I recently upgraded my CPU and reinstalled Windows 11. Now, my Infineon TPM module is failing attestation because of a vulnerable firmware issue. I'm wondering if I can just switch to using firmware TPM (fTPM) and remove the module, or if there's a way to update the existing module instead. Do I need to buy a new TPM module altogether? Here's my setup: CPU: 9950X3D, Motherboard: Asus X670E Pro Wifi, RAM: 64GB G.Skillz 6000MHz, Storage: Samsung 990 Pro, GPU: Gigabyte RTX 5080.
3 Answers
If you're considering fTPM, it shouldn't be an issue. Just keep in mind that you'll need access to your BitLocker key, and if you've been using Windows Hello with a PIN or fingerprint, you'll need to log in with your regular password instead. If your old TPM module is still connected, it should be fine, and you can reset your PIN once you’re in.
One simple fix could be to update your system's BIOS. Sometimes that resolves issues with TPM attestation, especially after hardware upgrades. However, be cautious with beta versions; use a stable release if you’re unsure. Since you mentioned you’re not thrilled about running a beta BIOS, sticking with the latest non-beta version might be wise.
Definitely update your BIOS first! Not having the latest version could be part of the problem with your TPM. The outdated firmware could be creating the attestation failures you're experiencing. Make sure you have a backup before proceeding!
Related Questions
Lenovo Thinkpad Stuck In Update Loop Install FilterDriverU2_Reload