TPM Not Detected, In Prep for Upgrade to Windows 11

My System:
AMD Ryzen 7 Processor
16 GHz Ram
Windows 10 Pro 22H2 64 bit OS


Issue:
Trying to upgrade PC from Windows 10 64 bit Pro, to Windows 11. “PC Health Check App” indicates that I cannot upgrade because “TPM not detected”.

Troubleshooting:
• Ran “tpm.msc”. Received message stating that “Compatible TPM cannot be found”.

• Ran “Settings > Update & Security > Recovery > Restart Now. ”At restart screen ran “Troubleshoot > Advanced Options > UEFI Firmware > Settings > Restart. That opened Bios.

• TUF Gaming Bios
> UEIF BIOS Utility Main Page
> Advanced
> AMD fTPM Configuration (Set To Discrete TPM) [Option Change to Firmware TPM]
> TPM Device Selection & Erase fTPM NY from Factory Reset (Set To Enabled) [Option Change To Disabled]
> When attempting to change from Discrete TPM to Firmware TPM, received the following Notice: AMD fTPM is a hardware TPM 2.0 implementation integrated in AMD AGESA code for credential storage and key management. The firmware TPM key will be stored in AMD AGESA code data region once you enable AMD fTPM and Windows Bitlocker for drive encryption. Please note that when the recovery key is lost or when the BIOS ROM chip is replaced, the system will not boot unto the operations system and the data will stay encrypted and cannot be restored.

Questions:
1. Do I change to Firmware TPM so that I can install Windows 11?
2. Do I change to Disabled or leave that option the same to accomplish this?

Thanks!

@btvarner ...welcome to Eleven Forum.

Just go into the BIOS and turn on AMD fTPM and Secure Boot.

Then, fix your computer specs. This is your motherboard...
ASUSTeK, TUF Gaming X570-PLUS






The stuff below, is on the "Boot" tab...

Ok. "Turn on AMD fTPM" confuses me. It seems to already be on, however as indicated above, It is set to Discrete TPM instead of Firmware TPM. I am worried about the note/warning I receive when I am about to make the change..................... Thanks!

btvarner said:

Ok. "Turn on AMD fTPM" confuses me. It seems to already be on, however as indicated above, It is set to Discrete TPM instead of Firmware TPM. I am worried about the note/warning I receive when I am about to make the change..................... Thanks!

Click to expand...

Set it to Firmware TPM. The "f" in fTPM, means "firmware".

For discreet TPM, you would have had to have bought a separate TPM module.



The discreet TPM module, would plug in here (YELLOW box)...

Looks like I have a Discrete TPM....

btvarner said:

Looks like I have a Discrete TPM....

Click to expand...

No. That's a BIOS chip.

A discreet TPM module looks like this, and it stands... upright.

Ok, so when I attempt to make the change from discrete TPM to Firmware TPM it gives me the following warning that worries me.....

Notice: AMD fTPM is a hardware TPM 2.0 implementation integrated in AMD AGESA code for credential storage and key management. The firmware TPM key will be stored in AMD AGESA code data region once you enable AMD fTPM and Windows Bitlocker for drive encryption. Please note that when the recovery key is lost or when the BIOS ROM chip is replaced, the system will not boot unto the operations system and the data will stay encrypted and cannot be restored.

Do I need to be worried?????????????

btvarner said:

Ok, so when I attempt to make the change from discrete TPM to Firmware TPM it gives me the following warning that worries me.....

Notice: AMD fTPM is a hardware TPM 2.0 implementation integrated in AMD AGESA code for credential storage and key management. The firmware TPM key will be stored in AMD AGESA code data region once you enable AMD fTPM and Windows Bitlocker for drive encryption. Please note that when the recovery key is lost or when the BIOS ROM chip is replaced, the system will not boot unto the operations system and the data will stay encrypted and cannot be restored.

Do I need to be worried?????????????

Click to expand...

