BitLocker and TPM

Question

_{Friday, April 19, 2019 12:44 PM}

Hi. I want to configure bitlocker and configuration requires to configure tpm as well. When I entered BIOS Security setting, I saw TPM with different option.For now I checked only TPM security and activate checkbox. The rest (ACPI etc.)were kept unchecked. Now what kind of problem I would experience? And What is your recommendation to activate TPM. I would please to get prompt reply as it is so urgent. Thanks in advance 

All replies (6)

_{Monday, April 22, 2019 5:29 AM ✅Answered}

Hi,

If you mean the TPM options below:

ACPI stands for Advanced Configuration & Power Interface.

For your reference:https://trustedcomputinggroup.org/resource/tcg-acpi-specification/

PPI stands for Physical Presence Interface.

For your reference:https://trustedcomputinggroup.org/resource/tcg-physical-presence-interface-specification/

Please Note: Since the websites are not hosted by Microsoft, the links may change without notice. Microsoft does not guarantee the accuracy of this information.

If you enable all three of these settings, then you can clear the TPM ownership without having to physically go into the BIOS.

If you want to enable the TPM settings you could just check the box saying:  “TPM Security” to enable the TPM hard drive security encryption. Other options are not required.

Hope above information can help you.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Monday, April 22, 2019 9:54 AM ✅Answered}

Hi,

1.Clear the TPM as part of a complete reset of the computer: You might want to remove all files from the computer and completely reset it.

2.That's OK.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Monday, April 22, 2019 8:35 AM}

Hi Farena. Thanks for your explanation. Is it enough to check only TPM security and ACPI support for bitlocker encryption?

_{Monday, April 22, 2019 9:33 AM}

Hi WinIT90,

The default setting: Enable TPM Security, TPM ACPI Support, TPM PPI Provision Override.

If you want to clear TPM without the F12 Prompt, it relates to PPI.

If you set the default value, it will not affect activation, deactivation, and clear selection.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Monday, April 22, 2019 9:44 AM}

HI Farena

I checked TPM security and ACPI support only not PPI.

Questions:

1.When do I need to clear TPM?

2. if I don't need tpm clear, is it enough to check only TPM security and ACPI support?

_{Monday, April 22, 2019 10:04 AM}

Thank you so much. Your answers were really helpful and easy to understand. Now it is time to turn on bitlocker and tpm on other hosts. Thanks