TPM 2.0 Windows 7 Legacy support enable

[LennardH]

Hi all,

We received some new Elitedesk 800 G3's.

I need to make sure the deployment works without any problems but I'm stuck with enabling bitlocker on the HP EliteDesk 800 G3 SFF. 

We are using SCCM 1702 with windows adk 1703 for deploying our systems. 

The machine is deploying without any issues, it even sets the bitlocker key within AD, but bitlocker is suspended after the deployment. 

I tried adding run command line at the end of the task sequence which resumes the bitlocker protection, but this results in entering the bitlocker recovery key at boot....

If I right click the C: drive -> Manage bitlocker the following error occurs.

"Cannot run - The trusted platform module (TPM) on this computer does not work with the current BIOS. Contact the computer manufacturer for BIOS upgrade instructions. 

The other option is "Resume bitlocker protection" this works, but TPM isn't really working as it is supposed to do. 

Our configuration: 

Windows 7 Enterprise x64

Bios in legacy mode

Bios 02.07 (most recent version)

TPM 2.0

Thanks in advance

[X-Lanie]

Hi,

I had the same issue with 800 G3 SFF. My work around is as follows on the TS

Created 2 packages, hotfix and TPM/bios downgrade and added to the model group

- Windows6.1-KB2920188-v7-x64 hotfix

- Restart

- Tpmconfig64 -s -fTPM20_7.62.3126.0_to_TPM12_6.43.243.0.BIN to downgrade TPM to v1.2 (SP81900 File Download)    https://support.hp.com/za-en/document/c05381064

- Restart

After applying the above TPM/encryption started working fine, no errors "TPM on this computer does not work with current BIOS.contact the computer manufacture for BIOs upgrade instructions"

Hope it helps.

Regards