Windows 11 TPM Module required

[JohnStarr]

This makes no sense.... htf will the installer differentiate?

Because it detects the difference in hardware installed vs. the requirements the installer has. Simple software design really.

 

[ponder]

This makes no sense.... htf will the installer differentiate?

It checks.

 

[ponder]

According to the Linus video I shared TPM 1.2 would be the requirement for built PCs. OEM PCs/Laptops will however require TPM 2.0

Nope, maybe it changed but the installer on my system specified 2.0 as a requirement.

 

[rambo919]

It checks.

How? With an OEM DB?

Firstly you have OEM's like Mustek that rebrands mobo's notoriously sloppily which will screw the DB.

Secondly... won't it be rediculously easy to just add a loader to the setup that makes it read your OEM mobo as DIY?

 

[Kodi]

Seems MS removed the minimum requirements, for now and for dev purposes.

Video explains what to do. Haven't tried myself, so can't confirm if it is so.

 

[Dolby]

Thanks for the replies.

So if I'm hypothetically looking at one of two processors (I assume the more expensive, albeit it older, is the better one)

Intel Core I5 9600K 6-Core 3.7GHz (4.60GHz Max Boost) Socket 1151 95W Desktop Processor (CPU) - R3,998.00​

Intel Core I5-10400F 6-Core 2.9GHz (4.3GHz Max Boost) Socket 1200 65W Desktop Processor (CPU) - R3,449.00​

As both are recent chips, I'd guess both TPM2.0 ?

 

[ponder]

Thanks for the replies.

So if I'm hypothetically looking at one of two processors (I assume the more expensive, albeit it older, is the better one)

Intel Core I5 9600K 6-Core 3.7GHz (4.60GHz Max Boost) Socket 1151 95W Desktop Processor (CPU) - R3,998.00​

Intel Core I5-10400F 6-Core 2.9GHz (4.3GHz Max Boost) Socket 1200 65W Desktop Processor (CPU) - R3,449.00​

As both are recent chips, I'd guess both TPM2.0 ?

Besides cpu support you also need support in bios. Both those chips are in the win11 support list from what I tell but double check.

Which MBs do you intend pairing with those cpus?

Performance wise they are about the same but if you overclock the 9600k on a Z series MB it will be faster but a Z series MB will also push up the system costs.

Any specific reason you picked those two and not an 11400F or ryzen 5 chip for example?

 

[Dolby]

Besides cpu support you also need support in bios. Both those chips are in the win11 support list from what I tell but double check.

Which MBs do you intend pairing with those cpus?

Performance wise they are about the same but if you overclock the 9600k on a Z series MB it will be faster but a Z series MB will also push up the system costs.

Any specific reason you picked those two and not an 11400F or ryzen 5 chip for example?

I just went to PCint and those amongst the cheapest available

 

[ponder]

I just went to PCint and those amongst the cheapest available

You should shop around and don't just look at the cpu price, look at the total mb/cpu/ram bundle price.

 

[Dolby]

You should shop around and don't just look at the cpu price, look at the total mb/cpu/ram bundle price.

True !

But they are among the cheapest ?

 

[ponder]

True !

But they are among the cheapest ?

For some things, selection is also limited but so are most retailers these days with shortages.

As much as i loath to mention it evetech has the 11400f in stock for 3999. It's a cpu so chances of ever having warranty claims is near nil. Or wait until others get stock.

 

[JohnStarr]

It checks.

Dude is a bit confused there. Normally ALL software checks for prerequisites. Hell, even a cloud platform checks prerequisites before doing anything.

 

[Nod]

Source: https://winbuzzer.com/2021/06/29/windows-11-may-not-require-tpm-2-0-says-microsoft-xcxwbn/

TPM 2.0 is the newest version of the standard, and Microsoft says it is necessary for Windows 11. That means users with machines running TPM 1.2 or no TPM are not invited to the party. However, new documentation suggests TPM may not be mandatory after-all.

Microsoft says it will sometimes make exceptions based on approval:

“Upon approval from Microsoft, OEM systems for special purpose commercial systems, custom order, and customer systems with a custom image are not required to ship with a TPM support enabled,” Microsoft points out in a new document.


This will potentially allow OEMs to build laptops that do not have TPM, provided they seek Microsoft’s approval first.

I suspect there will be workarounds very quickly.

 

[rambo919]

Yes, the unelected M$ deciding what OEMS may or may not build will end very very well...

 

[Arthur]

Yes, the unelected M$ deciding what OEMS may or may not build will end very very well...

You vote with your wallet. Far more effective than the ballot boxes you fantasize about.

 

[rambo919]

You vote with your wallet. Far more effective than the ballot boxes you fantasize about.

