TPM attestation failure

[Germain01]

According to AMD’s official advisory (PA-420), systems running AMD fTPM firmware version 3.*.0.* (where * represents any number) are affected by a TPM attestation error. The issue has been resolved by AMD through TPM firmware updates provided to motherboard manufacturers in 2022. However, some manufacturers have not redistributed these updates.

Based on the output of the command “Powershell.exe -Command Get-TPM”, my system appears to be impacted. The reported information matches the affected configuration:

• ManufacturerIdTxt: AMD

• ManufacturerVersion: 3.92.0.5

• TPM Attestation: ERROR

There is no available workaround for this issue. AMD’s recommendation is to contact the motherboard/system manufacturer to determine whether a corrected TPM firmware or BIOS update is available.

Could you please confirm:

1. Whether a BIOS or TPM firmware update addressing this issue is available for my HP model?

2. Where I can download the update, if available?

[Pallipurath]

Hi @Germain01,

Welcome to the HP Support Community.

Thank you for posting your query.

I am sorry to hear that you have issues with AMD’s advisory PA‑420 and confirms that fTPM firmware versions in the 3..0. range (like 3.92.0.5)** can trigger TPM attestation errors. 

AMD provided fixed firmware to OEMs in 2022, but whether you can apply it depends entirely on your HP system model and whether HP has integrated the patch into a BIOS update. I would request you to please follow the steps:

Check HP Support Site

• Go to HP Support → enter your product name/serial number.
• Look under Drivers & Downloads → BIOS.
• If available, download the latest BIOS update. HP integrates TPM firmware fixes into BIOS releases, not as standalone TPM updates. https://support.hp.com/au-en/products 

Windows & Optional Firmware Updates Current

• Even if HP hasn’t yet released a BIOS update:
• Open Windows Settings → Update & Security → Windows Update
• Click Check for updates
• Expand Optional Updates — sometimes HP firmware/TPM updates are delivered there.
• Install any found updates.

Check BIOS Version

• Press Win + R
• Type msinfo32
• Look for BIOS Version/Date
• Share that with me

Note: Do NOT Clear TPM Before Update:

• If you clear or reset TPM before the correct firmware is applied, you risk losing BitLocker keys and encrypted data. Only do that if you’re prepared to recover data

Take care and have an amazing day!

Did we resolve the issue? If yes, please consider marking this post as "Accepted Solution" and click "Yes" to give us a helpful vote - your feedback keeps us going!

Regards

Pallipurath.