Do you use Bitlocker Encryption?

If you do... just disable it... then turn on fTPM




See... the BIOS chip is right next to the discreet TPM module connector...

PS: I checked and I do not have BitBlocker on for any of my drives.................

Ok, thanks! So, I do not use Bitblocker. I can switch fTPM from Discrete to Firmware and it will automatically identify TPM 2.0 with the “PC Health Check App” and be ready for the upgrade from that standpoint? Just validating................

btvarner said:

Ok, thanks! So, I do not use Bitblocker. I can switch fTPM from Discrete to Firmware and it will automatically identify TPM 2.0 with the “PC Health Check App” and be ready for the upgrade from that standpoint? Just validating................

Click to expand...

Yep.


Don't forget to set Secure Boot also... like in the bottom pic in post #2


Btw... here's a better tool than the PC Health Check thingy... (it's portable, no install necessary)





When you're ready for Win 11... you'll get all GREEN boxes, like this...

Thanks, I think I've got it. So, Windows 10 (Which I am still on) does support secure boot. Correct?

btvarner said:

Thanks, I think I've got it. So, Windows 10 (Which I am still on) does support secure boot. Correct?

Click to expand...

Oh yeah.

When you enable Secure Boot, your Macrium Reflect (if you use Macrium Reflect), bootable rescue media will no longer boot.

BUT... all you need to do is remake it following these directions, straight from Macrium....

There's three ways to move to Windows 11...

1. Clean install of Windows 11
2. Upgrade to Win 11 through Windows Update
3. Do an In-Place Upgrade from Windows 10 to Windows 11




=============================================================================

Also...

Here's some things that may help, once you're ON Windows 11...

Ghot said:

Oh yeah.

When you enable Secure Boot, your Macrium Reflect (if you use Macrium Reflect), bootable rescue media will no longer boot.

BUT... all you need to do is remake it following these directions, straight from Macrium....

https://knowledgebase.macrium.com/display/KNOW80/Windows+Security+update+for+Secure+Boo

Click to expand...

Hi,
Or disable secure boot and the recovery media still works hehe

ThrashZone said:

Hi,
Or disable secure boot and the recovery media still works hehe

Click to expand...

Yeah, I know.
But disabling Secure Boot is not that great of an idea.

That's more of a last resort... IMO.

Ghot said:

Yeah, I know.
But disabling Secure Boot is not that great of an idea.

That's more of a last resort... IMO.

Click to expand...

Hi,
Why all it does is prioritize os disk of which so does the fat32 efi partition so secure boot is not really needed.
Only ms believes it's needed.

Great! I will let everyone know how it turns out. If I could ask a separate but related question.....

This PC, my PC is the main repository for shared data on my home network of several PC's and laptops. Some on Windows 10, others already upgraded to Windows 11.

The network setup has always been troublesome and finicky on which devices can be seen in Network and which can be readily connect to. Will this upgrade change any of my current home network settings?

Thanks.

btvarner said:

Great! I will let everyone know how it turns out. If I could ask a separate but related question.....

This PC, my PC is the main repository for shared data on my home network of several PC's and laptops. Some on Windows 10, others already upgraded to Windows 11.

The network setup has always been troublesome and finicky on which devices can be seen in Network and which can be readily connect to. Will this upgrade change any of my current home network settings?

Thanks.

Click to expand...

I don't believe in "networks", but yeah... it will probably confuse things even more, when you upgrade to Win 11.
You should probably just upgrade to Win 11, then rebuild the network.

If I understand your post... the computer you're upgrading to Win 11 is the "host" of the network?



Here's the Windows 11 Network tutorials...




It would probably be a good idea to just make a new topic, titled something like...

Windows 11 and Networking best practices?



A title like that will draw the Networking experts from among the regulars on Eleven Forum.

Hi,
Yeah you can look into AnyDesk
AnyDesk 5.5.3 Review (A Free Remote Access Tool)