Question Do I have a TPM Issue?

[very_452001]

Hello,

In Windows 11 Pro > Device Security, there's a issue where the displayed green ticked Security Processor keeps on disappearing and reappearing again like every 5mins or so which is strange. Is it suppose to stay on constantly without disappearing? When it does appear I click on it, then I click on Security Processor Troubleshooting and the results are displayed with the following error 80090016 message:

"Device health attestation isn't supported on this device. Clearing your TPM might help enable it."


My Specs are:

- MSi A520M-A PRO Motherboard (with the latest Bios Uefi version)
- AMD Ryzen 5 5600 Processor

Questions are:

Does my PC support TPM ver 2.0 as a minimum requirement to run Win 11? Windows 11 Pro loads fine with no probs apart from the TPM issue already mentioned above so I assume my PC must support it right, however if that's the case then why I am having the TPM issue stated above saying not supported on this device?

What it is I want to use Bitlocker however if the above issue still persists then will Bitlocker give me probs when using my PC? The last thing I want is to use Bitlocker to encrypt my drive then I get locked out of my PC because there's a intermittent issue with my TPM you know what I mean.

Is it best to fix this TPM issue within windows or within the Bios Uefi and if Bios then how do I do it in MSi Bios? If I do Clear TPM within windows then will I risk being locked out of my PC or risk losing my Data on my PC?

Or is this a known common issue with this Msi motherboard or with the Windows OS where I cant do anything to fix it until they release a update?

Cheers,

 

[hotaru.hino]

Regarding "Device Health Attestation", it appears it's for a corporate environment. It's not necessary to run on a private PC. See

• https://answers.microsoft.com/en-us...-on-this/25f08714-0b57-4e43-8425-f54edfd7f540
• https://learn.microsoft.com/en-us/windows-server/security/device-health-attestation
• https://learn.microsoft.com/en-us/mem/configmgr/core/servers/manage/health-attestation
• https://www.oreilly.com/library/view/microsoft-system-center/9781785881206/ch07s06.html

If you really want to try to fix this by doing as it suggests, I recommend reading https://learn.microsoft.com/en-us/w...initialize-and-configure-ownership-of-the-tpm

 

[Dark Lord of Tech]

How to Enable TPM on MSI Motherboards Featuring TPM 2.0

Microsoft recently announced Windows 11 and one of its system requirements is TPM 2.0. Thus, many people are now asking questions like “does my PC support TPM 2.0?” or “is a discrete TPM 2.0 module mandatory for installing Windows 11?”

www.msi.com

 

[very_452001]

How to Enable TPM on MSI Motherboards Featuring TPM 2.0

Microsoft recently announced Windows 11 and one of its system requirements is TPM 2.0. Thus, many people are now asking questions like “does my PC support TPM 2.0?” or “is a discrete TPM 2.0 module mandatory for installing Windows 11?”

www.msi.com

Hi yes already enabled in Bios however issue still persists. Please advise.

 

[very_452001]

Regarding "Device Health Attestation", it appears it's for a corporate environment. It's not necessary to run on a private PC. See

• https://answers.microsoft.com/en-us...-on-this/25f08714-0b57-4e43-8425-f54edfd7f540
• https://learn.microsoft.com/en-us/windows-server/security/device-health-attestation
• https://learn.microsoft.com/en-us/mem/configmgr/core/servers/manage/health-attestation
• https://www.oreilly.com/library/view/microsoft-system-center/9781785881206/ch07s06.html

If you really want to try to fix this by doing as it suggests, I recommend reading https://learn.microsoft.com/en-us/w...initialize-and-configure-ownership-of-the-tpm

Hi just to Confirm I will have no issues with using Bitlocker on a Private PC then?

 

[hotaru.hino]

Hi just to Confirm I will have no issues with using Bitlocker on a Private PC then?

From what I can gather with the links I posted, you should be able to. But make sure any data you have in the drive you want to keep is backed up somewhere.

 

[very_452001]

Hi coming back, I did some research on google and come to this:

View: https://www.youtube.com/watch?v=ioK8AWuQCyM


YouTube saying its a known bug with AMD & Windows 11. Plus Bitlocker may have problems due to attestation not working. My options are:

- Clear the TPM via Windows
- Clear the TPM within the Bios Uefi
- Do nothing and wait for the patch for the bug

Which is safer, clearing the TPM via windows or within the Bios Uefi itself?
Or is best to do nothing and wait for the patch to be on the safe side?

Thanks,

 

[hotaru.hino]

Hi coming back, I did some research on google and come to this:

View: https://www.youtube.com/watch?v=ioK8AWuQCyM


YouTube saying its a known bug with AMD & Windows 11. Plus Bitlocker may have problems due to attestation not working. My options are:

- Clear the TPM via Windows
- Clear the TPM within the Bios Uefi
- Do nothing and wait for the patch for the bug

Which is safer, clearing the TPM via windows or within the Bios Uefi itself?
Or is best to do nothing and wait for the patch to be on the safe side?

Thanks,

Any of them will likely work, but the question is whether or not your data is safe. i.e., will this require you to reinstall the OS or something?

If it were me, I'd do what you listed in order, after having all the important data I want on the drive backed up.

 

[very_452001]

Any of them will likely work, but the question is whether or not your data is safe. i.e., will this require you to reinstall the OS or something?

If it were me, I'd do what you listed in order, after having all the important data I want on the drive backed up.

Okay is clearing the TPM via windows or within the Bios Uefi the same thing?

 

[hotaru.hino]

Okay is clearing the TPM via windows or within the Bios Uefi the same thing?

It should do the same thing.