No TPM? No Windows 11 for you!


Recommended Posts

55 minutes ago, Good Bot, Bad Bot said:

WTF? My AMD FX-8320 is not supported? Windows can't even read my TPM state. I have a Gigabyte GA-990FXA-UD3 R5 (rev. 1.0) systemboard and no secure boot options I can see. I have tried setting Windows 8 for OS type and disabling CSM but no luck.

 

The board was a good deal at the time but there has been a total of one BIOS update for it. 🙄

 

Anyone with suggestions would be welcome.

Yeah. Upgrade. 

6 hours ago, PsYcHoKiLLa said:

From your motherboard's manual


image.png.6637721045cb3314d54b0e0c5fca34af.png
 

I've got a i7 6700k, same Asus BIOS but that specific part of it is nowhere to be found.  And doing some searches online I can't find out if my CPU has PTT at all or not.   Since the options aren't there I'm guessing no, so I ordered a TPM chip in the end.

5 hours ago, ManMountain said:

A lot of focus on TPM 2.0, but not so much on the CPU's that are not supported in Windows 11.  

 

AMD supported CPU

Intel supported CPU

 

 

I think that list is more for anyone making/supporting systems at a retail/business level.  Older CPUs should run 11 just fine and I expect that list will grow over time.

  • Like 1

Found fTPM in the UEFI for my ASUS ROG STRIX Z390-H GAMING.  Buried under Advance settings - PCH-FW Configuration - TPM Device Selection - select Firmware TPM - save and reboot.  Passed the PC health check!

 

 

While my main desktop is compatible, I have two other desktops (and about 6 or 7 other lesser used systems) that aren't event close. One is a 4770k on an Asus ROG Maximus VI Gene and the other a 4790k Asus ROG Maximus VII Gene. Both have 32gb ram, 1TB SSDs and 2070s. Neither bios has anything even close to Intel PTT although even it it did, the CPU's themselves aren't on the list (or generationally close) so that's that.

 

One of these is my wife's main desktop (the 4790k) and she really likes how Win 11 looks so it appears that  Microsoft and PC builder consortium (Dell, HP, Lenovo) have won this round and I'll have to update her CPU/MBoard/Ram later this year. 

6 hours ago, Biscuits Brown said:

While my main desktop is compatible, I have two other desktops (and about 6 or 7 other lesser used systems) that aren't event close. One is a 4770k on an Asus ROG Maximus VI Gene and the other a 4790k Asus ROG Maximus VII Gene. Both have 32gb ram, 1TB SSDs and 2070s. Neither bios has anything even close to Intel PTT although even it it did, the CPU's themselves aren't on the list (or generationally close) so that's that.

 

One of these is my wife's main desktop (the 4790k) and she really likes how Win 11 looks so it appears that  Microsoft and PC builder consortium (Dell, HP, Lenovo) have won this round and I'll have to update her CPU/MBoard/Ram later this year. 

I'm in the same boat but with a newer 6700k but no PTT in the BIOS anywhere.  Asus couldn't be bothered to add it in I guess?

I found out I'm not compatible because of my CPU (too old), if you want to check yours :

Supported Intel Processors (Anything older than 8000 series not supported)

Supported AMD Processors

So someone posted that intels PTT (fTPM) needs CPUs with vPro support.  If that's the case then that would explain why my 6700k doesn't show any options for PTT in the BIOS.  Also why 7000 series CPUs aren't supported either because I just checked and the 7700k doesn't have vPro either.    

 

Oh well, I'll just stick with Windows 10  or see what happens with 11 later.  I still think you'll be able to install it just "unsupported" and a "at your own risk" type deal.   This system is 6yo though I've upgraded the GPU once to a 1070 so it's solid for my gaming needs.

 

It's looking like I'll have to retire the old i7 920 though, mostly because I want something that takes up less space than the mid-tower it has, it can still do it's task without issue though.

Hello,

 

Hypothetically speaking, parts of a motherboard design layout could be re-used to create multiple form-factors (ATX and mATX for example) or used across several chipsets (value-end to HEDT) and the manufacturer may have left the connector in place by accident. 

 

I would also wonder if the cost of removing the module header would be more than leaving it in place.  Motherboard manufacturing seems pretty automated, though, so the cost would be in the time and labor to reset manufacturing, not the costs of the pins and the shroud. 


Another possibility might be to provide support for a different type of TPM chip (e.g., something mandated by a government) that operates differently than the embedded type.

Anyways, those are just some reasons I came up with just off the top of my head.  I am not a crypto engineer, though, I do not know how likely any of these scenarios I mentioned are possible.

