MS-4462 TPM 2.0 installation?

[ruzicka4613]

Finally got my hands on a MSI MS-4462 TPM 2.0 module. Are there any special instructions for installation? I cannot seem to find any on the MSI website. I already have soft TPM enabled in the BIOS for my Z590 Carbon MB, using the Intel option. Is it as simple as now just plugging in the MS-4462 module, and then nothing else needs to be done? The module will automatically override the current TPM settings?

 

[plutomate]

i think you still need to go into security section and change the security configuration to dTPM rather than PTT, otherwise, you'll still be using the fTPM in CPU.

 

[dvair]

Yep just need to change to dTPM in the Trusted Computing section. If you already have PTT enabled, you don't really need the module at all.

 

[ruzicka4613]

Thank you for the information.

Just curious though....is there any consensus whether a physical TPM chip is better in ANY way to a firmware-based TPM solution? If I were to upgrade to a new motherboard at some point, would having the ability to install the TPM module from the old MB to the new MB have any advantages when transferring hard drives?

 

[citay]

A discrete TPM (seperate module) is in no way better than the firmware TPM (called PTT on Intel) in regards to the Windows 11 requirements. For Windows 11 it simply doesn't matter if you just use the firmware TPM that the board already offers. The ability to take over the dTPM to a new board doesn't matter either, as basically all mainboards of the last 5 years and all boards going forward have an fTPM 2.0 onboard, ready to use. Buying a discrete TPM chip is, in a nutshell, a waste of money.

If you update your BIOS on the Z590 board (which is quite important), the newest BIOS update will actually enable the fTPM/PTT for you. There is nothing else to do to fulfill the Win11 requirements for home use. You might as well return your TPM module.

 

[dch4154502d9]

I have a module installed on my B550-A Pro board but the only thing the BIOS sees is the fTPM of the Ryzen CPU. I thought I needed the module since the board has a header for it. I wonder if I could return it to MSI for a refund.

 

[plutomate]

I have a module installed on my B550-A Pro board but the only thing the BIOS sees is the fTPM of the Ryzen CPU. I thought I needed the module since the board has a header for it. I wonder if I could return it to MSI for a refund.

Maybe you get the wrong module? or you have to change the BIOS item, too.

 

[dch4154502d9]

Maybe you get the wrong module? or you have to change the BIOS item, too.

It's the right module but if I disable the fTPM and choose 2.0 from the BIOS options, it doesn't work. No TPM in Device Manager and BIOS says no module found. Only fTPM will work which is sufficient but I paid MSI $40 for the module and it looks like I don't need it.

 

[Alan J T]

Nope not need but just double check the part number to make sure you not got scammed.

TPM 2.0 (MS-4462)

• CHIPSET
  INFINEON 9670 TPM 2.0 (FW 7.85)
• INTERFACE
  SPI
• DIMENSION
  25 x 20 mm
• PIN DEFINE
  12-1 Pin
• SUPPORTS
  MSI Intel 400 Series and 500 Series Motherboards
  MSI AMD B550 and A520 Series Motherboards
  Windows 10 TPM 2.0

TPM 2.0 (MS-4136)

• CHIPSET
  INFINEON 9665 TPM 2.0 (FW 5.63)
• INTERFACE
  LPC
• DIMENSION
  25 x 20 mm
• PIN DEFINE
  14-1 Pin
• SUPPORTS
  MSI Intel 300 Series Motherboards
  MSI AMD 400 and X570 Series Motherboards

 

[dch4154502d9]

It's the right one and it came from the MSI store. Only the 12 pin one will fit a 550 series board. Why do they put a header on the boards when it's not needed?

 

[RemusM]

Why do they put a header on the boards when it's not needed?

The discrete TPM modules offer better separation and better security compared to the firmware TPM (a BIOS can be hacked).
But for 99% of the Windows 11 users, the firmware TPM is more than enough for security.

 

[dvair]

It's the right one and it came from the MSI store. Only the 12 pin one will fit a 550 series board. Why do they put a header on the boards when it's not needed?

So that they can make an extra $40.00 + dollars.

 

[ruzicka4613]

The discrete TPM modules offer better separation and better security compared to the firmware TPM (a BIOS can be hacked).
But for 99% of the Windows 11 users, the firmware TPM is more than enough for security.

So do YOU use a discrete TPM module? Your opinion is that a discrete module is indeed better than the firmware TPM (even though most would not need that extra security)?

 

[dvair]

I had a module on my old Z370, I bought it before I found out it wasn't really need for Windows 11 as the PTT worked just fine. I left it on the board as it was working fine too and no reason to remove it. My new Z590 board I do not have a module and it is fully Windows 11 compliant.

 

[dch4154502d9]

MSI says they will not take it back because I've had it more than 30 days. Oh well, live and learn I guess.

 

[RemusM]

So do YOU use a discrete TPM module? Your opinion is that a discrete module is indeed better than the firmware TPM (even though most would not need that extra security)?

If you already have it, use it!
If you don't have it, you don't need one for Windows 11.