Verify Trusted Platform Module (TPM) Chip on Windows PC

zbook · 23 Oct 2021

These may be some useful links for troubleshooting or upgrading TPM.

https://www.dell.com/support/kbdoc/e...-and-bitlocker
https://support.hp.com/us-en/document/c05792935
https://support.microsoft.com/en-us/...5-1ecd6b0a8022

The tutorial Option #5 appears to be useful in differentiating whether there is a chip vs firmware?
Or could a computer have both?

This computer is in BIOS Legacy.
The Windows RE UEFI option should not have TPM information?
(Only if BIOS is switched from Legacy and Drive is switched from MBR?)
However the tutorial option #5 command result indicated vulnerable TPM.

Can you then conclude that the computer does not have a TPM chip and has TPM firmware?
And maybe the firmware could be upgraded from 1.2 to 2 to meet the Windows 11 requirement?

Code:

Microsoft Windows [Version 10.0.19043.1288]
(c) Microsoft Corporation. All rights reserved.

C:\WINDOWS\system32>powershell get-tpm


TpmPresent                : True
TpmReady                  : True
TpmEnabled                : True
TpmActivated              : True
TpmOwned                  : True
RestartPending            : False
ManufacturerId            : 1229346816
ManufacturerIdTxt         : IFX
ManufacturerVersion       : 4.32
ManufacturerVersionFull20 : Not Supported for TPM 1.2
ManagedAuthLevel          : Delegated
OwnerAuth                 :
OwnerClearDisabled        : True
AutoProvisioning          : Enabled
LockedOut                 : False
LockoutHealTime           : Not Supported for TPM 1.2
LockoutCount              : Not Supported for TPM 1.2
LockoutMax                : Not Supported for TPM 1.2
SelfTest                  : {128, 0, 1, 255}

Code:

C:\WINDOWS\system32>tpmtool getdeviceinformation

-TPM Present: True
-TPM Version: 1.2
-TPM Manufacturer ID: IFX
-TPM Manufacturer Full Name: Infineon
-TPM Manufacturer Version: 4.32
-PPI Version: 1.2
-Is Initialized: True
-Ready For Storage: True
-Ready For Attestation: False
-Information Flags Description:
        INFORMATION_EK_CERTIFICATE
        INFORMATION_TPM_OWNERAUTH
-Is Capable For Attestation: False
-Clear Needed To Recover: True
-Clear Possible: True
-TPM Has Vulnerable Firmware: True
-TPM Firmware Vulnerability: 0x00000001
                ADV170012 - IFX ROCA/Riemann

-PCR7 Binding State: 0
-Maintenance Task Complete: True
-TPM Spec Level: 2
-TPM Spec Revision: 3

zbook · 22 Oct 2023

For an older version Windows 10 (1809) option #5 displayed:

Microsoft Windows [Version 10.0.17763.1577]
(c) 2018 Microsoft Corporation. All rights reserved.

C:\WINDOWS\system32>tpmtool getdeviceinformation
'tpmtool' is not recognized as an internal or external command,
operable program or batch file.

Option #6 was successful:

Windows PowerShell
Copyright (C) Microsoft Corporation. All rights reserved.

PS C:\WINDOWS\system32> get-tpm

TpmPresent : True
TpmReady : True
ManufacturerId : 1229346816
ManufacturerIdTxt : IFX
ManufacturerVersion : 4.40
ManufacturerVersionFull20 : Not Supported for TPM 1.2
ManagedAuthLevel : Full
OwnerAuth :
OwnerClearDisabled : True
AutoProvisioning : Enabled
LockedOut : False
LockoutHealTime : Not Supported for TPM 1.2
LockoutCount : Not Supported for TPM 1.2
LockoutMax : Not Supported for TPM 1.2
SelfTest : {128, 0, 1, 255}