HP Z440 Workstation TPM 2.0 Upgrade

[NonSequitur777]

Dear Community,

I downloaded the software pack for upgrading TPM 1.2 to TPM 2.0 for my HP Z440 Workstation from here: Infineon TPM Security Update | HP® Support, specifically the link for HP Z440 Workstation under "WORKSTATIONS": https://ftp.hp.com/pub/softpaq/sp87501-88000/sp87753.exe, which is SoftPaq# sp87753. 

You run it as Administrator, and it will create C:\SWSetup\sp87753.  There you can find an instruction pdf file named: "A User Guide for TPM Config and HpqPswd.pdf" which tells us to run "TPMConfig64.exe" as Administrator, and it appears to install TPM 2.0, but it doesn't -check "Security devices": Trusted Platform Module 1.2 in Device Manager.

In order to upgrade from TPM 1.2 to TPM 2.0 on an HP Z440 Workstation, I had to downgrade my BIOS version from 2.62 to 2.59 which you can get here: HP Z440 Workstation Software and Driver Downloads | HP® Support.

I had to delete the "TPMConfig64.log" file (last file as found in C:\SWSetup\sp87753) before installing TPM 2.0.

Ater installing BIOS version 2.59 the TPM 2.0 upgrade did succeed: go to C:\SWSetup\sp87753 and right-click (run as Administrator) on "TPMConfig64.exe".

Now, to reinstall BIOS version 2.62, we see that this BIOS version is not available in the aforementioned HP Z440 Workstation drivers link, only version 2.61.

In order to get version 2.62, you'll have to download it from here: https://ftp.hp.com/pub/softpaq/sp151001-151500/sp151054.exe, which is SoftPaq# sp151054.

Hope this was helpful to some.

Kind Regards,

NonSequitur777

[NonSequitur777 · Accepted solution]

Dear Forum,

OK, apparently the aforementioned steps were incomplete.

When I entered TPM in my lower search button and clicked on Security processor to check things, the "Security processor details" under "Status" both showed "Attestation" and "Storage" as "Not Ready".

Ran this command as Administrator in Powershell:

Enable-TpmAutoProvisioning

This command enables auto-provisioning.

Had to go into BIOS and found TPM to be "Disabled" -enabled it and Attestation and Storage are now both Ready.

Kind Regards,

NonSequitur777