HP Z440 Workstation TPM 2.0 Upgrade

[NonSequitur777]

Dear Community,

I downloaded the software pack for upgrading TPM 1.2 to TPM 2.0 for my HP Z440 Workstation from here: Infineon TPM Security Update | HP® Support, specifically the link for HP Z440 Workstation under "WORKSTATIONS": https://ftp.hp.com/pub/softpaq/sp87501-88000/sp87753.exe, which is SoftPaq# sp87753. 

You run it as Administrator, and it will create C:\SWSetup\sp87753.  There you can find an instruction pdf file named: "A User Guide for TPM Config and HpqPswd.pdf" which tells us to run "TPMConfig64.exe" as Administrator, and it appears to install TPM 2.0, but it doesn't -check "Security devices": Trusted Platform Module 1.2 in Device Manager.

In order to upgrade from TPM 1.2 to TPM 2.0 on an HP Z440 Workstation, I had to downgrade my BIOS version from 2.62 to 2.59 which you can get here: HP Z440 Workstation Software and Driver Downloads | HP® Support: look for the "Previous version" option.

I had to delete the "TPMConfig64.log" file (last file as found in C:\SWSetup\sp87753) before installing TPM 2.0.

Ater installing BIOS version 2.59 the TPM 2.0 upgrade did succeed: go to C:\SWSetup\sp87753 and right-click (run as Administrator) on "TPMConfig64.exe".

Now, to reinstall BIOS version 2.62, we see that this BIOS version is not available in the aforementioned HP Z440 Workstation drivers link, only version 2.61.

In order to get version 2.62, you'll have to download it from here: https://ftp.hp.com/pub/softpaq/sp151001-151500/sp151054.exe, which is SoftPaq# sp151054.

Hope this was helpful to some.

Kind Regards,

NonSequitur777

[NonSequitur777 · Accepted solution]

Dear Forum,

OK, apparently the aforementioned steps were incomplete.

When I entered TPM in my lower search button and clicked on Security processor to check things, the "Security processor details" under "Status" both showed "Attestation" and "Storage" as "Not Ready".

Ran this command as Administrator in Powershell:

Enable-TpmAutoProvisioning

This command enables auto-provisioning.

Had to go into BIOS and found TPM to be "Disabled" -enabled it and Attestation and Storage are now both Ready.

SUMMARY:

1.) Download BIOS version 2.59 (look for "Previous version") which is sp140182.exe
2.) Right-click on the sp140182 file and Run as administrator.
3.) This will create C:\SwSetup\SP140182
3.) Format a USB flash drive to Fat32.
4.) Create an HP BIOS flash drive using Rufus.
5.) Copy the BIOS (.bin) file you can find the *.bin file in C:\SwSetup\SP140182\Dos Flash\ onto the flash drive
6.) Insert the USB flash drive in your HP Z440 Workstation.
7a.) Go into BIOS ("Update System BIOS") and select the USB flash drive to install BIOS version 2.59.

7b.) Restart PC
8a.) If you already tried to install TPM 2.0, delete the "TPMConfig64.log" file (last file as found in C:\SWSetup\sp87753) before installing TPM 2.0

8b.) If you haven't downloaded/installed the TPM 2.0 file, do it from here and Run as administrator, which will create C:\SWSetup\sp87753
9.) Run "TPMConfig64.exe" as found in C:\SWSetup\sp87753 as Administrator
10.) Restart PC
11.) Run this command as Administrator in Powershell:

Enable-TpmAutoProvisioning
12.) Restart PC
13.) Go into BIOS and enable TPM.
14.) Download BIOS version 2.62 (sp151054) and install. If necessary, follow step 5 through 7 this time for BIOS version 2.62

Kind Regards,

NonSequitur777