Solved Will TPM module added to my ASUS MB solve Win 11 install?

ish4d0w said:

Didn't TPM get breached a few years ago? If so, why does Microsoft want it so badly? Or was the breach before 2.0?

Click to expand...

Haven't the least idea. I have paid zero attention to TPM prior to the 27 June Win 11 panic.

All that I know about a TPM is that it appears to hold some information in hardware (presumably an EEPROM) that is useful for security. It may be possible for malware to modify that, but I doubt that it's common. (How much malware can modify the PC's BIOS? I dimly recall that it has happened, but it has never been a common problem.)

ish4d0w said:

Didn't TPM get breached a few years ago? If so, why does Microsoft want it so badly? Or was the breach before 2.0?

Click to expand...

I think you mean this:

it was only in Infineon made TPMs

Warre1 said:

I think you mean this:

ROCA vulnerability - Wikipedia

en.wikipedia.org

it was only in Infineon made TPMs

Click to expand...

Yes, that's the one! Thanks!

bobkn said:

Plausible, but incorrect. I have a Lenovo laptop with an I3-6100U CPU. (Gen 6.) It has PTT activated in the BIOS settings. (No hardware TPM.) tpm.msc shows it as having TPM, version 2.0.

Click to expand...

Interesting. I wonder if it was added after the fact - as in after Intel open sourced it.

I suspect it's an outlier more so - or else, more succinctly, Microsoft thinks its an outlier - older machines were not guaranteed to have TPM support with older hardware, although some machines like yours do exist.

It'd be interesting to research that model and see what the details are - mind sharing the model number?

One thing to note - I know Lenovo has always had a strong business-oriented laptop line for a long time - even my older ThinkPad Edge E545 was business oriented, though it had poor specs for anything other than typical workstation type use. Replacing the aging 320 GB mechanical HD in it with an SSD gave it new life, and it runs most OSs I've thrown at it (10, various shades of Linux and now NeverWare's ClouodReady ChromeOS builds), but it's not something that I'd use for much of anything but testing at this point.

bobkn said:

All that I know about a TPM is that it appears to hold some information in hardware (presumably an EEPROM) that is useful for security. It may be possible for malware to modify that, but I doubt that it's common. (How much malware can modify the PC's BIOS? I dimly recall that it has happened, but it has never been a common problem.)

Click to expand...

Same as viruses for MacOS and Linux - not common, but also not non-existent. Niche attacks, not really helpful in getting criminal organizations what they really want - troves of data to sell on black markets.

The Lenovo model is 110-15isk.

I know nothing about Intel CPUs/chipset and PTT support.

Are your comments about old CPUs speculative, or can you provide a link?

Partially speculative, as I found evidence of the open sourcing of TPM by Intel, including the date, and partially speculative, as I've never actually seen anything stating definitively about which CPUs could have / could not have firmware-based TPM.

Your laptop model will (hopefully) help clear up some of the things I'm still guessing at.

Found this:


fTPM, Integrated into chipset. But that is how all fTPM works, right?

Or is it direct CPU support of fTPM versus chipset support the distinguishing factor?

ish4d0w said:

No it's not good enough. You need a physical TPM module. If you have a free header on your logic board then you probably don't have a TPM installed.

What you found is the firmware, which is a good sign because your board is ready to support the expansion card, bascially.

Click to expand...

I enabled Intel PTT in the BIOS and my PC now passes the tests.

Stigg said:

I enabled Intel PTT in the BIOS and my PC now passes the tests.

Click to expand...

Yup...and that's all you needed to do Stigg ....its been posted a few times already.

Ghot said:

Never heard of this company... but they have U.S. offices...

Ma Labs - Leading Distributor of PC Components, Computer Hardware and Software, Servers, Laptop Systems, Digital Signage, Consumer Electronics and more!


This is the right model number TPM module for your motherboard...
This is the only place that didn't say... Out of Stock or similar.


View attachment 944



Their contact numbers, etc...

Ma Labs - Leading Distributor of PC Components, Computer Hardware and Software, Servers, Laptop Systems, Digital Signage, Consumer Electronics and more!

Click to expand...

Hi Ghot.
I made an enquiry, but no reply as yet.
This part appears to be as rare as the Dodo Bird or even a Thylacine.

GARoss said:

I assume adding a compatible TPM module to my ASUS MB will solve the issue & allow Windows 11 to install?

Click to expand...

what motherboard do you have? I have Asus MBs and both of mine have them.

There are 12 pins on that one. Some have 14, some have 20 ( with one blanked). Best to check the socket or header or whatever it is called by looking at your mobo

ish4d0w said:

Yes, that's the one! Thanks!

Click to expand...

It depends. There are updates available e.g.

note:
SLB 9635 (TPM 1.2) is not affected.

Click to expand...

The lovely people at fujitsu have a tpm info tool, which correctly shows no tpm on this machine.
If you have tpm module, it should show any relevant info.
You dont need a fujitsu machine to run it.

Or, just run the command tpm.msc. No apps required.

Running TPM.MSC on my PC (dos as Admin) shows me this screen. Windows 10 ...

Yup - that shows that your machine:

1. Has TPM
2. That it is enabled
3. That it is ver 2.0
4. That it is ready to be provisioned by Win10.

The PTT (firmware tpm) was enabled in the BIOS/UEFI but I'd ordered a 14-1 pin chip via Newegg anyway. Installed fine on the motherboard header, changed UEFI setting to "discrete," Windows sees it via tpm.msc and it's causing no issues at startup/shutdown. Checked Newegg today--many chips are sold out!

Is it not true that the hardware chip is a bit more secure than the firmware one? Also, it seems I don't have to enable the Intel TPM provisioning service, do I? Rather would not, to tell the truth.

Yes, technically, it is.


Even though my mobo supports fTPM, MSI also sells a hardware TPM module, which I have the header for, so I'm tempted to get one for myself as well....