Solved Cannot update Windows due to TPM being flagged red

Fretman · Nov 7, 2024

Win 11 (21H2) knows I have TPM 2.0 when I check these:

Device Manger -> Security Devices shows "Trusted Platform Module 2.0"
Windows 11 Health Check app says "TPM 2.0 enabled on this PC. TPM: TPM 2.0"
BIOS shows TPM enabled
tpm.msc says "The TPM is ready for use."

Yet, when I go to
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\TargetVersionUpgradeExperienceIndicators\NI22H2
both UpgEx and UpgExU are flagged red. RedReason says Tpm. This tells me Windows thinks I have no TPM, right?

This prevents me from getting updated to 23H2, which I need for some software I have. I did a quick search of these forums and didn't find anything pertinent. How do I get Windows to rescan the TPM chip and update the registry?

Thank you!

antspants · Nov 7, 2024

Hi, welcome.

Just for fun, run this anyway. See what happens. This should bring your PC to 23H2.

KB5027397 Enablement Package for Windows 11 version 23H2 Feature Update

UPDATE 7/18: https://www.elevenforum.com/t/windows-11-2023-update-version-23h2-is-now-broadly-available-to-all.26877/#post-481661 Microsoft Support: Summary Windows 11, versions 22H2 and 23H2 share a common core operating system with an identical set of system files. Therefore, the new features...

www.elevenforum.com

Fretman · Nov 7, 2024

I'm willing to try, but the description of that file says I must first be on 22H2. I'm not even on that one yet. Where do I go to manually install the 22H2 update first?

Thank you!

zbook · Nov 7, 2024

Please run admin PS > post share link

get-tpm > C:\TPM.txt

Possible bypass option:

Bypass Windows 11 System Requirements on Unsupported PC

This tutorial will show you how to bypass the Windows 11 CPU, RAM, Secure Boot, and TPM 2.0 system requirements allowing you to clean install or upgrade to Windows 11 on a unsupported PC that doesn't meet these requirements. Installing Windows 11 on a device that does not meet Windows 11...

www.elevenforum.com

Windows Trusted Platform Module Management Step-by-Step Guide

learn.microsoft.com

Enable TPM on Windows 10 and Windows 11 PC

This tutorial will show you how to enable Trusted Platform Module (TPM) on your Windows 10 and Windows 11 PC. Windows 10 will reach end of support on October 14, 2025, so you will need to upgrade to Windows 11 by then to keep current. One of Windows 11 system requirements is Trusted Platform...

www.elevenforum.com

antspants · Nov 7, 2024

Fretman said:
I'm willing to try, but the description of that file says I must first be on 22H2. I'm not even on that one yet. Where do I go to manually install the 22H2 update first?

Thank you!

Ah ok, sorry I missed that at the bottom

Do an in-place upgrade from 21H2 to 23H2

I still have the 23H2 ISO on my server, let me know and I’ll PM you a link

Use Option Two

Repair Install Windows 11 with an In-place Upgrade

This tutorial will show you how to do a repair install of Windows 11 by performing an in-place upgrade without losing anything. If you need to repair or create a new recovery partition or having problems with the Windows 11 operating system on your PC, and the usual solutions will not fix it...

www.elevenforum.com

antspants · Nov 7, 2024

If it fails, do it again but this time create the install media using the 23H2 ISO and Rufus 4.6
Then just run setup.exe from within Windows File Explorer. It should be that simple.

In fact, just do it that way to start with.

Have you used Rufus before?

Fretman · Nov 7, 2024

zbook said:
Please run admin PS > post share link

get-tpm > C:\TPM.txt

Here's what I get:
----------------------------------------------------
TpmPresent : True
TpmReady : True
TpmEnabled : True
TpmActivated : True
TpmOwned : True
RestartPending : True
ManufacturerId : 1229870147
ManufacturerIdTxt : INTC
ManufacturerVersion : 402.1.0.0
ManufacturerVersionFull20 : 402.1.0.0

ManagedAuthLevel : Full
OwnerAuth : ZBYDace4NxxlrHOQcZhTGvOVb/o=
OwnerClearDisabled : False
AutoProvisioning : Enabled
LockedOut : False
LockoutHealTime : 10 minutes
LockoutCount : 0
LockoutMax : 31
SelfTest : {}

zbook · Nov 7, 2024

Please run > post share link

Run TPM Troubleshooter in Windows 11

This tutorial will show you how to run the TPM Troubleshooter in Windows 11. The TPM Troubleshooter is no longer available in Windows 11 24H2. However, the Windows Security page will still show any issues found with the TPM. Windows 11 requires a Trusted Platform Module (TPM) version 2.0 or...

www.elevenforum.com

Fretman · Nov 7, 2024

antspants said:
If it fails, do it again but this time create the install media using the 23H2 ISO and Rufus 4.6
Then just run setup.exe from within Windows File Explorer. It should be that simple.

