TPM Not Usable / PCR7 Binding Error (Ryzen 5 5600G / BIOS F.38)

[Juhozu01]

Hi everyone,

I'm hoping someone in the community or an HP representative can help me solve a persistent TPM 2.0 issue on my HP computer. I need TPM 2.0 to be functional for some gaming applications.

**My System:**

* **Model:** [HP Pavilion Gaming Desktop PC TG01-2000a]
* **CPU:** AMD Ryzen 5 5600G
* **Operating System:** Windows 11 Home 64-bit Version: 22621.4317
* **BIOS Version:** F.38 (Note: I had the same issue on previous versions as well but updated while trying to fix the issue)

**The Problem:**

Even though TPM, Secure Boot, and Virtualization are **enabled** in the BIOS and all drivers seem up-to-date, Windows does not correctly recognize or use the TPM.

**Here's what I'm seeing:**

* **System Information (`msinfo32`):** Under "Device Encryption Support", it shows the error: "**Reasons for failed automatic device encryption: TPM is not usable, PCR7 binding is not supported**".
* **Device Manager:** Under "Security devices", it correctly shows "**AMD PSP 10.0 Device**" with no errors (just the key icon). However, it **never** shows "**Trusted Platform Module 2.0**", even when I select "Show hidden devices".
* **Windows Security:** Under Device Security, it confirms **Secure Boot is On**, but it also says "**Standard hardware security not supported**".
* **TPM Management (`tpm.msc`):** Shows the error "Compatible TPM cannot be found".
* **PowerShell (`Confirm-SecureBootUEFI`):** This command correctly returns **`True`**.

**Troubleshooting Steps I've Already Tried (Problem still exists):**

* **BIOS Settings Verified:** Confirmed TPM State [Enabled], Secure Boot [Enabled], Virtualization Technology [Enabled], BIOS Mode [UEFI].
* **BIOS Resets:**
* Cleared TPM data via BIOS option.
* Reset Secure Boot keys (Disabled Secure Boot -> Cleared Keys -> Loaded HP Factory Defaults -> Re-enabled Secure Boot).
* Loaded Setup Defaults (F9), saved, rebooted, then manually re-enabled only TPM, Secure Boot, and Virtualization.
* **BIOS Updates:** Updated from F.36/F.37 to the current latest version F.38 via HP utility. Also tried the Windows Key + B recovery (re-flashed F.38).
* **AMD Drivers:** Downloaded and installed the **latest AMD Chipset Drivers** (for B550 chipset) directly from AMD's website.
* **Device Driver Reinstalls:**
* Uninstalled "AMD PSP 10.0 Device" in Device Manager and restarted (device reinstalled automatically, problem persisted).
* Attempted to manually "Update Driver" for "AMD PSP 10.0 Device" (Windows reported best driver already installed).
* **Windows Checks:**
* Ran `sfc /scannow` (completed successfully, no errors found).
* Ran `bcdedit` commands (`useplatformtick yes`, `tpmbootentropy ForceEnable`).
* Checked Windows Update for any relevant drivers.
* (Tried manually adding "Trusted Platform Module 2.0" via legacy hardware - this resulted in the device showing with a Code 10 error "cannot start", so I removed it).

**Current Situation:**

Despite ensuring all settings seem correct and using the latest official BIOS and drivers, Windows consistently fails on the "PCR7 binding" and doesn't recognize the TPM 2.0 functionality provided by the AMD PSP chip.

**My Question:**

Has anyone else with a similar HP model (especially with a Ryzen 5000G series CPU) experienced this specific "PCR7 binding is not supported" error even when Secure Boot is confirmed `True`? Were you able to find a fix or workaround? Is this possibly a known bug with recent HP BIOS versions that needs an official patch?

Any help or suggestions would be greatly appreciated! Thank you.

(ive summarized this via AI as ive been using it to help me trough this issue but im out of options so im reaching out here)

[VikramTheGreat]

Hi @Juhozu01,

Welcome to the HP Support Community.
 

Thank you for posting your query. I will be glad to help you.

Thank you for sharing such a detailed and well-organized summary of your TPM 2.0 issue. I can feel the persistence and patience you've shown. It's clear you're doing everything right, and yet the system seems to be holding back.

Your desktop uses the AMD Ryzen 5 5600G processor and the Erica6 motherboard, which integrates TPM functionality via the AMD PSP (Platform Security Processor). This is not a discrete TPM chip, but a firmware-based TPM (fTPM), which should be recognized as TPM 2.0 by Windows 11.

Recommended Actions You Can Try

Here’s what we suggest for TPM issues on your model and BIOS version:

1. Ensure BIOS F.37 or F.38 is Installed Properly

• You’ve already updated to F.38, which is good. But sometimes a clean reflash helps: 
  • Download BIOS F.38 from HP here:
    👉 HP Pavilion Gaming Desktop PC TG01-2000a Software and Driver Downloads | HP® Support
  • Use the HP BIOS Update Utility from within Windows or via USB recovery.

2. Enable fTPM in BIOS (Double-check)

• Go to BIOS → Advanced → Trusted Computing
• Ensure Security Device Support is Enabled
• TPM Type should show Firmware TPM (fTPM)

3. Clear TPM via BIOS Again

• BIOS → Security → TPM Device → Clear TPM
• Save and exit, then boot into Windows

4. Check Disk Encryption Status

• PCR7 binding requires BitLocker-compatible disk encryption and UEFI boot.
• Run this in PowerShell: Get-WmiObject -Namespace root\CIMv2\Security\MicrosoftVolumeEncryption -Class Win32_EncryptableVolume

If encryption is not enabled or shows errors, PCR7 binding may fail.

5. Check Secure Boot and Platform Integrity

• You’ve confirmed Secure Boot is on great.
• Try disabling and re-enabling Secure Boot again, then reboot.

I hope this helps.

Take care and have an amazing day!
 

Did we resolve the issue? If yes, please consider marking this post as "Accepted Solution" and click "Yes" to give us a helpful vote - your feedback keeps us going!

Regards,

VikramTheGreat

[Juhozu01]

Thank you for the suggestion. I ran the requested PowerShell command:

PowerShell

Get-WmiObject -Namespace root\CIMv2\Security\MicrosoftVolumeEncryption -Class Win32_EncryptableVolume Win32_E

The output confirms that BitLocker is off for my drives. For the C: drive, the result shows:

DriveLetter : C:

ProtectionStatus : 0

Also reinstalled the BIOS as requested and checked tpm is on but its still not showing or is showing the same output as before. Secure boot is also on.

[Juhozu01]

• In my BIOS there is no "Advanced -> Trusted Computing" menu available. I have already confirmed the main TPM settings under the "Security" tab are enabled.

• Unfortunately, the error in msinfo32 ("TPM is not usable, PCR7 binding is not supported") still persists after trying these steps.

• I previously confirmed via PowerShell that BitLocker ProtectionStatus is 0 (Off).

• Given that all suggested steps, multiple BIOS resets, driver reinstalls, and the latest BIOS (F.38) have failed to resolve this, could this be escalated as a potential BIOS bug requiring a fix from HP for this model?

[VikramTheGreat]

Hi @Juhozu01,

Thank you for getting back to me and letting me know about the issue that you are still facing. 

To get you further assistance, we need to take this conversation to a private chat. We're inviting you to a private message to protect your privacy and ensure that any sensitive information remains confidential. 

To access your private message, just click the little blue envelope icon on the upper right corner of your HP Community profile, next to your profile name.  

We're looking forward to helping you resolve this issue! 

Stay tuned, and thanks for your patience! 

VikramTheGreat

HP Support