-1

Many TPM issues are reported by users in various online forums. One issue is the TPM being found in the operating system or BIOS without the TPM being useable (e.g. TPM shows in Windows 10 Pro Device Manager but BitLocker cannot be used).

A fail safe way to identify the presence of a TPM in a computer is to physically identify it on the motherboard but how does one do this?

For some motherboards the TPM is a small chip that is added to a slot and many examples are commercially available.

However, in other motherboards the TPM is an integral part of the motherboard. The question is how are these identified? In the photo we can see the TPM area on a HP 290 G2 SFF motherboard (86E9 Milton). Should there be a chip here? Is the TPM area empty? Or is this in fact what an integrated TPM looks like?

enter image description here

Improve this question
7
  • 2
    "Should there be a chip here?" - Yes "Is the TPM area empty?" - Yes; Any TPM functionality is being handled by the fTPM capability of your processor. TPM support isn't required for BitLocker. It does not appear that the machine in question has a discrete TPM. FYI: A discrete TPM is fairly large.
    – Ramhound
    Jun 7 at 15:53
  • the TPM area is empty -- point taken how can I be sure fTPM is active? Can there be a TPM in a different area on the motherboard? physical TPM isn't required for Bitlocker but it has its advantages. In my example, TPM is showing in UEFI and (in Windows 10) Device Manager but not TPM.msc ... hence the need for a physical check to ensure TPM is present
    – Ad Astm
    Jun 7 at 16:21
  • To answer the original question it would be useful to have a photo of an integrated TPM chip by way of comparison to the above photo with the chip missing
    – Ad Astm
    Jun 8 at 14:45
  • That is a tall order since HP likely does not sell that model with a dTPM.
    – Ramhound
    Jun 8 at 15:11
  • Perhaps, but the original question does not depend on HP. I think with a photo of an integrated dTPM the original question has all the info it needs for a complete answer.
    – Ad Astm
    Jun 9 at 9:22

4 Answers 4

Reset to default
1

There is no universal, physical method to check if TPM chip is present. This functionality may be handled by:

  • chips in different cases and with different writings on them (not always mentioning "TPM")
  • physically integrated as part of a "random" chip on motherboard (network controller, southbridge, etc.)
  • software handled by CPU (as part of motherboard firmware)

In every option there is significant risk of omitting presence of a chip on physical inspection (even if you have another example on picture). And last option can be differentiated only in logic way.

Also, whole area is not normalized at all. Ie.: Microsoft didn't made any statements about suggested way TPM should be handled: https://learn.microsoft.com/en-us/windows/security/information-protection/tpm/tpm-recommendations#discrete-integrated-or-firmware-tpm

If you want to know if TPM is available on a motherboard, you have to check for TPM presence in BIOS (and later in system) or ask manufacturer (about this specific S/N, that would also answer a question if TPM should be available). However, presence of empty place for TPM is hard clue that TPM is probably not present (unless BIOS tells you otherwise, in such case, I would trust it ;) ).

As for examples of TPM chips, there is small collage: enter image description here

Improve this answer
1

Look in Device Manager, Security Devices:

That will tell you if you have TPM, what version it is, and if the TPM chip is working.

If there is no TPM entry under Security Devices, then you do not have one.

I regard this as the best way to determine the presence of TPM.

Improve this answer
12
  • 5
    I would think just running tpm.msc is a better way, to determine if the system has it's TPM configured in a working state?
    – Ramhound
    Jun 7 at 15:57
  • 2
    You should also look in your UEFI/BIOS menu to find out if the TPM is enabled in the first place. It being disabled in firmware may hide it from the operating system.
    – Mokubai ♦
    Jun 7 at 16:01
  • 1
    Even if your processor supports fTPM, the firmware on the motherboard has to also support it, otherwise you can't enable it.
    – Ramhound
    Jun 7 at 16:09
  • In my example, TPM is showing in UEFI and (in Windows 10) Device Manager but not TPM.msc ... hence the need for a physical check to ensure TPM is present
    – Ad Astm
    Jun 7 at 16:26
  • If in Device Manager, then you have the chip. DM will tell you what version.
    – John
    Jun 7 at 16:27
0

The TPM 2.0 chip should be part of this motherboard, unless you live in a country where it's not allowed, or if this computer was originally sold with FreeDOS, in which case it will not be available.

The article Enabling the Trusted Platform Module has the following method for enabling the TPM in the BIOS. If the described BIOS settings do not exist in your computer, then you have no TPM of any kind (chip or CPU).

  • During the server startup sequence, press the F9 key to access System Utilities.
  • From the System Utilities screen, select System Configuration > BIOS/Platform Configuration (RBSU) > Server Security.
  • Select Trusted Platform Module Options and press the Enter key.
  • Select Enabled to enable the TPM and BIOS secure startup. The TPM is fully functional in this mode.
  • Press the F10 key to save your selection.
  • When prompted to save the change in System Utilities, press the Y key.
  • Press the ESC key to exit System Utilities. Then, press the Enter key when prompted to reboot the server.
Improve this answer
9
  • The motherboard or the processor, because the author's screenshot, clearly indicates the TPM does not exist on the motherboard. Since it's an HP motherboard, it most certainly has the ability to enable TPM 2.0, and use the fTPM support through the processor.
    – Ramhound
    Jun 7 at 16:35
  • @Ramhound: The BIOS should be able to see either one (I think).
    – harrymc
    Jun 7 at 16:39
  • 1
    I was commenting on the verbiage of saying there was a physical chip.
    – Ramhound
    Jun 7 at 16:40
  • @Ramhound: Right, my text was not clear enough.
    – harrymc
    Jun 7 at 16:44
  • According to the product specification for the computer whose motherboard is pictured in the original question (a HP 299 G2 SFF) "For Windows 10, Trusted Platform Module (TPM) 2.0 (Infineon SLB9670) -- NOTE: TPM is not supported on machine pre-configured with FreeDOS. In some cases, machines pre-configured with Windows OS might ship with TPM turned off." I have no way of knowing the original state of the machine i.e. if it had FreeDOS, was sold in a country where TPM is illegal, etc.
    – Ad Astm
    Jun 8 at 14:48
0

This answer seeks to bring together some of the information gleaned in the other answers and comments in this post in answering the original question.

  1. A physical examination of a computer’s motherboard is NOT a fail-safe way to determine whether TPM is present, enabled, and recognised in a computer system. TPM functionality may be handled by the CPU and, therefore, not a standalone or “discrete” component capable of being identified by visual examination. However, this does not detract from the presence of a physical TPM component (whether integral, that is, soldered to the motherboard or as an add-on) suggesting that TPM is employed on a computer system.

  2. The photo in the original questions does indeed show an empty area where a TPM chip could have been installed by the manufacturer on the motherboard. However, this does not preclude TPM being installed elsewhere on the motherboard or being employed through the CPU so, again, a physical examination is NOT a fail-safe way to determine whether TPM is present, enabled, and recognised in a computer system.

Additional answers or supplements to this answer may wish to consider the following: supplying a photo of a motherboard with integral TPM present to contrast with the photo in the question.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .