My PC does not meet minimum requirements in .160

Bree · Aug 22, 2021

Cliff S said:
Being a pdf I needed to do a screenshot as the permissions do not allow copying

For future reference, try with Firefox....

3. Security
In recent years, security has increasingly become the focus of the engine. With the engine
supporting both manageability and security, Intel CSME’s design has added several, additional
functions:

Scramjet · Aug 22, 2021

Dru2 said:
You didn't need to buy a module because that board already had FTPM. I know because I have a Z270 board with an i7-7700K installed. The only difference between our boards is mine is a Gigabyte, and yours is an Asus.

I said it once I'll say it again, people are panic buying stuff they don't need. All you need to do in check your owner's manual or the BIOS itself and look for something like PTT (Intel Firmware TPM).

And again, the fact that the board has a slot for a TPM module doesn't mean the board doesn't have TPM, you just have the option to install a discrete module. All my boards supporting FTPM, also have a slot for a discrete module; however it's not required for Windows 11, and as Microsoft has stated, they do not designate which TPM solution you should use, only that TPM needs to be version 2.0.

Additionally, pretty much (like 100%) any board manufactured after 2013 (for sure 2015 on) and having a UEFI BIOS will have FTPM included in the BIOS.

Peace

Maybe I done something wrong but when I enabled the ftpm in the bios and restarted and entered the get-tpm command it always showed false. I tried it several times. It doesn't matter for me now but just curious if anyone else got the Asus Z270 TUF Mark 1 MB and try to enable ftpm and same results I got?

barman58 · Aug 22, 2021

Have you checked with ASUS ?, they are in the process of releasing a lot of BIOS updates the majority of which are related to ensuring that the fTPM defaults to the ON rather than the OFF state at boot.

clam1952 · Aug 22, 2021

Dru2 said:
The other "confusing" issue is the fact that many see an empty TPM slot and assume the board does not have F(TPM).

All that said, I'll have to admit that if you don't understand these things, yeah, it'll cause all sorts of confusion and result in many buying stuff they don't need

But yes, check your owners manual, look in the BIOS, and understand that any board manufactured after 2013 (2015 to be safe), probably already has firmware TPM, which is all Microsoft requires for Windows 11 (besides the possible minimum 8th gen processor).

The manual though is another problem, neither of my current Asus manuals, Z170p and B350 plus mentioned anything about TPM or even have any indication as to where it might be in the bios and there are no images of the individual bios pages, just the main pages. If I hadn't been aware that CPUs support TPM, I probably wouldn't have bothered looking in the bios to see if there was anything there. The Z170P PTT option was not even visible until secure boot was enabled.
It also has TPM marked on the motherboard but no socket just the unused holes for the socket, I could have taken that to mean the board doesn't support TPM and given up at that point. OK pretty irrelevent as the board can only take up gen 7 CPUs but how many other Manuals have the info missing?

Scramjet · Aug 22, 2021

barman58 said:
Have you checked with ASUS ?, they are in the process of releasing a lot of BIOS updates the majority of which are related to ensuring that the fTPM defaults to the ON rather than the OFF state at boot.

I check every few days to see if there is any news on Windows 11 for the Asus Z270 and intel i7-7700k. Nothing yet

barman58 · Aug 22, 2021

I think a lot of the issue here is because the TPM system was mostly only used by Enterprise users to secure employees settings , until the release of Windows 11 and it's security requirements.

Most Systems admins would be aware of what a TPM is and what it does, and would specify motherboards that include them if they required them for their purposes, regular home users would rarely use them so consumer manuals did not highlight this. or even as you say mention it at all

We see ASUS now modifying their default BIOS settings to meet the new requirements, this will take time large companies take time to change things, hopefully it will not take too long so that users cannot install the Release version on Windows 11 due to the bios being set wrong

clam1952 · Aug 22, 2021

Scramjet said:
I check every few days to see if there is any news on Windows 11 for the Asus Z270 and intel i7-7700k. Nothing yet

Its in the Z170P bios but only visible here after enabling Secure boot under Boot and then Advanced\Trusted Computing - Enable Security Device Support.

Probably the same in the Z270.

Z170 Bios already supported TPM and is on the list of supported mother boards.