In fact, just do it that way to start with.

Have you used Rufus before?

I know nothing about Rufus. I'll have to do some research on that.

antspants · Nov 7, 2024

Download Rufus
Download the 23H2 ISO (sent you a link already)
Get at least an 8GB USB
Plug the USB in
Start Rufus

(Example image

Point it to the ISO
Press Start
After you press start, select what options you want

(Example image)

Click OK
When complete, run setup.exe from the USB
Follow Option 2 in the in-place tutorial I posted above.

Rufus - Create bootable USB drives the easy way

Rufus: Create bootable USB drives the easy way

rufus.ie

zbook · Nov 7, 2024

Also may be useful:

Troubleshoot the TPM

Learn how to view and troubleshoot the Trusted Platform Module (TPM).

learn.microsoft.com

zbook · Nov 8, 2024

Please see the motherboard FAQ for possible troubleshooting steps:

ASRock > Z390 Taichi

Supports 9th and 8th Gen Intel Core™ processors (Socket 1151); IR Digital PWM, 12 Power Phase design; Supports DDR4 4200+(OC); 3 PCIe 3.0 x16, 2 PCIe 3.0 x1; NVIDIA Quad SLI™, AMD 3-Way CrossFireX™; Graphics Output Options: HDMI, DisplayPort; 7.1 CH HD Audio (Realtek ALC1220 Audio Codec)...

www.asrock.com

How do I check if a system supports TPM 2.0 and bitlocker?

TPM2.0 module is required in Windows 11 specification, does it need TPM2.0 hardware module?

Fretman · Nov 8, 2024

Well, after all this mucking around with TPM last night I woke up this morning with the 23H2 update waiting for me. It all seems to be working now! I guess we succeeded in getting Windows to re-scan the TPM. Thank you, everyone, for your help, suggestions, and input. I really appreciate this. Do I need to go back somehow and mark this thread SOLVED!

mcbroom · Feb 3, 2025

antspants said:
This should bring your PC to 23H2.

mcbroom · Feb 3, 2025

thanks

Berton · Feb 3, 2025

As for Bitlocker, when I got Version 24H2 in December on 2 Notebooks with Home editions using Microsoft Account the Bitlocker was automatically enabled, did not prompt for nor give the key for it. Haven't had any issue with 24H2 on several machines except when I want to boot a Linux LiveUSB it cannot access the encrypted drive without that key.

dacrone · Feb 3, 2025

Shouldn’t have. The state is changed to enabled if you’re using a Microsoft account but it shouldn’t be activated/encrypted auto.

Berton · Feb 3, 2025

dacrone said:
Shouldn’t have. The state is changed to enabled if you’re using a Microsoft account but it shouldn’t be activated/encrypted auto.

That's what I had been reading earlier until I got the new Notebooks. When I ran into it I checked Disk Management and it was there.

dacrone · Feb 3, 2025

That’s odd. But you can pull the key via powershell if you’re in the system

Get bitlocker key from powershell on running system

Get bitlocker key from powershell on running system - Get-Bitlockerkey.md

gist.github.com

Then turn off bitlocker if you don’t want it

Get bitlocker key from powershell on running system

Get bitlocker key from powershell on running system - Get-Bitlockerkey.md

gist.github.com

Solved Cannot update Windows due to TPM being flagged red

Member

My Computer My Computer

At a glance

Like a rolling drone.

My Computers My Computers

At a glance

At a glance

Member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Like a rolling drone.

My Computers My Computers

At a glance

At a glance

Like a rolling drone.

My Computers My Computers

At a glance

At a glance

Member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Member

My Computer My Computer

At a glance

Like a rolling drone.

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Similar threads

My Computer

My Computers

My Computer

My Computer

My Computers

My Computers

My Computer

My Computer

My Computer

My Computers

My Computer

My Computer

My Computer

My Computer

My Computer

My Computers

My Computer

My Computers

My Computer