Questions tagged [tpm]

A Trusted Platform Module (TPM) is a secure co-processor that provides cryptographic operations and stores system integrity measurements.

Filter by
Sorted by
Tagged with
0 votes
1 answer
1k views

qemu - win11: this PC can't run Windows 11

When trying to execute the setup the setup stops after selecting the os type with the following result: "this PC doesn't meet the minimum system requirements to install this version of windows. ...
user avatar
0 votes
0 answers
95 views

Active Directory migrations and profile security translation (something's going wrong)

This is a general post not seeking a technical resolution to a precise problem. I just want to warn industry colleagues. My career focus has been on AD for 20 years. The precise niche I concentrate on ...
user avatar
0 votes
0 answers
293 views

Intune Hardware Inventory not recognizing TPM in MSI Motherboard, but Bitlocker is running

I'm running Windows 10 10.0.19043.1237 on an MicroStar Z590-A PRO (MS-7D09) motherboard, where I recently installed a TPM. I can confirm that Bitlocker is running and providing full disk encryption, ...
user avatar
  • 153
0 votes
1 answer
33 views

On Windows how to restrict access to a Self-Encrypting-Disk partitiion to a specific service

I am setting up a server in an industrial environment that will have a service that injects security assets into a PCB. I want the server to store these assets on a self encrypting disk where one ...
user avatar
0 votes
1 answer
109 views

Bitlocker Auto-Unlock C drive with TPM

I wanted to enable auto-unlock on C drive with TPM. When I click on enable bitlocker on C Drive, it shows me only 2 options Insert a USB drive Enter a password I do not see any option which says ...
user avatar
0 votes
2 answers
201 views

Resetting the TPM module on my motherboard?

I've got a TPM set up on a motherboard, but the motherboard has now been swapped, and the HDD is still the same. Would like to basically reset everything to factory defaults, but the HDD is encrypted ...
user avatar
  • 111
0 votes
1 answer
298 views

Initialize TPM virtual smart card in Google Cloud VM running Windows Server

After setting up a Windows Server with a vTPM (see https://cloud.google.com/blog/products/gcp/security-in-plaintext-use-shielded-vms-to-harden-your-gcp-workloads) in Google Cloud VM and accesing to it ...
user avatar
4 votes
1 answer
661 views

BitLocker on Hyper-V Server 2019 - Failed - The system cannot find the file specified

To start with, I want to be clear that this is on "Hyper-V Server 2019" (free headless hypervisor) and not "Windows Server 2019" with the Hyper-V role installed. I've been banging ...
user avatar
  • 303
0 votes
2 answers
67 views

Bitlocker my LAN

I have a Windows Server 2012 R2 LAN that is working great. I recently have been given the task to encrypt the data at rest. I would like to use bitlocker, but all the documentation is for ...
user avatar
4 votes
0 answers
118 views

Bitlocker - mainboard exchange won't require recovery password - why?

A mainboard died. It was exchanged for the same board type (same bios and config, as well, also a new CPU but of the same type). The hard drive is encrypted with bitlocker (on Win10 Pro v1903) and I ...
user avatar
1 vote
0 answers
701 views

Optional TPM Key Attestation in AD Certificate Services

We have a range of Windows 10 computers in our estate - some with no TPM chip, some with TPM 1.2, and some with TPM 2.0. I want to configure a certificate template to optionally perform TPM Key ...
user avatar
  • 11
1 vote
0 answers
62 views

making use of self encrypting SSD

Is something special needed? It is in a supermicro server having a AOM-TPM-9670V-S TPM 2.0 and a Broadcom/Avago MegaRAID 9361-24i card. Trying to use some Seagate Nytro SAS self encrypting SSD's; ...
user avatar
  • 755
8 votes
2 answers
10k views

Trusted Platform Module (TPM) versions 1.2 vs 2.0 and header number of pins

I am trying to understand the TPM header on a motherboard I have, which is an Asrock "H170m Pro4" It has a TPMS1 header on the motherboard, and it has 9x2 pins with 1 missing. In searching the web,...
user avatar
  • 755
2 votes
0 answers
110 views

How can I see if Windows is refusing to trust a TPM?

I've been fighting with my motherboard's manufacturer to get a TPM I bought from them to work. In UEFI/BIOS I can see the TPM and set its state to enabled, but in tpm.msc it just reads that no ...
user avatar
  • 224
1 vote
1 answer
706 views

Bitlocker not auto-unlocking C: drive on server 2008 R2

Here's the scenario. We'got a Dell PE T110 (I know, I know), that we've enabled Bitlocker via TPM. On reboots, it asks to re-enter the bitlocker key, and we have no idea why it's not auto-unlocking. ...
user avatar
1 vote
0 answers
383 views

Bitlocker on Hyper-V server

I have installed Hyper-V server on my new machine and then I added the Bitlocker function and initialized TPM. Now, I am trying to enable Bitlocker on the HDD. I need: encryption key saved on TPM ...
user avatar
  • 149
4 votes
0 answers
719 views

Encrypt disks using SED and store keys in TPM?

I'm buying servers lately and all of them have disks that support TCG Opal full-disk encryption (aka SED). What I'd like to do is: Store data encrypted-at-rest on the disks (NVMe & SAS). Not be ...
user avatar
  • 307
0 votes
1 answer
563 views

Accidentally cleared TPM on BitLocked computer

One of my technicians was supposed to image a computer that has BitLocker enabled. He didn't know the access pin and instead inserted a Dell boot disk to do a soft-restore (keeping all of the clients ...
user avatar
3 votes
1 answer
14k views

How do I identify which bitlocker protector is active?