Which is why I pirate before I buy.... I prefer to vote in a way that actually matters.

 

[Arthur]

Which is why I pirate before I buy.... I prefer to vote in a way that actually matters.

Ah, ok. So apart from wanting a vote to control other people's produce, you also don't scruple about using other people's property without their permission. You are, er, flexible.

 

[CataclysmZA]

Hi guys,

Not sure if this is the right thread - please move/ignore if this is the case?

I have a ASUS ROG Strix h370-f motherboard (late 2018) - this model motherboard shipped without a TPM module (apparently sold separately) - I simply cannot find said module to buy (local nor via Amazon) - any ideas/sugestions?

The Intel Coffee Lake family is fully supported, so you're in the clear. If you move to Windows 11, you'll receive support until it reaches EOL.

All you have to check is that you have the following enabled:

1. Secure Boot enabled
2. Legacy Boot (or CSM) disabled
3. TPM set to enabled, and if necessary that the version is forced to 2.0
4. Intel PTT enabled (also referred to as fTPM)

ASUS has a guide on this as well: https://www.asus.com/support/FAQ/1046215/

If you sign in with a local account on Windows 11 Pro, the drive does not get encrypted by Bitlocker. If you use a Microsoft account to do so, print and save the Bitlocker key assigned to your account, which you can find here:

Sign in to your account

account.microsoft.com

Just a side note for those testing this out and might be gaming online, I was watching a levelcap video and he mentioned that the insider build is setting off anti cheat software in games.

In COD you get shadow banned and get lobbied with other hackers.
In Fortnite you could get an out right ban from epic.

Other games with anti cheat software would need to be researched etc

I can't confirm this myself so I guess it's hearsay at the moment but proceed with caution

This is correct, because some anti-cheat software makes use of a TPM module's functionality for cryptographic operations. In the current dev build all TPM and HVCI functionality has been disabled for testing purposes. The Beta will probably see these re-enabled in that release.

Anti-cheat software also needs to be updated for Windows 11 because several of them won't like running in a hypervisor environment, and some software using old authentication methods won't work out of the box.

This is also why NVIDIA updated their drivers to allow them to work in a VM without error code 43 popping up.

I saw this :

TPM 2.0 was only released in 2019, suggesting that PCs made prior to that year may be incompatible with Windows 11

Does the TPM module sit on the CPU, or MB, or both ?

I think this will stall new PC purchases right now until it's all sorted . I certainly would be worried to buy something now

TPM 2.0 has been around for ages. Work started much earlier than the current software release, and as a result most PC hardware made after 2014 has TPM 2.0 functionality in some form.

Whether that comes from running an actual TPM 2.0 chip, or combining functions from a TPM 1.2 chip and firmware TPM on the CPU, the outcome is the same.

The biggest issue currently, and one of the reasons why there's a cut-off point for support, is because some TPM solutions will never get updates and they will never fix flaws in the shipping firmware, making the system vulnerable.

This makes no sense.... htf will the installer differentiate?

TPM functionality is exposed in a standard way by the UEFI, and operating systems have the ability to probe the system to see if it supports advanced cryptographic functionality. This has been possible since 2011, the first release of the 1.2 standard.

This is why it's possible on most Linux distros to enable disk encryption during setup, and why Windows will automatically enable device encryption after the OOBE setup is complete.

 

[rambo919]

Ah, ok. So apart from wanting a vote to control other people's produce, you also don't scruple about using other people's property without their permission. You are, er, flexible.

I am not the one that want's control here.....

 

[CataclysmZA]

Thanks for the replies.

So if I'm hypothetically looking at one of two processors (I assume the more expensive, albeit it older, is the better one)

Intel Core I5 9600K 6-Core 3.7GHz (4.60GHz Max Boost) Socket 1151 95W Desktop Processor (CPU) - R3,998.00​

Intel Core I5-10400F 6-Core 2.9GHz (4.3GHz Max Boost) Socket 1200 65W Desktop Processor (CPU) - R3,449.00​

As both are recent chips, I'd guess both TPM2.0 ?

Hypothetically, pick up the 10400F. It's a newer CPU generation, and cheaper. And you probably won't be overclocking. And you'll appreciate the reduced noise levels from the stock fan.

However, I'd wait a bit.

Intel's Alder Lake platform is launching this year in October. That will be 12th-gen Core with DDR5 and PCIe 5.0 support. AMD's Zen 4 should be coming out in early 2022, shortly after the CES announcement.

If you don't end up picking up an Alder Lake platform at that point, at least the 10th Gen chips will be cheaper and DDR4 will also have dropped in price significantly.