TPM ERROR. A Firmware update is needed for your security processor (TPM).

Question

_{Friday, May 11, 2018 6:54 AM}

Guys please your advice.

I'm running Windows 10 v1803 build 17134.48 on Surface Pro3. Windows update is automatic.

In attention box i see the msg "TPM ERROR. A Firmware update is needed for your security processor (TPM)."

Collected TPM-logs:

TPM Device Information

  -TPM Present: True
  -TPM Version: 2.0
  -TPM Manufacturer ID: IFX
  -TPM Manufacturer Version: 5.0.1089.2
  -PPI Spec Version: 1.2
  -Ready For Storage: True
  -Ready For Attestation: True
  -Information Flags: 0x00000000
  -Is Capable For Attestation: True
  -Clear Needed To Recover: False
  -TPM Has Vulnerable FW: True
  -TPM FW Vulnerability: 0x00000001
      -ADV170012 - IFX ROCA/Riemann
  -PCR7 Binding State: 3
  -TPM Spec Version 99
  -TPM Errata Date: Thursday, July 25, 2013
  -PC Client Version: 256

Do I need to update TPM? How? Where to find firmware for this manufacturer? Is that Infineon?

Kind regards,

Alex.

All replies (2)

_{Monday, May 14, 2018 1:57 AM}

Hi Alex,

Please do the following recommended actions:

1. First, download and install the Windows operating system updates from Windows Update

If you have turned on automatic updates in Windows Update, you won’t need to take any action because the updates will be downloaded and installed automatically.

If you have not turned on automatic updates, Microsoft recommends that you go to Windows Update immediately to check for updates and install the applicable updates manually.

Warning

Do NOT apply the TPM firmware update prior to applying the Windows operating system update. Doing so will render your system unable to determine if your system is affected.

2. Install any applicable firmware updates

please see Microsoft Knowledge Base Article 4073006 for additional information and instructions.

3. Clear your TPM

Important

Before clearing your TPM, be sure to back up your data. Do not clear the TPM on a device you do not own, such as a work or school PC, without being instructed to do so by your IT administrator.

Follow these steps to clear your TPM:
1.Go to Start > Settings > Update & Security > Windows Security > Device security .
2.Under Security processor, select Security processor details.
3.Select Security processor troubleshooting, and then under Clear TPM, select Clear TPM.

Your device will need to restart before the process is complete.

For more information, read this article:

Update your security processor (TPM) firmware

https://support.microsoft.com/en-sg/help/4096377/windows-10-update-security-processor-tpm-firmware

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Wednesday, June 13, 2018 9:47 PM}

https://www.infineon.com/cms/en/product/promopages/tpm-update

Here are official Infineon TMP firmware updates.  Make sure all bitlocker encrypted drives are fully decrypted prior to doing any updates to a TMP, Infineon brand or otherwise.  If you forget anything that your TPM may have been a key source for, decrypt that medium first!  This is extremely important!!!  Otherwise you could lock your drives, and without the proper key would become inaccessible, even after a successful TPM update.

For most Windows users Bitlocker drive encryption is A#1, some may get their Secure Boot keys from their TPM, so to be safe turn off Secure Boot prior to this update as well.  UEFI users will have to disable Secure Boot anyway in order to use the EFI based tool Infineon provides, but I just wanted to stress it regardless.  Watch your update version, update in order, for Infineon (Asus) TPM's under the models listed in the firmware download.  

If you are not sure what you are doing, or don't fully understand a TPM (Trusted Platform Module), Bitlocker Drive Encryption, or Windows Secure Boot, you will want to consult a technician who does fully understand the process.  Updating your TPM while Bitlocker disk encryption is on (or other TPM driven key security) will be disastrous!