Windows 10: Windows Defender > Security Processor > Clear TPM multiple times request (after several...

Hi, I'm using Windows Home (no BitLocker) on an AMD A4-7210 processor and yesterday I left the PC running Windows Updates. These are the updates logged in the history yesterday and today:


Quality Updates (2018-07-11):

• https://support.microsoft.com/en-us/help/4338819/windows-10-update-kb4338819
• https://support.microsoft.com/en-us/help/4338832/security-update-for-adobe-flash-player

Definition updates (links are not working):

• 2018-07-11: Windows Defender Antivirus (definition 1.271.815.0)
• 2018-07-12: Windows Defender Antivirus (definition 1.271.864.0)
• 2018-07-12: Windows Defender Antivirus (definition 1.271.870.0)

Other updates (2018-07-11):

• https://support.microsoft.com/en-us/help/890830/remove-specific-prevalent-malware-with-windows-malicious-software-remo

Once I logged in, the Device Security tab in the Windows Defender Security Centre was telling me there was an issue with the Security processor. To fix this, I was required to clear the TPM and restart. I pressed the Clear and Restart button which did this (after confirming Yes during boot-time) and everything seemed ok.


However after another restart the same issue showed up, so I did the same a couple more times, but In both restarts the issue still showed up.

I opened up TPM.msc in one of these times and this is what was showing up:





Below there is a Security processor troubleshoot button which allowed me to Collect logs related to the TPM. After I did this and clicked the Clear TPM button on this page and restarted, this is the log's content:

TPM Device Information
-TPM Present: True
-TPM Version: 2.0
-TPM Manufacturer ID:
-TPM Manufacturer Version: 0.0.0.0
-PPI Spec Version: 1.2
-Ready For Storage: False
-Ready For Attestation: False
-Information Flags: 0x0000000E
-Is Capable For Attestation: False
-Clear Needed To Recover: True
-TPM Has Vulnerable FW: False
-PCR7 Binding State: 0
-TPM Spec Version 0
-TPM Errata Date:
-PC Client Version: 0


And the issue was gone:





The Status in the TPM.msc soon became "The TPM is ready for use."


So for now everything seems ok again, but I wonder if the updates caused this issue and if in my next restart it will come up again...

:)

 

Update your security processor (TPM) firmware

Is it just piece of cake or is this operation dangerous? I'm afraid to loose all my encrypted data???

3. Clear your TPM

Important

Before clearing your TPM, be sure to back up your data.
Do not clear the TPM on a device you do not own, such as a work or school PC, without being instructed to do so by your IT administrator.

Follow these steps to clear your TPM:

• Go to Start > Settings >
  Update & Security > Windows Security >
  Device security .
• Under Security processor, select
  Security processor details.
• Select Security processor troubleshooting, and then under
  Clear TPM, select Clear TPM.
  
  Your device will need to restart before the process is complete.

 

Need help on whether to clear TPM on not

It's clear as mud. As far as I can tell, it's specific to Windows, not necessarily activated programs like MacAfee, games, etc etc etc. MS Office, I have no idea.

Here's a lengthy doc on it: https://docs.microsoft.com/en-us/wi...initialize-and-configure-ownership-of-the-tpm

 

constantly being asked tpm reset

There is no TPM update listed for ASUS:

https://support.microsoft.com/en-sg/help/409637...

Microsoft says:

If the manufacturer of your device is not listed in the following table, please contact the manufacturer’s customer support department for next steps.

Clear your TPM

Important

Before clearing your TPM, be sure to back up your data. Do not clear the TPM on a device you do not own, such as a work or school PC, without being instructed to do so by your IT administrator.

How to backup:

http://answers.microsoft.com/en-us/windows/wiki...

Follow these steps to clear your TPM:

Go to Start > Settings > Update & Security > Windows Security > Device security .

Under Security processor, select Security processor details.

Select Security processor troubleshooting, and then under Clear TPM, select Clear TPM.

Your device will need to restart before the process is complete.