TPM - OwnerClearDisabled = True. How to make it false by powershell or cmd

Question

_{Wednesday, April 17, 2019 4:17 AM}

Hi,

I have a requirement where I am stuck with a few machines (probably thousands), where Windows 10 has taken the ownership (conclusion after several hours/days of searching and experimenting) of the TPM and it has disabled clearing the TPM via script/powershell. 

I have tried multiple methods to no avail, except for manual clearing from TPM management console.

I even gave a wild shot by directly upgrading/downgrading the TPM, unsuccessfully, tried disabling TPM auto provisioning and rebooting the machine, hoping Windows 10 somehow gives up the ownership (I know this is stupid, but I am trying out every single thing).

As these are predominantly Dell machines, I tried CCTK but couldn't find any suitable command to do what my requirement is.

So, now, I am in desperate need of some assistance on how to disable "OwnerClearDisabled" (or make OwnerClearDisabled = False), via cmd or powershell, so that I can upgrade/downgrade TPM as per the requirement.

In Summary, I want to make "OwnerClearDisabled" value from "true" to "false" on Dell machine using powershell/cmd so that I can upgrade/downgrade TPM on Dell machines.

Any help is appreciated, Thank you very much in advance

All replies (3)

_{Thursday, April 18, 2019 6:36 AM}

Hi,

According to your description, let’s focus on the main issue about how to upgrade/ downgrade TPM.

For more detail steps, please read the following link as reference:

How To Change TPM Modes 1.2<->2.0

https://www.dell.com/support/article/us/en/04/sln312544/how-to-change-tpm-modes-1-2-2-0?lang=en

Note: This is a third-party link and we do not have any guarantees on this website. And Microsoft does not make any guarantees about the content.

Hope these are helpful. If you have any question, please feel free to let me know.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Monday, April 22, 2019 9:08 AM}

Hi,

Was your issue solved?

If yes, would you like to share your solution in order that other community members could find the helpful reply quickly.

If no, please reply and tell us the current situation in order to provide further help.

Best

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Monday, April 22, 2019 1:35 PM}

Thank you for the suggestion, cloris_sun. 

I have already achieved automating the downgrading of TPM using script. However, the main hurdle/catch here is the "OwnerClearDisabled" property. If it's value is false, TPM will be cleared of any previous values/information (Clear-TPM in powershell) and will be downgraded.

But if the value is "true", TPM will not be cleared at all (unless we clear manually in UI) and downgrade fails.

Still searching for a way to somehow make OwnerClearDisabled to false silently (using powershell preferably) so that the TPM is cleared before downgrading it.