Z97 PC mate TPM 2.0 module

[thuw12bd02aa]

I have a perfectly well working PC build on the MSI Z97 PC mate on which I managed to run MSW11 bypassing the TPM 2.0 and secure boot.
But now of course the next gen games want TPM 2.0 and secure boot too and as far as I understood the Z97 PC mate is not set up for that.
It does have a TPM Module Connector and MSI has the TPM 2.0 Module...

But is the TPM 2.0 Module compatible with the Z97 PC mate? And does installing it solve the secure boot too?
Thank you!

 

[Alan J T]

But is the TPM 2.0 Module compatible with the Z97 PC mate? And does installing it solve the secure boot too?
Thank you!

No, it is not. TPM support seems to need an Intel series 8 CPU and up
The TPM for your Board only supports TPM-1.2

 

[citay]

A discrete TPM module is always a waste of money.
If the board is older than 2015~2017, then it isn't TPM-2.0-compatible. It will only know TPM 1.2 internally, and it will only accept TPM 1.2 modules.
If the board is younger than that (on Intel: 100-series chipset and newer), then it already has a firmware TPM 2.0 in the BIOS: On Intel it's called PTT, on AMD it's fTPM.

On these older boards, the best settings for Win11 should be something like such:

Under Settings\Advanced\Windows OS Configuration -> Set Win 8/8.1/10 WHQL Support to [Enabled], Win7 to [Disabled]
Under Settings\Advanced\Integrated Peripherals, set SATA mode to [AHCI]
Under Settings\Boot, any Fast Boot options to [Disabled]
Under Settings\Boot\"Boot Mode Select", set [UEFI]
Under Advanced\PCIe Subsystem, set Above 4G to [Enabled]

Then check if you have Settings -> Security -> Secure Boot.

 

[thuw12bd02aa]

No, it is not. TPM support seems to need an Intel series 8 CPU and up
The TPM for your Board only supports TPM-1.2

Thank you!

 

[thuw12bd02aa]

A discrete TPM module is always a waste of money.
If the board is older than 2015~2017, then it isn't TPM-2.0-compatible. It will only know TPM 1.2 internally, and it will only accept TPM 1.2 modules.
If the board is younger than that (on Intel: 100-series chipset and newer), then it already has a firmware TPM 2.0 in the BIOS: On Intel it's called PTT, on AMD it's fTPM.

On these older boards, the best settings for Win11 should be something like such:

Under Settings\Advanced\Windows OS Configuration -> Set Win 8/8.1/10 WHQL Support to [Enabled], Win7 to [Disabled]
Under Settings\Advanced\Integrated Peripherals, set SATA mode to [AHCI]
Under Settings\Boot, any Fast Boot options to [Disabled]
Under Settings\Boot\"Boot Mode Select", set [UEFI]
Under Advanced\PCIe Subsystem, set Above 4G to [Enabled]

Then check if you have Settings -> Security -> Secure Boot.

Thank you so much for this!
I'll do it asap and hope for the best.
Have a great weekend

 

[RemusM]

I have a perfectly well working PC build on the MSI Z97 PC mate on which I managed to run MSW11 bypassing the TPM 2.0 and secure boot.

Your CPU does not understand the TPM 2.0 protocol.
It's limited to TPM 1.2 protocol.
Also, installing Windows 11 on unsupported hardware (using all kind of hacks) it's a bad idea anyway.
You'll end up with a system less secure than Windows 10.
So for older hardware the best solution is to keep Windows 10 and to enroll your system to ESU.
It's free for at least one year anyway ...
The entire Windows 11 security is built around TPM 2.0