Certificate auto-enrollment fails with HP write filter

[NHS-Chris]

Hi there

This question was already asked previously but didn't get a response HERE 

I have exactly the same problem

We have problem with HP thin clients T640 and T630 OS Windows 10 LTSC 2016/2019. We are just now trying to activate 802.1x with certificate .

Computers are in Active Directory and getting Computer certificate by Autoenrollment. When Hp write filter is on and computer is to renew certificate it seems to work. But after reboot or so can it not find its own private keys. We can see the keys at disc and in registry. If write filter is off it works as intended. We have set exceptions in write filter for
c:\Programdata\Microsoft\Crypt  and Registry  HKLM\software\Microsoft\Systemcertificates\My

[perund]

Hi

We have resolved it on our T630 T640 and T655.

We had to save private keys in TPM-chip.

[NHS-Chris]

Amazing, thanks for replying,  I was curious to know how it ended up.

Do you recall your process for doing that, is there an online guide?

[perund]

We have an TPM-Auto enroll cert in our CA 

Templates is set to use TPM. I am not the one who don this and he is not working at our anymore.

I have som screenshots on my workpc. I put them up on Monday . I have to take them manually.