The BIOS did not correctly communicate with the Trusted Platform Module (TPM)

[JPoez]

Hi,

I'm trying to deploy more than 50 NUCs with SCCM.

A lot of NUCS are succesfully deployed but a few others aren't.

An error occurs during the last step of the sequence: Enable Bitlocker.

2150694914: The BIOS did not correctly communicate with the Trusted Platform Module (TPM). Contact the computer manufacturer for BIOS upgrade instructions.

Manually:

When i try to enable Bitlocker manually from Windows, the following error is shown: The BIOS did not correctly communicate with the Trusted Platform Module (TPM).

unreliable Workaround:

The problem goes (not always) away after disabling and enabling UEFI BOOT and SECURE BOOT, followed by Clear Secure Boot Data.

Its possible that the NUCs were previously deployed with bitlocker, but i can't verify this.

How can i prevent this error in the future, and upcoming deployments?

Thanks in advance,

Jerome

[idata]

Thank you very much for contacting the Intel® Communities Tea, jerome .poeze.

For me to assist you better, can you please provide me with the model of the NUC(s) and the BIOS version installed? Additionally, please make sure the TPM is enabled in the BIOS Settings.Antony S.

[JPoez]

Hi Antony,

Thank you for responding.

The model i'm talking about is NUC7i3DNH with BIOS Version 0040 - DNKBLi30.86A.0040.2018.0315.1529

TPM is enabled in BIOS.

We have more NUCS in stock without this particular problem.

a quick comparison between a faulty and good one did not give any results.

Jerome

[idata]

Thank you very much for your reply, jerome .poeze.

Please test these steps on one of the NUCs that this error is shown:1. Download the 0040 BIOS version by clicking https://downloadmirror.intel.com/27625/eng/DNi30040.bio here.2. Complete a BIOS recovery using the following instructions: https://www.intel.com/content/www/us/en/support/articles/000005532/mini-pcs.html https://www.intel.com/content/www/us/en/support/articles/000005532/mini-pcs.htmlPlease share with us the results.Antony S.

[idata]

Hello, jerome .poeze.

I would like to double check if you were able to perform the troubleshooting steps that I attached to the post above and the results.Antony S.

[JPoez]

Antony,

Due other projects i couldn't respond earlier,

I tried the following steps.

1. Downloaded the .bio file
2. Bios Recovery/Update with USB stick
3. Tried to enable bitlocker
4. The same error:

The BIOS did not correctly communicate with the Trusted Platform Module (TPM)'

[idata]

Hello jerome.poeze,

Thank you for your response,As I understand, the problem still persists, even after trying to update/recover the BIOS. I would actually like to have more information so, I will actually need you to provide me with screenshots or pictures of the error in question showing on screen. Also, I would like you to try the following:1 - Access the BIOS and put it back to defaults.2 - Turn off the TPM and restart the system.3 - Access the BIOS again and turn the TPM on. 4 - Attempt to continue with the Bitlocker again.I hope this helps.Regards,David V

[JPoez]

Hello David,

I tried all of the steps as you described.

To be sure:

"2 - Turn off the TPM and restart the system."

I disabled the option "Intel Platform Trust technology" under Security tab.

is that what you meant?

I've added three images:

1. Notification_TPMisReady.jpg : screenshot of add-in tpm.msc showing a notification that TPM is ready for use.
2. TPM Error_WhenEnablingOnC.jpg: a screenshot of the error that is being shown when trying to enable bitlocker on C:
3. tpmVersion.jpg: screenshot of add-in tpm.msc showing the detected versions of TPM(PTT)

Thanks in advance for your help,

Jérôme

[idata]

Hello jerome.poeze,

Thank you for your response.I would like to try something different now. I want to check and see if this issue is related to the current BIOS version that is being used so we are going to attempt to roll back the version by downloading the ".bio" file from the link below: https://downloadcenter.intel.com/download/27175/BIOS-Update-DNKBLi30-86A-?product=122498 https://downloadcenter.intel.com/download/27175/BIOS-Update-DNKBLi30-86A-?product=122498Once it is downloaded, you can follow the steps below:1 - Transfer the .BIO file to a flash drive.2 - Restart the system 3 - Press the appropriate "F" button to access "BIOS update".4 - Select the USB flash drive.5 - Allow the process to complete.Once the process is completed, please reboot the system and try to use the bitlocker. Make sure to have the TPM on the BIOS turned ON. I hope this helps. Regards,David V

[JPoez]

Hi,

When i try to update the bios, the following error is shown: incompatible bios update. Update aborted.

Do i need another version?

Jerome

[idata]

Hello jerome.poeze,

Thank you for your response.Following the same steps I have provided before, please try with this BIOS version:https://downloadcenter.intel.com/download/27561/BIOS-Update-DNKBLi30-86A-?product=122498 https://downloadcenter.intel.com/download/27561/BIOS-Update-DNKBLi30-86A-?product=122498Let us know the outcome please.Regards,David V

[idata]

Hello jerome.poeze,

I am following up with your case and see that we have not heard back from you.Were you able to try with the provided BIOS version?If you need more assistance do not hesitate to reply.Regards,David V

[jsmit68]

I thought NUC7i3DNH mentioned in this topic does NOT even have TPM ?

https://ark.intel.com/products/122498/Intel-NUC-Kit-NUC7i3DNHE https://ark.intel.com/products/122498/Intel-NUC-Kit-NUC7i3DNHE

BIOS update is not going to help ?

[idata]

Hello jerome.poeze,

Thank you for your response.I understand, however, it is possible that the BIOS is the one at fault when it comes to communicating between them. Please test it if possible and then try to use the system normally to see if there is any problem with that BIOS version installed.Regards,David V

[idata]

Hello jerome.poeze,

I am following up with your case and see that we have not heard back from you.Were you able to change the BIOS version? If you need more assistance do not hesitate to reply.Regards,David V