Check says I am good to go for Windows 11, so I might be fine with just that?

However, what are the downsides to this? The option is off by default in the BIOS unless you set it to on. If I get Windows 11 and for some reason later have to reset my CMOS or upgrade the BIOS (which also resets the BIOS), I am guessing that also turns off the TPM setting? I can turn it back on in the BIOS again, but will that reset of the BIOS change anything like the TPM key? Would Windows 11 turn back on fine after reenabling ftpm in the BIOS, or will it be harmed?

Also, what happens if I need a CPU or motherboard change? Well I guess for motherboard, I would have to reinstall Windows anyways, but what if I upgrade CPU? Will that wreck my Windows 11 install too, or will reenabling ftpm again fix it?

Also, how does BitLocker factor into this? If I were to enable Bitlocker on my C drive, how different would the answers be? Would that make the drives inaccessible if anything happens to my TPM setting?