-
×InformationNeed Windows 11 help?Check documents on compatibility, FAQs, upgrade information and available fixes.
Windows 11 Support Center. -
-
×InformationNeed Windows 11 help?Check documents on compatibility, FAQs, upgrade information and available fixes.
Windows 11 Support Center. -
- HP Community
- Desktops
- Business PCs, Workstations and Point of Sale Systems
- Recover TPM keys

Create an account on the HP Community to personalize your profile and ask a question
04-08-2024 08:12 AM - edited 04-08-2024 08:14 AM
Hello.
I purchased a used HP Z440. I did some upgrades like RAM, HP Z Drive Quad Pro and a modern GPU. I upgraded to the latest BIOS version 2.62 and thought to do good to install TPM 2.0 as well. Don't really know why, it seemed like a good idea at the time.
I guess I didn't read the manual too well and went ahead so I cleared the TPM 1.2 keys, without backing them up.
Neeless to say that I can't use TPM now. It will not even show up in my test install of Windows 11 Pro, bypassing the TPM 2.0 and processor requirements. I did this before on other desktops, but didn't need the TPM. Windows 11 runs fine and can use TPM 1.2 for core isolation fine after installing, so I figured it wouldn't be a big deal. However, as this will be my main computer for a while, I need TPM to use Bitlocker and FIDO2 support.
Is there any way to get the OEM endorsement keys back to write them to the TPM module? Will a fresh install of Windows 10 writes them in the TPM partition? Or can I really forget about it?
Also is there any way to get a Windows 10 Pro installation ISO for my specific HP Z440, or will the standard multi-version of Windows 10 be the same, provided I would still need the install all drivers manually. To be honest I really like Windows 11 and it runs fine without the TPM, it's just that I really need the Bitlocker and other functionality. I don't mind going back to 10, but keeping 11 would be better, although officially unsupported. Workstation is out of warranty and support anyway.
04-08-2024 09:44 AM
you can not recover TPM keys, this is by design if you were using bitlocker via hardware nothong can be done software based bitlocker is a diffrent animal and i cant comment on this
in the bios clearing TPM will also show a option for re-creating a new default TPM key
the proper upgrade procedure is to backup the existing key then upgrade from v1.2 to 2.0 and reapply the key
in your case you need to reset the TPM and have it regenerate a new default key then reinstall a patched windows 11 that does not look for the TPM or CPU revision. the program RUFUS fill do this for you using a ISO image downloaded from microsoft, again it's a ISO image not the create the usb key install option
Last, the z440 does have a official win 10 restore image on the HP "Cloud Recovery" website, select the image that INCLUDES the necessary drivers
https://ftp.hp.com/pub/caps-softpaq/CloudRecovery/crsupportedplatform.html