BitLockerVolume -MountPoint C).KeyProtector I see multiple RecoveryPassword key protectors, how do I know which one is active? If I pull the HDD and plug it into another machine its going to ask me ...
user avatar
  • 3,979
3 votes
2 answers
5k views

Reason for TPM lockout

We have several Surface Pro 3 devices deployed with BitLocker enabled in TPM + PIN mode. The devices have a TPM 2.0 chip and are running Windows 8.1 Pro. We have an issue where users are occasionally ...
user avatar
  • 1,802
2 votes
1 answer
838 views

how do I view current tpm owner in windows?

How do I see if a TPM owner has already been set? All see are examples of how to clear the TPM, reset owner password, change owner. I just want to see if the owner is set and possibly who it is set to....
user avatar
  • 3,979
0 votes
1 answer
2k views

Do any hypervisors support vTPM?

I am trying to use vtpm to provide remote attestation for VMs, but I do not know what hypervisors support vtpm. Does anyone know?
user avatar
1 vote
1 answer
847 views

Can't Enable Bitlocker

Why not?! How can I find out why not? I recently enabled Bitlocker without TPM in our domain controller: Update Thanks to Greg's 2nd comment I've discovered that I need a basic disk: C:\Windows\...
user avatar
0 votes
1 answer
684 views

McAfee Drive Encryption issues with HP Elitebook 755 G2

Hi all (Sorry if this isn't the right forum to post on), I have a slightly frustrating issue involving a small collection of HP laptops and McAfee Encryption. We can encrypt the laptops absolutely ...
user avatar
1 vote
1 answer
2k views

Bitlocker without TPM on Hyper-V 2012 r2 from the command line?

I know that Bitlocker can be used from a Hyper-V Server 2012 r2 install. And I know that it can be done on a machine that lacks a TPM chip. The problem is that all of the examples I've found depend on ...
user avatar
  • 1,150
5 votes
1 answer
5k views

How can I encrypt my SSD but still boot unattended (linux)? [closed]

I have a system that displays video from a camera feed with an overlay, and it must boot without any user intervention (the quicker the better). However, these systems will be in the hands of ...
user avatar
  • 151
1 vote
1 answer
12k views

Can't store TPM information in AD

I am attempting to use GP to store TPM information in AD. I have verified that the schema contains the proper object property, and verified that the property and the ACE is present on the given ...
user avatar
  • 1,825
2 votes
2 answers
2k views

BitLocker - No TPM & No Flash Drive

I have done some research on using BitLocker in an environment where the machines do not have a TPM and it appears you will need to utilize a Flash Drive for it to work properly. This seems to be the ...
user avatar
10 votes
2 answers
19k views

How to enable BitLocker with no prompts to the end user

I have configured BitLocker and TPM settings in Group Policy such that all the options are set and the recovery keys stored in Active Directory. All our machines are running Windows 7 with a standard ...
user avatar
  • 1,854
2 votes
2 answers
2k views

Windows 8.1 TPM ownership on Server 2008 R2 schema - not to spec?

My organization is running AD DS on Server 2008 R2 schema. Already a bad start, I know, but let's pretend that's impossible to change. In our default domain policy, we have the following setting ...
user avatar
  • 203
2 votes
1 answer
478 views

Using virtual smart card for server-side keys?

Does anybody know if it's possible to store private keys, belonging to service account or computer account, on Windows 8 VSC (virtual smart card)? As far as I understand, requirement for 8-symbols (...
user avatar
0 votes
1 answer
55 views

How to setup a platform with TPM? [closed]

I am trying to learn about TPMs. I would like a machine with a TPM. I understand that this is a chip on the motherboard? Is a TPM something that you can install or is it something that comes soldered ...
user avatar
9 votes
2 answers
20k views

TPM had to be reintialized: Does a new recovery password have to be uploaded to AD?

Some way some how, a user's machine couldn't get read the bitlocker password off of the TPM chip, and I had to enter the recovery key (stored in AD) to get in. No big deal, but once in the machine, I ...
user avatar
  • 5,521
1 vote
1 answer
314 views

Upgrade Trusted Platform Module (TPM)?

I have some systems that I am unable to enable Bitlocker on. The TPM wizard reports that the version of the TPM is inadequate to function with bitlocker. Is it possible to upgrade a TPM to 1.2?
user avatar
  • 927
7 votes
2 answers
7k views

How to detect Dell TPM from inside Windows?

I need to know whether my server has TPM installed. It is located 10000 miles away from me so going there to look at the BIOS is not an option. It is also not anyhow described on the Dell website nor ...
user avatar
7 votes
2 answers
4k views

Approaches for Linux server disk encryption

What are the approaches available for fully encrypting a disk on a remote server (say, colocated in a datacenter)? On Windows, we can just turn on Bitlocker with a TPM. Then the server can reboot, and ...
user avatar
  • 1,749
2 votes
1 answer
230 views

Trusted Platform Module and authenticating a PC to a remote server

Can TPM be used to authenticate the computer to a remote server? Is there any recommended reading material for that topic? How can I use TPM to protect my application from being cloned to another PC?
user avatar