TMP2.0 issue with launch Windows11 (Z420 Workstation)

[bithopper]

Back in 2019, someone asked if he could upgrade his TPM to 2.0. At that time it wasn't difficult working with TPM 1.2 while WIndows10 didn't require 2.0.

But now we're in 2021 and WIndows11 arrives, which requires TPM2.0! My PC is quite capable of running this operating system but lacks version 2.0.

Therefore I'll ask the same question again: is there any way to upgrade the TPM?

[Paul_Tikkanen]

Hi:

Please see this related discussion...

how to update IFX TPM 1.2 to TPM 2.0 on HP Z420 Workstation - HP Support Community - 7255607

An update through HP is not possible.

The other reason why your PC would not qualify to run W11, would be the Intel processors series the Z420 model series comes with are not supported.

Windows Processor Requirements Windows 11 Supported Intel Processors | Microsoft Docs

[DGroves]

again,...........................Microsoft decides the windows Operating systems requirements and they have publicly stated TPM 2.0 is/will be required and only gen 8 and newer (and possibly gen 7) cpu's will be supported by Microsoft and your current windows 10 will be actively supported/updated till 2025

the HP Zx20 line of workstations is out of warranty and extended warranty support, as such hp will not be providing any support for this line also, the cpu's used in them are not officially supported under win-11

the HP Zx40 line and newer will support TPM2.0, however the cpu's used in them are not supported under win-11

perhaps MS will release a ver of win-11 with different TPM and CPU requirements for regions that prohibit hardware based cryptography  in the future, but as of now please stop asking for TPM 2.0 on these Zx20 and earlier workstations it's not going to happen through HP

[SDH]

I think your question is:   "Is there any way to upgrade the TPM from TPM 1.2 to 2.0?"  The short answer is "So far no", and "No" might truly be the case.  Our friend DGroves has been on the inside of a large enterprise that has the pull to get him some perspective on what HP/Microsoft will and will not do.  I'm more optimistic, perhaps Pollyannish.

Longer:  HP has used different generations of TPM chips in their workstations as time has gone forward.  The chips are soldered onto the motherboard, and interact intimately with the motherboard's BIOS.  Some consumer motherboards have a TPM socket built in so that a person can add the chip and its carrier PCB to their motherboard later if they wish... that is not the case with the HP workstations.

I have seen no PCIe card that can be plugged into a spare slot with a TPM 1.2 or 2.0 chip to add this capability.  There would be a big market for such a card coming up if it was technically possible.

There is one HP workstation family we use that has a later generation TPM chip (different from what is on the ZX20 motherboards) that can be firmware flashed from TPM 1.2 to 2.0... that is on the ZX40 generation motherboards.  To my knowledge all those came with TPM 1.2 chips that all can be flashed up to the next level.   The inscription on the chip obviously does not change but the chip becomes identical to the TPM 2.0 next higher model chip.  I have not done that with any of our ZX40 workstations... no rush.  From what I have read this is not a plug and play flash... it is more technically advanced.

Infineon makes the TPM chips HP uses, and made that ZX40 firmware updater to go from 1.2 to 2.0.  HP packages that inside one of its SoftPaqs.  HP certainly would need to be involved in the creation of a ZX20 TPM updater if it ever could be done.  It may simply not be possible despite all the talents that HP and Infineon have between them.

If it can be done... what is the incentive for HP and Infineon to take on that project?  Good will, and not wanting to have customers perceive ill will?  Hopefully HP will address this issue and clarify what can and cannot be done.  Surely they know the level of concern their customers, large and small, have about this.

My hope is that a TPM 1.2 to 2.0 firmware updater can be made for the ZX20 TPM chip.  My alternative hope is that Microsoft can roll back their policy and allow W11 to be installed on workstations with TPM 1.2 chips on the motherboards.  Maybe a TPM 1.2 firmware update to a specific newer 1.2 version would suffice?

This thing about an approved list of processors required or W11 won't install.... I believe that is a red herring.  There is a MS list of approved processors for W10 installs, and many of the HP workstation processors we've been running W10 on for years are not on that list and never will be.