Windows 11 Question (TPM? -> External TPM Module = Not Mandatory)

Pangolin

Active member
Administrator
Joined
Nov 13, 2015
Messages
79
Note. Below information is based on current latest Microsoft release document (2021/06/25)
Windows Requirement
1624618048576.png

Secure Boot capable (Not necessarily to be enabled)
TPM version 2.0 (fTPM or dTPM) - Discrete TPM card is NOT mandatory when fTPM works


For information of MSI TPM 2.0 card (dTPM)
https://www.msi.com/Motherboard/TPM-20-Module

Test your compatibility with Windows 11
Windows Official Test Tool (Removed by Microsoft)
Alternative: WhyNotWin11
https://github.com/rcmaehl/WhyNotWin11/releases/latest/download/WhyNotWin11.exe

Step to enable relative BIOS options, you can check the video below. (fTPM)

Intel Platform
BIOS\Settings\Security\Trusted Computing\TPM Device Selection
1624618916116.png

AMD Platform
BIOS\Settings\Security\Trusted Computing\AMD fTPM switch
1624618957337.png

For newer PRO series motherboard (Intel 500s or later), security section is not under BIOS\Settings
1625043355450.png

To verify TPM is enabled in windows, press [Windows]+[R] key, and run "tpm.msc". "TPM Management" will show the TPM version of your system.
1625196442301.png


For more detail information, you can visit Microsoft website.
https://www.microsoft.com/en-us/windows/windows-11

TPM 2.0 (fTPM) Compatible Motherboard
This is NOT a Win11 compatible motherboard list, it simply means the motherboard BIOS supports fTPM
Intel
SeriesChipsetCPU Supported
500 SeriesZ590 / B560 / H51010th / 11th Gen
400 SeriesZ490 / B460 / H41010th / 11th Gen
300 SeriesZ390 / Z370 / B365 / B360 / H370 / H3108th / 9th Gen
200 SeriesZ270 / B250 / H2706th / 7th Gen
100 SeriesZ170 / B150 / H170 / H1106th / 7th Gen
X299X299X-series 10000/9000/78xx
AMD
SeriesChipset
500 SeriesX570S / X570 / B550 / A520
400 SeriesX470 / B450
300 SeriesX370 / B350 / A320
TR4 SeriesTRX40 / X399
Link to fTPM BIOS function support motherboard

Unable to boot into operating system once updating to new Windows 11 compatible BIOS
1. Change BIOS\Settings\Advanced\BIOS CSM/UEFI Mode from UEFI to CSM mode
2. Convert storage partition style
3. Change BIOS\Settings\Advanced\BIOS CSM/UEFI Mode from CSM to UEFI mode again
 
Last edited:
Hello friends. I currently have the b550-a Pro Motherboard and a Ryzen 5600x. My fTPM is currently enabled in my bios but tpm.msc application shows no TPM 2.0 devices. There are also no TPM devices showing in my Device Manager. Does this mean i will have to get TPM device to install? If so, does anyone know where i can get one compatible with my motherboard?
 
Hello friends. I currently have the b550-a Pro Motherboard and a Ryzen 5600x. My fTPM is currently enabled in my bios but tpm.msc application shows no TPM 2.0 devices. There are also no TPM devices showing in my Device Manager. Does this mean i will have to get TPM device to install? If so, does anyone know where i can get one compatible with my motherboard?
You should update your bios and amd chipset drivers, then check you have everything set correctly.
 
You don't need a discrete TPM chip for that board, see my post a bit higher up, https://forum-en.msi.com/index.php?threads/windows-11-question-tpm.364320/#post-2066837

Most boards from the last 5-6 years have a firmware TPM or "fTPM", on Intel this is called PTT or "Platform Trust Technology" and can simply be enabled in the BIOS.

There is no major difference in how a dTPM chip and the integrated fTPM works. To Windows, it behaves exactly the same. So it is completely unnecessary to buy a dTPM chip when you have a fTPM.

Here is the Microsoft article again: https://docs.microsoft.com/en-us/windows/security/information-protection/tpm/tpm-recommendations

If you look at that, you will see that Bitlocker also doesn't require a TPM, you can use that already without enabling the fTPM.

But some of os do not have it onboard, Nightblade X2 EU, fine machine for gaming aso, even today, but lucky for os, we can still run Win10 to 2025..
 
Can't even access my Bios on the MPG Z490 MB. I meet all the requirement to install Win 11 but any (I mean it) attempt to get into the Bios failed. I get a black screen even when I use Win 10 recovery mode to start from UEFI or something like that. Anyone else not able to get into your Bios?
 
Before Updating to Latest Windows 11 Compatible BIOS and Windows 11
Make sure CPU and motherboard is on Windows 11 compatible list
MSI compatible motherboard
AMD compatible CPU
Intel compatible CPU

According to Microsoft, both firmware TPM (fTPM) and UEFI BIOS are required for Windows 11. You can manually enable these settings in BIOS or just update BIOS to the version that supports Windows 11.
1634283205938.png

Due to the UEFI requirement of Windows 11, operating system that is installed in CSM mode previously will not be bootable right away with Windows 11 compatible BIOS default settings until you do the following changes.

