0

New CPU installed BIOS warning

I wanted to see if my PC meets the requirements for Windows 11. The only thing I was missing was TPM, so I enabled fTPM on my X570.

Now when I boot up, I get the following advice:

New CPU installed, fTPM/PSP NV corrupted or fTPM/PSP NV structure changed.

Press Y to reset fTPM, if you have BitLocker or encryption enabled, the system will not boot without a recovery key

Press N to keep previous fTPM record and continue system boot, fTPM will NOT enable in new CPU, you can swap back to the old CPU to recover TPM related Keys and data.

For now, I have just been pressing N and continuing to use Windows 10 with no issues.

But since I don't use BitLocker, should I just press Y so that this thing doesn't bother me any more? Is there any risk in doing so?

No BitLocker

1
1

Yes, if bitlocker is not on, this should be safe to do. Open Settings, type "bitlocker" into the search bar, and click on Manage Bitlocker.

If bitlocker is not enabled for any drive, you can safely proceed.

In the corner, you should see a link to "TPM Administration".

If you answer N to the firmware prompt, you will see "No TPM 1.2 compatible device found" here.

If you answer Y to the firmware prompt, you will see "Ready for use" and a bunch of TPM ownership options.

You can close this window now; it's the best way to make sure things are operating normally without actually enabling/disabling bitlocker.

Answering Y to the prompt will clear the nonvolatile structures the platform firmware has recorded for the fTPM built into AMD Ryzen processors' PSP management core (ARM Trustzone based, not the main AMD64 cores you run windows on) and they should be automatically rebuilt by the firmware as part of the defaults, including Microsoft's default certificates utilized by windows 8/10/11. As far as I know, none of this should apply to Intel based devices, as they rely on real TPM add-on-chips from Infineon and other vendors. Similar prompting may apply, without the "fTPM" nomenclature indicating a platform-embedded TPM "emulation".

For some background, the major difference between TPM 1.2, and TPM 2.0 is field-reprogrammability. TPM 2.0 is essentially software operating on a reasonably standard microcontroller chip, while 1.2 was predominantly built with logic gates and immutable. 1.2 is limited to RSA operations, while 2.0 is capable of AES and Elliptic Curve operations, as well as RSA (Which is no longer recommended).

Hope that helps.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.