MS is squeezing ever tighter on security.Īdditionally: if your TPM uses an Infineon chip it may need it's firmware updated. Recent Win11 updates have been pushing more security by showing me security warnings if I don't enable Core Isolation, Memority Integrity and LSAS for Credential Guard. I think I've read that Windows Hello for Business uses Credential Guard with attestation to store PIN's and CG is only available with TPM 2.0 on Win11. You should see status there, it has to be ready for both Attestation and for Storage.Įven if everything is ready, it's probably not going to work. If you do see the TPM in Device Security, click on Security Processor details. They need to see and enable the TPM for Windows 10 to actually use it. Also open the management console plugin, TPM.msc. Try the Device Security app, a Windows 10 system applet type it in the Cortana search box. I have read, though, that current builds of Windows 11 require TPM 2.0.Ĭlick to expand.What is PC Health Check? is it the app that tells you if your system is Windows 11 ready? That probably does only the most limited of checks.

I remember reading early on that Windows 10 (Windows 11 too, actually) would use TPM 1.2 but not sure if it true.

Not a lot to lose if it proves to not work either. I also found a 20 pin TPM 1.2 module for Gigabyte boards, $12 off Amazon with delivery from China in a month. It delivers in a day so I'll know soon enough. I went ahead and got a TPM 2.0 module for Gigabyte boards, $17 off Amazon Prime with guaranteed return if it proves to not work on mine. About the only thing I've seen is TPM 2.0 isn't supposed to work on another AM3+ motherboard, it has to be TPM 1.2. But there's not a lot of information available for what's needed, how it works or if it's successful. All I want is to get Windows 10 working with the PIN and for whatever else it needs a TPM for 'Standard Hardware security' (UEFI w/ Secure Boot is already enabled).

I'm trying the same thing, only on an AMD, AM3+, motherboard made by Gigabyte.

Tpm 2.0 asus bios