Windows 11 TPM question.....

[🦜Cloud Boy🦜]

My PC is 9th gen intel with a Z370 motherboard. Windows 11 PC-Health Check tool says My PC is not compatible with Windows 11 because its missing TPM 2.0.

So my question is, Is TPM just a motherboards factor? If i buy a more expensive motherboard, will i get TPM? How do i know if a motherboard comes with a built-in TPM or not? I have gone through some motherboard's specifications in their website but didn't find any mentions of TPM anywhere. Thanks.

[Castyles]

My motherboard has an empty TPM socket on it. You could just look out for that when searching for new ones.

[Omega]

Desktop computers rarely include an on-board TPM chip. With the exception of prebuild OEM machines.

For the desktop you simply have to buy and install a TPM module. They cost $10-$20.

[tonimark]

โพสต์ดั้งเดิมโดย Omega:

Desktop computers rarely include an on-board TPM chip. With the exception of prebuild OEM machines.

For the desktop you simply have to buy and install a TPM module. They cost $10-$20.

NO LONGRER 10-20 just 100+ THANK YOU SCALPERS

[tonimark]

โพสต์ดั้งเดิมโดย 🌈Cloud Boy🌈:

My PC is 9th gen intel with a Z370 motherboard. Windows 11 PC-Health Check tool says My PC is not compatible with Windows 11 because its missing TPM 2.0.

So my question is, Is TPM just a motherboards factor? If i buy a more expensive motherboard, will i get TPM? How do i know if a motherboard comes with a built-in TPM or not? I have gone through some motherboard's specifications in their website but didn't find any mentions of TPM anywhere. Thanks.

well techichly all motherboards have a TPM slot however ryzen 2000 series and intel core 8th gen and above should have built-in ftpm module(and disabled by fedault) in cpu by manufacture i enabled mine in bios settings->advanced settings->security->intel PTT->enabled it->save changes and exit
if you have older cpu then you can buy that OVERPRICED module but for most part your are screwed
that advanced tpm you talking about is used to store passwords for encryption you may want a basic chip (cpu intergrated)(to save THE MONEY) as it used ONLY for hardware intetification and yes the joke is that a simple TPM module costs more than a budget graphics card what hell of a demand! thank you microsoft asking a feature nobody ever had before

[plat]

My Z-390 A has an empty header on the board for a physical chip PLUS it has the firmware TPM 2.0 in the BIOS. Search more thoroughly if you can, mine was in the PCH/FW section in the Advanced Settings (ASUS).

At this point, scalpers are descending like locusts, so do your level best to find it in your BIOS. I was able to get a hardware TPM for the reg. price (16 USD) off Newegg. If you do in fact have to get a chip, count the pins carefully. There are several models of TPM and the pin config. will differ.

[tonimark]

โพสต์ดั้งเดิมโดย plat:

My Z-390 A has an empty header on the board for a physical chip PLUS it has the firmware TPM 2.0 in the BIOS. Search more thoroughly if you can, mine was in the PCH/FW section in the Advanced Settings (ASUS).

At this point, scalpers are descending like locusts, so do your level best to find it in your BIOS. I was able to get a hardware TPM for the reg. price (16 USD) off Newegg. If you do in fact have to get a chip, count the pins carefully. There are several models of TPM and the pin config. will differ.

i have to say all integrated cpu ftpm are 2.0
its highly recommended to use your own CPU TPM since its a huge value booster for free!! as for the TPM modules you need both pin counted AND THE PROPER MANUFACTOR gygabyre TPM for gygabyte motherboards .msi modules for msi motherboords etc...
and since for hype most TPM modules out there are OVERPRICED! better save that money for graphics card,cpu or wait up 2-3 mounths for the demand to decrease before buying the module

[🦜Cloud Boy🦜]

โพสต์ดั้งเดิมโดย tonimark:

its highly recommended to use your own CPU TPM since its a huge value booster for free!!

What did you mean by free CPU TPM?
My CPU is 9th gen intel, does my CPU has it? How can i activate it?

[Omega]

โพสต์ดั้งเดิมโดย 🌈Cloud Boy🌈:

โพสต์ดั้งเดิมโดย tonimark:

its highly recommended to use your own CPU TPM since its a huge value booster for free!!

