Boot Manager

Trusted Platform Module 2.0    ACPI\MSFT0101\1    This device cannot start.

Virtualisation-based security    Running
Virtualisation-based security required security properties 
Virtualisation-based security available security properties    Base Virtualisation Support, Secure Boot, DMA Protection, UEFI Code Readonly, SMM Security Mitigations 1.0, Mode Based Execution Control, APIC Virtualisation
Virtualisation-based security services configured    Hypervisor enforced Code Integrity
Virtualisation-based security services running    Hypervisor enforced Code Integrity, Hypervisor-Enforced Paging Translation
App Control for Business policy    Enforced
App Control for Business user mode policy    Off
Automatic Device Encryption Support    Reasons for failed automatic device encryption: TPM is not usable, PCR7 binding is not supported, Hardware Security Test Interface failed and the device is not Modern Standby, Un-allowed DMA-capable bus/device(s) detected, Disabled by policy, TPM is not usable
A hypervisor has been detected. Features required for Hyper-V will not be displayed.

The virtualization-based security enablement policy check at phase 6 failed with status: TPM 2.0: The TPM is not in the right mode for upgrade.

Virtualization-based security (policies: VBS Enabled,VSM Required,Hvci,Boot Chain Signer Soft Enforced) is enabled due to VBS registry configuration.

The virtualization-based security enablement policy check at phase 6 failed with status: TPM 2.0: The TPM is not in the right mode for upgrade.

The TBS device identifier has been generated.

The TPM was successfully provisioned and is now ready for use.

This event triggers the Trusted Platform Module (TPM) provisioning/status check to run.

Pre-attestation health checks confirm that the device is expected to pass attestation.
 Please see C:\WINDOWS\Logs\MeasuredBoot\0000000029-0000000000.json for detailed information on what checks were made.

Pre-attestation health check detailed information: {"Version":1,"HealthStatus":"Attestable","Required":[{"Field":"TpmPresent","Value":true,"DesiredValue":true},{"Field":"TpmMeetsMinimumVersion","Value":true,"DesiredValue":true},{"Field":"TpmIsResponsive","Value":true,"DesiredValue":true},{"Field":"EkCertIsAvailable","Value":true,"DesiredValue":true},{"Field":"TcgLogFound","Value":true,"DesiredValue":true}],"Expected":[{"Field":"PcrsMatchTcgLog","Value":true,"DesiredValue":true}],"Informational":[{"Field":"SecureBootEnabled","ValueFromComputer":true,"ValueFromTcgLog":false,"DesiredValue":true,"TcgValueIsVerifiable":true},{"Field":"VirtualSecureMemory","ValueFromComputer":false,"ValueFromTcgLog":false,"DesiredValue":true,"TcgValueIsVerifiable":true},{"Field":"SecureCorePCCompliant","ValueFromComputer":false,"ValueFromTcgLog":false,"DesiredValue":true,"TcgValueIsVerifiable":true}]}

Secure Boot State    On