★★★Before BIOS Update★★★
Perform check the partition style and convert boot device from MBR (CSM compatible style) to GPT (UEFI compatible style) without losing any data
Note.
Still backup important data before conversion

# How to check the partition style of my boot device?
1. Run Command Prompt as administrator
2. Use following command: diskpart and then list disk
3. If there is no * in the Gpt column, it indicates the disk is MBR partition style

# How to convert boot device from MBR to GPT without losing data on the disk?
Run MBR2GPT in Windows OS (version 1703 or later) with Command Prompt
Disk prerequiste
1634284876714.png

1. Run Command Prompt as administrator
2. Input two commands in order:
> mbr2gpt /validate /disk:0 /allowFullOS
> mbr2gpt /convert /disk:0 /allowFullOS

* Disk 0 as boot device
1634283627278.png

3. Reboot System to BIOS and proceed to Windows 11 Compatible BIOS update
4. New BIOS will enable fTPM and UEFI mode by default. Now you can boot to OS and upgrade to Windows 11

Ref.
MBR2GPT - Windows Deployment | Microsoft Docs
 
Last edited:
TPM not working after CPU change

Hi,

I had a 5600X with TPM on and everything was fine, after I upgraded to a 5900X, despite having re-enabled TPM in the BIOS (but no device is detected, not sure if it should), windows does not see it. I already tried many combinations, but nothing works. I have UEFI, Secure Boot, TPM enabled and main OS on a GPT partition. My motherboard is a MAG X570 TOMAHAWK WIFI.
Disclaimer, originally I had a 5900X, but it was defective, so I bought a 5600X to use while waiting for the replacement.

Thanks
 
In case you're on an older BIOS, update to the newest one and do a Clear CMOS afterwards. If you're on the newest BIOS already, try just a Clear CMOS. In rare cases, actually taking out the CMOS battery can achieve a bit more than a Clear CMOS, so you can try that as well.
 
In case you're on an older BIOS, update to the newest one and do a Clear CMOS afterwards. If you're on the newest BIOS already, try just a Clear CMOS. In rare cases, actually taking out the CMOS battery can achieve a bit more than a Clear CMOS, so you can try that as well.
I am on the newest BIOS non beta, I tried clearing the CMOS, both software and hardware (jumper), did not work, I have no ideas :(
 
I would update to the beta BIOS then.

I read the specs and it's listed an added support to win11, but it means that they activate TPM by default, if it's only that is not a great help.
Is there anybody with a 5900X and MAG X570 TOMAHAWK WIFI with TPM working? Because everything was fine with the 5600X, possible that it's bugged only with the 5900X? It would be very strange
 
The changelogs are totally incomplete, they always change way more things, but they only list the one or two most important ones. If you don't try the latest BIOS, you might have no chance of fixing it.
 
Clearing the TPM may have worked as well,

1. Open Settings
2. Privacy and security
3. Windows Security
4. Device Security
5. Security processor details
6. Security processor troubleshooting
7. Clear TPM
 
Clearing the TPM may have worked as well,

1. Open Settings
2. Privacy and security
3. Windows Security
4. Device Security
5. Security processor details
6. Security processor troubleshooting
7. Clear TPM

I tried, but the GUI wasn't even enabled, in fact the TPN was also absent from Devices, so I think the problem was happening at a lower level.
 
Few weeks ago the last available Bios (not beta) available for my MSI MPG Z490 Gaming Edge Wifi was 7c79V19 (E7C79IMS.190) and I flashed it recently as it was displayed as "Windows 11 Compatibility".
Today I checked the available Bios in the support web site and the v19 don't appear anymore. The most recent one is the previous v18 from July 1.
May I know what happened ? Some problems detected in v19?
I speak about this page: https://www.msi.com/Motherboard/support/MPG-Z490-GAMING-EDGE-WIFI#down-bios
 
Today I checked the available Bios in the support web site and the v19 don't appear anymore. The most recent one is the previous v18 from July 1.
May I know what happened ? Some problems detected in v19?

Some problems, yes, you could say that. Not always, but when it happens, it's bad. See !!! Warning: Z490 boards - problem with recent BIOS updates !!!

By the way, once you flashed it successfully as you did, you can stay on it no problem. It's only at the end of the update process where the problem can occur.
 
Last edited:
Few weeks ago the last available Bios (not beta) available for my MSI MPG Z490 Gaming Edge Wifi was 7c79V19 (E7C79IMS.190) and I flashed it recently as it was displayed as "Windows 11 Compatibility".
Today I checked the available Bios in the support web site and the v19 don't appear anymore. The most recent one is the previous v18 from July 1.
May I know what happened ? Some problems detected in v19?
I speak about this page: https://www.msi.com/Motherboard/support/MPG-Z490-GAMING-EDGE-WIFI#down-bios
Buy a lottery ticket as you got lucky lol.
 
Back
Top