URGENT: 4-Month Struggle to Enable TPM 2.0 on HP ProBook 450 G8 - Need Official Solution

[Tcoder]

Dear HP Community and Support Team,

I have been trying for nearly 4 months to enable TPM 2.0 on my HP ProBook 450 G8 Notebook PC (24F52PC) to meet Windows 11 requirements, but I'm at a complete dead end.

My System Details:

• Model: HP ProBook 450 G8 Notebook PC (24F52PC)

• Current BIOS: T70 Ver. 01.22.00 (Latest available)

• OS: Windows 10 Pro 22H2

Everything I've Exhaustively Tried:

✅ BIOS Updates: Installed latest BIOS 01.22.00 Rev.A
✅ Complete BIOS Scans: Searched every menu (Security, Advanced, System Configuration) - NO TPM options found
✅ SPM Provisioning: Successfully provisioned Secure Platform Management using HP CMSL and certificates
✅ HP Command Attempts: Tried all TPM-related commands through SPM - all return "Setting not found"
✅ PowerShell Diagnostics: Get-Tpm shows TpmPresent: False, WMI detects TPM hardware but values are empty
✅ Setting Names Attempted: "TPM Device", "TPM Embedded Security", "Security Device", "Embedded Security Device", "TPM 2.0 Security" - ALL FAILED

Critical Finding:
SPM is fully provisioned and working, but there are literally no TPM settings available in the BIOS configuration for my device.

My Plea for Help:
After 4 months of relentless effort, I desperately need official guidance:

1. Does my specific ProBook 450 G8 model actually have TPM 2.0 hardware?

2. If yes, why are there no BIOS settings to enable it?

3. Is there a hidden BIOS update, engineering BIOS, or special procedure?

4. Is this a hardware limitation or regional restriction?

This has become a major blocker for Windows 11 adoption. I would be incredibly grateful for any official solution or explanation.

Thank you for your time and assistance.

[NonSequitur777]

@Tcoder,

You've done an excellent job of documenting your troubleshooting steps -and your findings are spot on! Let's go through this logically.

Btw, make sure you got the most recent BIOS version (01.22 Rev.A released on September 22, 2025), which you can find here: https://support.hp.com/us-en/drivers/hp-probook-450-g8-notebook-pc/37973141.

TPM 2.0 Hardware Status on the HP ProBook 450 G8:

Your ProBook does include TPM 2.0 hardware, but it's not a discrete chip. It uses firmware TPM (fTPM) integrated into the CPU's Platform Trust Technology (PTT) -Intel's firmware-based TPM solution. This means the TPM isn't listed as a standalone module in BIOS, but as an option under the CPU's security settings.

---

Here's what to check in BIOS:

1. Restart the notebook and press F10 repeatedly to enter BIOS Setup.

2. Navigate to:
   Advanced → Trusted Computing (if present), or
   Security → TPM Device → Available

3. If no TPM section appears, go to:
   Advanced → System Options and look for Intel Platform Trust Technology (PTT).

4. Enable PTT, then Save Changes and Exit.

After rebooting into Windows, run: tpm.msc

You should then see: "The TPM is ready for use (Version 2.0)".

---

Why TPM Might Be Missing in BIOS:

• If your BIOS was previously configured using HP Sure Admin (SPM), TPM settings can become locked or hidden under HP's enterprise management layer.

• The system may have Sure Start policies or SPM certificates that mask the PTT menu to prevent accidental tampering.

To check if that's the case:

1. In BIOS → Security → Sure Admin, temporarily disable Sure Admin Authentication.

2. Reboot, re-enter BIOS, and see if PTT or Trusted Computing now appears.

---

No TPM Options Even After That?

If TPM settings still don't appear:

• Reset BIOS to defaults (F9 → Yes → Save & Exit).

• Reboot, re-enter BIOS, and check again.

• If still missing, the BIOS may have been provisioned under enterprise configuration that hides firmware TPM for compliance reasons.

In that scenario, the only fix would be a BIOS reflash from HP Commercial Support using a "Clean" configuration file (BIN).

HP end-user support typically cannot issue that, but an HP Authorized Service Provider can.

---

Summary:

• Yes, your ProBook 450 G8 supports TPM 2.0 through Intel PTT (firmware TPM).

• Enable PTT in BIOS (Security or Advanced tab).

• If not visible, disable Sure Admin / SPM or restore BIOS defaults.

• If still hidden, contact HP Commercial Support for a clean BIOS configuration.

In case this would be helpful: here's the PowerShell method to check (and optionally enable) Intel PTT at the firmware level using HP's CMSL [Client Management Script Library].

Step 1 — Confirm CMSL is installed:

Open PowerShell as Administrator, then run:

Install-Module -Name HPCMSL -Force

If prompted to install from an untrusted repository, type Y and press Enter.

---

Step 2 — Check TPM/PTT status:

Run this command:

Get-HPBIOSSetting -Name "Intel Platform Trust Technology"

• If the output shows: "Intel Platform Trust Technology : Disable", it means PTT (firmware TPM) is present but currently disabled in BIOS.

• If it returns "Setting not found", your system's BIOS has the option hidden or locked (likely by SPM or Sure Admin provisioning).

---

Step 3 — Enable PTT from PowerShell (if accessible):

If Step 2 shows "Disable", you can enable it using (in PowerShell):

Set-HPBIOSSettingValue -Name "Intel Platform Trust Technology" -Value "Enable"

Then commit and reboot:

Save-HPBIOSSettings

Restart-Computer

After restart, check TPM status in Windows with: tpm.msc

Step 4 — If "Setting not found" persists:

That result confirms the BIOS menu is locked under Sure Admin or SPM.

To unlock it:

1. Enter BIOS → Security → Sure Admin

2. Temporarily disable Sure Admin Authentication

3. Save and exit BIOS, then recheck using the PowerShell commands above.

If the setting remains unavailable, only HP Commercial Support can reflash the BIOS with a clean NVRAM configuration (unprovisioned state).

---

Summary:

This PowerShell approach:

• Confirms whether PTT is hidden, disabled, or missing

• Allows enabling TPM 2.0 directly from Windows (if BIOS permissions allow)

• Distinguishes between a firmware lock (SPM/Sure Admin) vs. missing hardware

Kind Regards,

NonSequitur777