Dru2 · Aug 22, 2021

Scramjet said:
Maybe I done something wrong but when I enabled the ftpm in the bios and restarted and entered the get-tpm command it always showed false. I tried it several times. It doesn't matter for me now but just curious if anyone else got the Asus Z270 TUF Mark 1 MB and try to enable ftpm and same results I got?

I'm not sure what you mean when you say "I enabled the ftpm in the bios and restarted and entered the get-tpm command it always showed false"?

All you should need to do is simply enable ftpm (PTT) in the BIOS. There should be no other action needed. If Asus requires something else I'm not aware since I don't run Asus boards; but I'm pretty sure that's all you need to do.

barman58 · Aug 22, 2021

I am assuming that the "Get TPM" is the correct syntax for the Powershell command to check TPM status?

Dru2 · Aug 22, 2021

clam1952 said:
The manual though is another problem, neither of my current Asus manuals, Z170p and B350 plus mentioned anything about TPM or even have any indication as to where it might be in the bios and there are no images of the individual bios pages, just the main pages.

As a Gigabyte users, I have to say looking at many Asus manual's over the years in trying to help others with other problems, I find the Asus manuals shockingly sparse compared to Gigabyte's. So on that front, yeah, Asus manuals aren't helpful where BIOS settings are concerned.

And yeah, I just looked through an Asus B350-Plus manual (pdf file), I didn't see anything showing the various settings under the BIOS or any mention of TPM. Unfortunately this is where you'll have to dig through the manual yourself, or Google the BIOS setup for that board.

Here's a video of someone going through an Asus B350 Plus BIOS. FTPM can be found in the "Advanced" tab of the BIOS as shown at the 2:20 mark of the video (warning loud annoying background music)....

And yeah, Asus needs to put more thought in their owners manuals.

Scramjet · Aug 22, 2021

@Dru2 What I meant was after i enabled the ftpm in the bios I logged into windows and went to the command prompt and typed in get-tpm to see if it was actually enabled. That is where it displayed false meaning it did not detect tpm. Or if I type tpm.msc it would say tpm not installed. So I don't know why that happened. Installing the module fix that for me.

Dru2 · Aug 22, 2021

barman58 said:
I am assuming that the "Get TPM" is the correct syntax for the Powershell command to check TPM status?

TPM status can also be checked by typing "tpm.msc" (without quotes) in Run and noting status....

Ready for use means TPM is enabled.

Dru2 · Aug 22, 2021

Scramjet said:
@Dru2 What I meant was after i enabled the ftpm in the bios I logged into windows and went to the command prompt and typed in get-tpm to see if it was actually enabled. That is where it displayed false meaning it did not detect tpm. Or if I type tpm.msc it would say tpm not installed. So I don't know why that happened. Installing the module fix that for me.

Double check your BIOS and make sure all the parameters for the FTPM are set or enabled. Again, can't speak on Asus, but on Gigabyte, all I needed to do was simply enable PTT. Your board "may" require more. Or there could be an issue.

Also Look at the video I provided to see if that helps. Do let us know as this will help others in the same boat as you.

Scramjet · Aug 22, 2021

All is good on mine since I put the TPM module in. Showing it is enabled.

jh30uk · Aug 22, 2021

Some guy on WinraidForums had a thread and he tried all sorts to get PTT on his Z170 Mobo even modding the Bios, in the end all it took was to update his Intel Management Engine to latest and the two new settings appeared in Bios.

clam1952 · Aug 22, 2021

One could always try the Other Series Motherboards

For guidance though.

Dru2 · Aug 22, 2021

Scramjet said:
All is good on mine since I put the TPM module in. Showing it is enabled.

Didn't need to buy a module, but whatever works for you

jh30uk said:
Some guy on WinraidForums had a thread and he tried all sorts to get PTT on his Z170 Mobo even modding the Bios, in the end all it took was to update his Intel Management Engine to latest and the two new settings appeared in Bios.

That's a good point - updating the BIOS as well as IME.

Anyway, I'm curious - for those not being able to get FTPM working... are they (you) running legacy BIOS?

Strictly a guess, but I suspect they won't get the option to enable FTPM, and thus need for a discrete module? That said, I admit I could be totally off base here since I have no experience running in legacy mode since UEFI came along. I'm strictly UEFI.