Re:Introducing Windows 11
by AnIdiotOnTheNet on Thursday June 24, 2021 @01:29PM
(#27620997)
TPM is required? That's great because it gives me a good reason to tell my boss we shouldn't switch to it. What are they thinking with that?
Re:Introducing Windows 11
by saltysallys on Thursday June 24, 2021 @05:38PM
(#27624129)
Maybe to better pin a license to a device? Or because google: https://chrome.googleblog.com/2011/07/chromebook-security-br...
I'm guessing somebody high up in sales is thinking "hey, we're Microsoft -- we're gonna dictate how this is going to go because people aren't going to want to be without the latest version of Windows!"
Smells like Classic Redmond Hubris.
Re:Introducing Windows 11
by breakingcups on Thursday June 24, 2021 @06:35PM
(#27624796)
Well. They're not wrong yet.
Since you're running Ryzen, you can enable firmware-based TPM in your UEFI settings and you should be good to go.
Screenshot of the security processor page: https://i.imgur.com/ZWtq8EO.png
Screenshot of the PC health check: https://i.imgur.com/Rb3eZIc.png
Re:Introducing Windows 11
by neogodless on Thursday June 24, 2021 @01:27PM
(#27620946)
I'll have to check. I know that my Asus Prime X470 Pro lists TPM as "sold separately"; there's a connector on the motherboard, but the module itself is likely not present.
(For example: https://www.bhphotovideo.com/c/product/1237446-REG/asus_tpm_... )
From the manual[1], it is an option under section 3.6.1 AMD fTPM Configuration. It's built into the CPU rather than the motherboard, but the motherboard can provide a separate hardware TPM.
[1]: https://dlcdnets.asus.com/pub/ASUS/mb/SocketAM4/PRIME_X470-P...
Re:Introducing Windows 11
by neogodless on Thursday June 24, 2021 @01:32PM
(#27621041)
Ha I was in that PDF a few minutes ago. I saw "fTPM" but since it didn't list an explanation, I didn't know if it was an included TPM module or something else.
Apparently, my 3yo desktop isn't compatible (Gigabyte Z270X Ultra). I really doubt people will upgrade their hardware just to use Windows 11.
That doesn't sound right, search around in the BIOS for "Platform Trust Technology" or "PTT". If it's disabled, change it to enabled.
Just enabled PTT in the BIOS, but the tool still says my computer is not compatible (but it doesn't tell me exactly why).
Re:Introducing Windows 11
by aarongolliver on Thursday June 24, 2021 @05:05PM
(#27623751)
You probably only have the header on your motherboard, without a tpm module actually plugged in. Mine was like this, and the specs for your motherboard suggest this is also the case for you. You can buy them on online pretty cheap (I got one for $20)
PTT is part of the CPU, no external TPM module is necessary. PTT is Intel's implementation, AMD have something similar called fTPM.
You do not need any external module on machines with fTPM/PTT support (i.e. if you bought it in the last few years).
Re:Introducing Windows 11
by aarongolliver on Friday June 25, 2021 @03:20PM
(#27635120)
You're right! And now I qualify for the win 11 beta. Looks like I got confused between two different security setting pages in the UEFI menu, and had just enabled "the ability for it to use a TPM plugged in to the header" instead of enabling PPT like I thought I was doing.
I guess my Phenom II-based system is SOL. No TPM, not even a connector on the motherboard, and of course it's pre-UEFI.
Oh well, Windows 10 will be the last MS OS to be installed on it, 100% Linux it is.
Until Linux distributions start requiring TPM as well.
However, it looks like many modern systems don't have TPM 2.0 enabled in the BIOS, and will come back with "This PC can't run Windows 11" (including mine - Asus Prime X470 Pro with Ryzen 2700X, 32GB RAM, 1.5TB storage, Radeon RX 5600 XT.)
[0] https://download.microsoft.com/download/1/d/d/1dd9969b-bc9a-...