Regards,

Aryeh Goretsky

 

  

On 24/06/2021 at 14:44, Steven P. said:

GIGABYTE_GC_TPM2_0_S@@gzzg37.jpg

 

I don't know, tell me why a motherboard would have a TPM 2.0 Module header if the board only supports CPUs where this is already built in?

 

Apparently Windows uses the TPM for a lot more features than BitLocker, Windows Hello, Secure Boot. But these are all enterprise features mostly: https://docs.microsoft.com/en-us/windows/security/information-protection/tpm/tpm-recommendations

Interestingly if you read Microsoft's Minimum Hardware documentation for ecosystem partners, this states: "Upon approval from Microsoft, OEM systems for special purpose commercial systems, custom order, and customer systems with a custom image are not required to ship with a TPM support enabled".

 

So it seems like deploying Windows 11 with MDT (Microsoft Deployment Toolkit) to unsupported hardware is a scenario Windows 11 would work fine in, even if Microsoft are aiming for this to be the exception and not the norm.

 

With that in mind this should mean that Windows 11 will continue to work fine in the future once you bypass the installer check, since there will be 'officially supported' Windows 11 scenarios with no TPM.

 

One can hope anyway. Clearly security is the focus here, however given Windows 10 can work perfectly on Core2Duo hardware dating back to 2006, it seems a big leap to drop support for anything Intel before Coffee Lake (2017) and AMD before Ryzen 2000 (2018). For what the majority of people use a computer for these days a 10+ year old system with an SSD can still offer a really good experience.

5 hours ago, George P said:

So someone posted that intels PTT (fTPM) needs CPUs with vPro support.  If that's the case then that would explain why my 6700k doesn't show any options for PTT in the BIOS.  Also why 7000 series CPUs aren't supported either because I just checked and the 7700k doesn't have vPro either.    

 

Oh well, I'll just stick with Windows 10  or see what happens with 11 later.  I still think you'll be able to install it just "unsupported" and a "at your own risk" type deal.   This system is 6yo though I've upgraded the GPU once to a 1070 so it's solid for my gaming needs.

 

It's looking like I'll have to retire the old i7 920 though, mostly because I want something that takes up less space than the mid-tower it has, it can still do it's task without issue though.

vPro? I use PTT and I dont have vPro enabled, the CPU's are "eligible" but not using it

17 minutes ago, neufuse said:

vPro? I use PTT and I dont have vPro enabled, the CPU's are "eligible" but not using it

Well then it's just Asus not adding the option for my specific z170-a motherboard because it's not there anywhere.   And it's looking like a pain to get their TPM 2.0 chip at this point.

10 minutes ago, George P said:

Well then it's just Asus not adding the option for my specific z170-a motherboard because it's not there anywhere.   And it's looking like a pain to get their TPM 2.0 chip at this point.

Is there a "PCH-FW Configuration" entry in the "Advanced" section of the UEFI? The TPM setting for another asus Z170 model is there.

 

What's the BIOS version?

 

If it's completely missing, maybe try contacting asus support.

1 minute ago, eddman said:

Is there a "PCH-FW Configuration" entry in the "Advanced" section of the UEFI? The TPM setting for another asus Z170 model is there.

 

What's the BIOS version?

The BIOS is the newest one listed on their site for my board.

 

Z170-A BIOS 3802

 

As far as the PCH-FW Configuration option, I've looked and didn't see it though for the hell of it I could look again I guess.

28 minutes ago, George P said:

The BIOS is the newest one listed on their site for my board.

 

Z170-A BIOS 3802

 

As far as the PCH-FW Configuration option, I've looked and didn't see it though for the hell of it I could look again I guess.

It took me forever to find the PTT config on my ASUS board when I got it... wish they made stuff more clear for security settings my old MSI board flat out called it TPM Security made it easy

6 minutes ago, neufuse said:

It took me forever to find the PTT config on my ASUS board when I got it... wish they made stuff more clear for security settings my old MSI board flat out called it TPM Security made it easy