What do you meant by free CPU TPM?
My CPU is 9th gen intel, does my CPU has it? How can i activate it?

Some motherboards have a firmware TPM implementation. The upside is that you do not need to buy a TPM module. The downside is that when the UEFI is reset your lose your TPM keys and access to anything encrypted with them.

[76561198343548661]

โพสต์ดั้งเดิมโดย littlecat20160:

โพสต์ดั้งเดิมโดย 🌈Cloud Boy🌈:

What did you mean by free CPU TPM?
My CPU is 9th gen intel, does my CPU has it? How can i activate it?

Go to BIOS and find the setting for enabling it . Look for security options

if you point out the sxact mobo , we cuuld assist further

[Illusion of Progress]

โพสต์ดั้งเดิมโดย 🌈Cloud Boy🌈:

My PC is 9th gen intel with a Z370 motherboard. Windows 11 PC-Health Check tool says My PC is not compatible with Windows 11 because its missing TPM 2.0.

So my question is, Is TPM just a motherboards factor? If i buy a more expensive motherboard, will i get TPM? How do i know if a motherboard comes with a built-in TPM or not? I have gone through some motherboard's specifications in their website but didn't find any mentions of TPM anywhere. Thanks.

If your board doesn't have TPM chip, nor a header for it, you can't do it via dedicated hardware.

There remains a firmware fallback for more recent PCs, of which yours is new enough it should have it. Search your BIOS for PTT (Platform Trust Technology). It is probably there but defaulted to disabled.

[Illusion of Progress]

โพสต์ดั้งเดิมโดย Omega:

The downside is that when the UEFI is reset your lose your TPM keys and access to anything encrypted with them.

Quick question, as I haven't researched the extent of this myself yet. Is that all that means? I figured it MAY be the case, but I didn't want to enable something and find out some sort of encryption was was being enabled at a firmware level and I was going to potentially lose access to data if I, say, reset BIOS, flash it, or move a drive or something. I really wish my board had a header for it; I'd just buy the thing instead (well, reports are saying they are being scalped so not now, but in general I'd be willing to pay a small cost to have that instead of using the firmware method).

[Omega]

โพสต์ดั้งเดิมโดย Illusion of Progress:

โพสต์ดั้งเดิมโดย Omega:

The downside is that when the UEFI is reset your lose your TPM keys and access to anything encrypted with them.

Quick question, as I haven't researched the extent of this myself yet. Is that all that means? I figured it MAY be the case, but I didn't want to enable something and find out some sort of encryption was was being enabled at a firmware level and I was going to potentially lose access to data if I, say, reset BIOS, flash it, or move a drive or something. I really wish my board had a header for it; I'd just buy the thing instead (well, reports are saying they are being scalped so not now, but in general I'd be willing to pay a small cost to have that instead of using the firmware method).

TPM only holds keys. The encryption has to be done through software such as Bitlocker on Windows. You can safely enable it without any drawbacks.

You can create a recovery key through the encryption software to still access your stuff in case you lose your TPM keys.

Don't enable drive or file encryption unless you have a reason to do so.

[Illusion of Progress]

Yeah, wasn't planning on doing any encryption and I'm leaving it disabled for now until I go to install Windows 11 later, but the notice had me make a mental note that I needed to research it more, since sometimes they include this for full disclosure reasons. Just wanted to make sure it wasn't enabling some functionality in the background on the firmware level that'd be there that could cause me pains later. Thanks for the information.

[🦜Cloud Boy🦜]

Okay, i enabled PTT in the BIOS. Thanks to Mr. tonimark, plat and Mr. Littlecat.
Now PC-Health Check tool says my PC is ready for Windows 11.

[Out Of Bubblegum]

Instead of just using a software algorithm to encrypt passwords and such, it will use the TPM hardware chip.


"Microsoft Director of Enterprise and OS Security David Weston explains the purpose of TPM is to "protect encryption keys, user credentials, and other sensitive data behind a hardware barrier so that malware and attackers can’t access or tamper with that data." In other words, TPM is a hardware security feature that stores secrets in a special space that's better protected against external software attacks."

https://www.techspot.com/news/90206-what-tpm-why-does-windows-11-require.html