HomeBlogUpdate HP TPM Firmware 1.2 to 2.0 using SCCM and HP TPM.. Upgrading TPM from 1.2 to 2.0 has been a recommendation for the past few years, but apart from increased security, there hasn’t been a practical reason why you would need to update.
But on Friday, June 25th, 2021, everything changed when Microsoft announced Windows 11 and the requirement of TPM 2.0.
Most computers released within the past 3 years should have TPM 2.0. Some older machines might have TPM, but TPM 1.2. In those cases, the TPM firmware needs an update to 2.0, which this blog post covers. This blog post covers the TPM chip and how to do a firmware update from TPM 1.2 to TPM 2.0 for HP machines using HP TPM Configuration Utility and SCCM. Note that a prerequisite for everything in this blog post is that enable TPM in the HP BIOS. TPM 2.0 has been around since 2013, but since July 28, 2016, vendors are required to provide their machines with TPM 2.0.
The Trusted Platform Module (TPM), is a hardware component on the motherboard, developed by Intel, providing physical-level security for Windows 10.
TPM 2.0 is now a requirement for Windows 11. The TPM chip is required for features such as:. The only feature that I know of that requires TPM 2.0 is Device Encryption (Not Bitlocker).
TPM 2.0 was also required for Credential Guard in Windows 10 1507, but this is no longer the case. You can go to all machines in your environment, enable TPM in BIOS, and upgrade them to TPM 2.0.
How to do a HP TPM update from 1.2 to 2.0 using HP TPM Configuration Utility
Unfortunately, this is no way of working in an enterprise environment. This blog post describes how to upgrade the TPM chip firmware from 1.2 to 2.0 for HP machines using Microsoft Endpoint Manager (SCCM) and HP TPM Configuration Utility.
If you are interested in downgrading TPM from 2.0 to 1.2, refer to my other blog post. TPM 2.0 adds additional security benefits compared to TPM 1.2. Read more about it on Microsoft Docs. Here you can find a list of HP laptops with TPM 1.2: https://support.hp.com/bg-en/document/c05381064 .
You can verify the current TPM firmware version on the device:.
Windows Security settings in Windows 10.
The different version properties on the chip are:.
Start an elevated Powershell window and use the following Powershell command:.
The last alternative is by using TPM.msc.
In the below sections, I reference some BIOS settings that are to be automatically configured.Please refer to my blog post on How to use HP BIOS Configuration Utility to set BIOS settings to read about how I do this.
In the blog post above, you will learn how to enable TPM, a prerequisite for following this blog post.
Restart Computer (WinPE)
The best way to update the TPM firmware is by using TPM Configuration Utility. You can retrieve the latest version through the HP Image Assistant (HPIA). Once installed, select the model you want to update TPM from 1.2 to 2.0 and download TPM Configuration Utility through the tool.
Do NOT download the HP TPM Configuration Utility through any other sources, since you might not get the latest version!!
. Place the source files on a share accessible by Microsoft Endpoint Manager (SCCM).
Select Create Package in the Microsoft Endpoint Manager (SCCM) console.
Give the package a name and browse to the UNC path of the source files. Select Do not create a program. Complete the wizard. In this example, we will run the TPM Upgrade steps in the Operating System Deployment Task Sequence.
It is, however, possible to run an independent Task Sequence with these scripts. To use the correct firmware, the TPM Configuration Utility will need to know the Manufacturer version of the TPM script.