I'm having trouble with a fleet of Lenovo ThinkBooks running Windows 23H2. Despite the Device Manager showing that the Trusted Platform Module (TPM) is functioning normally, I'm seeing two error messages in the event logs related to TPM: one indicates there's an issue that might affect applications relying on TPM services, and the other suggests a non-recoverable error that stops TPM services like data encryption from functioning. I'm wondering if this is indicative of a hardware fault, how I might prevent it from happening, and if anyone else is experiencing the same issue. Any insights or advice would be appreciated!
3 Answers
It sounds like a common issue with ThinkBooks using 23H2 and Autopilot. The TPM might appear to work fine in Device Manager but still log errors if the firmware and Windows versions are mismatched. First, I recommend running a System Update to ensure all Lenovo drivers and firmware are up to date. Also, check for Windows updates, especially any optional driver updates, as some changes related to TPM were introduced in 23H2. If you want to try, you can reinitialize the TPM from Windows Security settings, but make sure to back up any keys as that will reset them. If errors persist after all that, it might indeed be a hardware issue needing Lenovo's attention for RMA.
Definitely reach out to Lenovo support, though I've heard they might redirect you to Microsoft. It’s frustrating, but sometimes they have hotfixes that aren't widely known. Just make sure you have all the latest firmware updates installed. The System Update tool should help with that.
Have you looked into whether your TPM chip has any vulnerabilities? I faced a similar issue with self-deployed Autopilot profiles failing due to TPM problems that weren't resolved with regular Lenovo updates. You might need specific firmware for your TPM chip model, especially depending on how you’re deploying your system. Just a thought, but it could be worth investigating further!
I did try contacting them; they were not super helpful. I'm going to keep checking for updates and hope that resolves things.