TPM2.0 enabled in BIOS (02.62) invisible in Win64-Pro in a Z840 workstation, no Security Processor

[ManuPapa]

The BIOS (02.62) reports the TPM2.0 available, but Windows reports that it is not installed; the Security Processor is missing. How can I install the Security Processor, an what possible additional steps I need to do to be eligible for Windows 11?

[NonSequitur777 · Accepted solution]

@ManuPapa,

Welcome to our HP Community forum!

You're asking an excellent technical question — the HP Z840 is a legendary workstation, but Windows 11 does introduce some challenges for older platforms like yours.

Here’s a breakdown of what’s going on:

---

🔹 TPM 2.0 and the HP Z840:

• Although the BIOS (version 02.62) suggests that TPM 2.0 is available, in practice, the Z840 primarily uses a hardware-based TPM 1.2 module.

• Some later BIOS versions offer firmware-based TPM 2.0 emulation, but Windows 11 often does not recognize this "soft TPM" as valid.

• Windows 11 requires a genuine hardware TPM 2.0 device, not an emulated one.

Even if you could successfully enable TPM 2.0 in the BIOS (under Security > TPM Embedded Security), Windows 11 setup will still report that the system doesn't meet requirements.

---

🔹 Processor Compatibility:

• Unfortunately, none of the processors supported by the HP Z840 — namely the Intel Xeon E5 v3 and v4 families (Haswell-E and Broadwell-E) — are on Microsoft's official CPU support list for Windows 11.

• This means that even if TPM 2.0 were fully functional, the CPU would still block a standard Windows 11 upgrade.

---

🔹 Good News – Easy Workarounds:

If you are happy with your system as it is, there are a number of reliable and effective methods developed that allow you to almost effortlessly upgrade your Z840 to Windows 11 by bypassing the TPM and CPU checks.

This easy-to-follow YouTube instructional video shows the steps clearly:

🔗 How to Install Windows 11 Without TPM 2.0 Check

Many Z840 owners have used methods like this and are running Windows 11 very successfully!

---

🔹 Important Tip:

If you try Windows 11 and decide you don't like it, you have 10 days to roll back to Windows 10 without losing your data.

After 10 days, unless you follow the steps outlined in this guide, you may need to perform a fresh reinstall of Windows 10:
🔗 How to Roll Back from Windows 11 to Windows 10

Either way, the video will guide you smoothly through the process. ✅

---

🔹 Summary:

• TPM 2.0 is theoretically available but not reliably usable on the Z840.

• The processors themselves are not compatible with Windows 11 officially.

• Workarounds exist that allow you to upgrade if you choose.

• Always back up important data before attempting an OS upgrade.

---

Let me know if you’d like a quick checklist for preparing your Z840 before the upgrade — such as BIOS settings, Secure Boot adjustments, and backup recommendations!

Kind Regards,

NonSequitur777

[SDH]

NS777,

Not so sure about the TPM 2.0 info but surely am sure that Windows 11 24H2 can be installed on the Z440/Z640/Z840 by the method you and Paul have provided links to. I personally have been using Rufus 4.6 to do that instead, and have all our ZX40 workstations running on W11. Even recently used Rufus to get W11 24H2 running on two pretty old business class PCs... a HP Pro6300 SFF and a HP Elite8300 SFF.

A reliable source (DGroves) posted here quite some time ago about the TPM chip used on all the ZX40 motherboards... that those particular Infineon chips can be firmware flashed back and forth between TPM1.2 and TPM2.0. Back then there was some software that required 1.2 to run and other software that required 2.0. I've never seen that issue, however. I found a related document that said the flashing had a limit... something like 40 back and forths total. EDIT: The Infineon TPM chip used in the ZX20 workstations is different, earlier version, and it can only do TPM1.2.

Anyway because of these workarounds obviating need for any TPM of either type to get the latest Windows 11 up and running it all has become a moot point. I remember that your fun with trying that flashing was not much.

[NonSequitur777]

@SDH,

Btw, Congrats are in order being inducted into the Expert program:

Link: https://h30434.www3.hp.com/t5/Inner-Circle/2025-HP-Expert-Program/td-p/9367536.

Yes, flashing sucks, in my opinion.  I am going to try flashing BIOS one more time: getting an i7-3970X to work in an HP Z420 Workstation, currently in progress: https://h30434.www3.hp.com/t5/Desktop-Hardware-and-Upgrade-Questions/Upgrading-an-HP-Z420-Workstatio....

Kind Regards,

NonSequitur777

[SDH]

Thanks! I had no idea. Good company for sure.

Ooooohhh, I'll be reading your project posts on that for sure. You do excellent work.

My last post on the Intel DataCenter NVMe PCIe card drives running under W11 had some info on a superspeed version that I now highly recommend not looking at. It is a 2-drive on one card FrankenDrive with a PLX chip between and the superspeed came from a special NVMe-enabled IRSTe version that could RAID-0 the two. I got one out of our junk pile and opened a can of worms. Stick with what you're using!

[ManuPapa]

Many warm thanks for your extensive and informative reply!

TBH I'm thinking of upgrading the workstation to Win11 for two reasons: (1) having other computers running Win11, I find it simply more aesthetically appealing, AND (2) I realize Win10 will soon cease to be supported by MS.

Other than that, I'm honestly pretty satisfied with Win10. So, given the hassle of upgrading the OS (always a hazardous trick...especially with the necessary circumvention of MS's prescriptions, which may have been strengthened in the meantime), I guess I'll keep Win10 for now.

That is, UNLESS you believe there is little to no chance MS would come back with a "That was an uncertified upgrade, so this Update patch will make it unusable!" ?

Many thanks!

[NonSequitur777]

@ManuPapa,

In my opinion, there is very little chance that Microsoft will play dirty, so to speak, because that will provoke a royal sh1tstorm unlike anything else they have ever encountered which they'll soon experience to be bad for business.

Kind Regards,

NonSequitur777

[DGroves]

since "SDH" asked, the TPM chip used in the z840 originally was programed with v1.2 however the chip model used on the z840 is able to have it's firmware updated to TPM v2.0  however as pointed out the z840 CPU line is not win 11 compatible

(unlike the older z820 that used a different TPM chip and was only TPM 1.2)

TPM.MSC (win 10/11) will show the current TPM revision installed most z840's

many people have issues with the tpm update because they fail to understand that specific settings need to be in place

AMT must be enabled (do not enter AMT, just turn it on)

the AMT software must be installed which will enable a com3 virtual port showing in device manager

TPM must then be enabled in the bios

at this point you can run the TPM HP SP87753 pack from the extracted SP package in dos with the updater bat file, and it will autodetect the installed firmware and update the installed TPM to ver 2.0  or downgrade v2 to v1

https://h30434.www3.hp.com/t5/Business-PCs-Workstations-and-Point-of-Sale-Systems/HP-z840-no-TPM-BIO...

if having issues updating with a later bios than 2.54 installed read this link (not verified)

https://h30434.www3.hp.com/t5/Desktop-Operating-Systems-and-Recovery/Successful-Solution-to-update-Z...

[NonSequitur777]

@DGroves,

Congrats are in order: you too have been inducted as a 2025 HP Expert according to @Kitkat_Golden's post: https://h30434.www3.hp.com/t5/Inner-Circle/2025-HP-Expert-Program/td-p/9367536!

Kind Regards,

NonSequitur777

[DGroves]

Huh...was not aware of this expert program approval,  and unable to read the link you provided as access was not approved

so i suspect i'm not in the expert program