Yeah, so I dove back into bios to try and see one last time but nothing.  I just don't have PTT, so oh well.  I either get lucky and find a TPM chip to put in, or wait and see what happens and if you can install without TPM after you agree to some warning  they give you.  Otherwise I'll just stay on Windows 10 till I'm ready to build a new system.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • I sort of agree with you on that. I had a telescope - a real hefty thing, although only around 500CHF - that got me so fascinated about the stars and planets. I would stare for hours, amazed that I could see the craters of the moon or the rings of Saturn in "realtime" (quotations because, y'know, speed of light and whatnot). A friend of mine has a telescope like the one mentioned in the review, and the pictures are amazing to look at. But there is something missing for me. I may as well just go to NASA's website and look through their gallery.
    • As opposed to catching bad press because it's the engine's fault? You didn't really think this through did you? lol. The engine has all the tools a dev needs to optimize their game, Epic isn't gonna hold their hand to make sure they use them. Also, Epic isn't forcing anyone to use Lumen, Nanite or super high resolution meshes and textures. Most of the stuttering can easily be fixed by generating a PSO cache and compiling every shader before loading the game, it's up to the developer to set it up properly.
    • I think it depends on what you're looking for to do, and the time you have to spare. With my Dwarf 3, I easily spend 3-4 hour sessions; half an hour driving to an un-light polluted place, another half hour unpacking and setting up the smart scope + tripod for equatorial tracking, then 15 more minutes mucking around with settings and shooting calibration frames, spending a few hours shooting, merging with past photo sessions, etc. It's crazy how time flies and I often get home later than I expected. It's something I still need to set aside a good part of an evening to do, all in all. For one session, where you often need like four for best results when it comes to deep space objects. Even with a smart scope like Dwarf 3, regular non-astro photography is still way more approachable to people getting into photography. I find this is a time consuming niche no matter how I go about it. With practice, I can probably begin cutting time here but I think where smart scopes find their home is among people who love to shoot the night sky but don't have the spare time to go deep with the "navigator level" attunement to the night sky itself in addition to everything else. Having said this, _if_ you have even more time to spend on this hobby, it will probably be even more rewarding to do it more by hand and learn the skies and the details of how it all works.
    • I misread the title and thought Teams itself would be redesigned. Imagine having this one as a native WinUI app.
    • Dell, HP PCs ran into endless reboot, BitLocker recovery loops but Windows 11 isn't to blame by Sayan Sen Last month Neowin reported on a major issue on Dell systems wherein a bug in its official support tool was leading to endless blue screen of death (BSOD) and restarts. Following our report, Dell officially acknowledged its SupportAssist-related crash issue, confirming that the culprit is not Microsoft's operating system but rather a faulty version of its own remediation software. In a newly published support advisory, Dell stated that version 5.5.16.0 of Dell SupportAssist Remediation and Alienware SupportAssist Remediation can trigger blue screen errors and unexpected system restarts. The company notes that the problematic component operates independently of the main SupportAssist application, meaning users should not remove the primary SupportAssist software when troubleshooting the issue. According to Dell, the crashes are linked specifically to the SupportAssist Remediation service, which is bundled with SupportAssist OS Recovery Tools, and as such it has since released an updated version, 5.5.16.1, which is said to resolve the problem. Affected users are advised to first verify whether version 5.5.16.0 is installed by checking the Installed Apps section in Windows Settings. If so, Dell recommends updating SupportAssist OS Recovery Tools through either SupportAssist's "Update Software" feature or Dell Command Update. Dell also advises users to back up important data before performing the update and to ensure systems remain connected to power throughout the installation process. If you are still having issues though make sure to report to the Dell support forum. As it turns out though Dell is not the only PC maker currently dealing with update-related headaches as HP is also facing a separate but probably equally frustrating issue involving recent Windows Secure Boot updates that were released with recent Windows 11 Patch Tuesdays. Similar to Dell, HP also put up its own support article where it explains the issue. The company says that affected devices could hit a brick wall when booting as they run into a BitLocker recovery loop after the April 2026 updates. The problem appears to affect systems wherein the new UEFI Secure Boot CA 2023 certificates fail to apply properly. As such affected users will find themselves entering their recovery key over and over again despite the system otherwise functioning normally. HP says such PCs should be updated to the latest available BIOS version and configured with the necessary Secure Boot certificates before installing Microsoft's Windows 11 Patch Tuesday updates. Systems that are already experiencing the problem may require BIOS configuration changes to restore normal boot behavior. Admins can find information regarding that in the support article here on HP's official website.
  • Recent Achievements

    • One Month Later
      DJC50PLUS earned a badge
      One Month Later
    • Week One Done
      DJC50PLUS earned a badge
      Week One Done
    • Proficient
      Eric Biran went up a rank
      Proficient
    • Dedicated
      Conjor earned a badge
      Dedicated
    • Week One Done
      Windows Guy earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      493
    2. 2
      PsYcHoKiLLa
      246
    3. 3
      Steven P.
      72
    4. 4
      +Edouard
      69
    5. 5
      neufuse
      68
  • Tell a friend

    Love Neowin? Tell a friend!