Intel TXT SINIT ACM cannot be loaded

[RichardP]

Hi.

Yesterday, i enabled Intel TXT on Windows 11. However, the "Intel TXT Authenticated Code Module" is listed as "Other Devices" and detected as "Unknown devices".
Unfortunately there's no official drivers for this device from my manufacturer.
Instead, i downloaded the driver from Microsoft Catalog that include "IntelACM_ADL_PW_1.18.09.0.INF", however, device manager shows that "No drivers are installed for this device". When i installed Ubuntu to run the 'txt-stat' command, at first it didn't detect any acm driver, so i installed manually the ACM drivers, and here's what it says (I'll attach the txt-stat log):

[vish1]

Hello RichardP,

Greetings!!

To assist you more effectively, could you please share the PC model and processor details. Additionally, we recommend running the Intel System Support Utility (SSU) and sharing the report with us.

https://www.intel.com/content/www/us/en/support/articles/000057926/memory-and-storage.html

This information will help us better understand your system configuration and handle your request more accurately.

Best Regards,

Vishal Shet P

Intel Customer Support Technician

[RichardP]

Hi vish1,

Here's the new SSU log:

[Amina_Sadiya]

Hello RichardP,

Thank you for sharing the logs, kindly allow me sometime to check this and get back to you with an update.

Best regards,

Amina

Intel Customer Support Technician

[vish1]

Hello RichardP,

Greetings!!

We would like to inform you that your case is being routed to the concerned team for further handling. They will reach out to you shortly regarding the next steps.

Thank you for your patience.

Best Regards,

Vishal Shet P

Intel Customer Support Technician

[DhannielM_Intel]

Hello RichardP, 

Thank you for posting in the community. I'd like to clarify the Intel® Trusted Execution Technology (Intel TXT) for you. Intel TXT is a set of hardware extensions designed for high-end CPUs, such as the Intel Xeon E-2288G, and certain Intel Core i7 and i9 models may also support it. This technology was developed to enhance security in digital office environments by providing mechanisms for measured launch and protected execution. It helps safeguard against software-based attacks while ensuring the confidentiality and integrity of data on client PCs.

Based on your SSU logs, it seems that your processor and laptop are not compatible with Intel TXT. You can verify this by checking the technical specifications of your processor via the provided link. In the security and reliability section, you'll notice that Intel TXT is not listed. This hardware extension is typically found in server environments rather than consumer-grade setups, as it is designed to enhance security for client PCs.

For more information please see the following link: 

• Intel® Trusted Execution Technology (Intel® TXT) Overview

If you need further clarification or have other questions, feel free to reach out. I'm here to help!

Best regards,

Dhanniel M.

Intel Customer Support Technician

[RichardP]

Hi DhannielM.

What do you mean "In the security and reliability section, you'll notice that Intel TXT is not listed." while based on the link attached here shows that i5-12600H indeed support Intel TXT and is listed in the security and reliability section. In the CPU Configuration and Intel TXT Information in the BIOS confirmed that the CPU is supported and has valid and ready-to-use BiosAcm.
Here's the BIOS Photos:

[DhannielM_Intel]

Hello RichardP, 

Thank you for the correction I appreciate your patience. I realize now that I was focused on the acronym rather than the full name, and I sincerely apologize for the oversight.

It appears that your processor does indeed support Intel® Trusted Execution Technology (Intel® TXT). While I look into the activation process, could you take a moment to review this link on Activation Procedures for Trusted Platform Module (TPM) 2.0 and Intel® TXT? Please check whether you’ve already completed the steps outlined in the provided PDF file.

Best regards,

Dhanniel M.

Intel Customer Support Technician

[RichardP]

Hi DhannielM.

I've read the PDF from the given link, and almost everything has done correctly, except the VT-d ones. I can't find the VT-d option in the BIOS, however, there's option called "VTIO" in the "Platform Settings" BIOS, so i assume that as VT-d. Unfortunately, if VTIO is enabled, Windows doesn't recognized my fingerprint sensor even though the driver is showing up in the device manager. So i decided to disable VTIO for a moment. Everything else is enabled, such as VT-x and TPM (or PTT).

When Intel TXT is enabled in the BIOS, Windows detected the "Intel TXT Authenticated Code Module" driver as "Unknown devices". So, i tried to install manually the driver, because my manufacturer doesn't provide the TXT driver, i installed the driver from multiple sources, including Microsoft catalog. But, even though it said successfully installed, Windows said that "No drivers are installed for this device".

I tried to diagnose the problem by installing Ubuntu and TBOOT. At first, TBOOT can't even loaded because it tried to check all of the drivers from '/boot' directory and can't find the compatible driver for it. So i searched manually the driver and found the driver from Intel Website, which the Signed SINIT file appears the same as the Windows version. As you can see from the log, the SINIT is matches the platform, However, BIOS doesn't allocated enough not even a byte of memory for SINIT ACM to load.

I'm curious what really happening to the Intel TXT.

[DhannielM_Intel]

Hello RichardP, 

Thank you for trying my recommendation. I'll look into this issue further and provide you with an update as soon as possible.

Best regards,

Dhanniel M.

Intel Customer Support Technician

[DhannielM_Intel]

Hello RichardP,

Thank you for your patience. Based on my investigation, it seems this issue requires attention from your laptop manufacturer. While I understand you've already searched for the driver through your OEM, I recommend contacting ADVAN Technical Support directly for further assistance.

Intel Trusted Execution Technology (Intel TXT) is a hardware technology designed to:

• Verify the authenticity of a platform and its operating system.
• Ensure that an authentic operating system starts in a trusted environment, which can then be considered secure.
• Provide a trusted operating system with enhanced security capabilities not available to an unverified one.

Since this is a hardware technology and you're using a laptop, updates must be obtained through the OEM. Given that this requires OEM attention, I will now close this case. If you need further assistance, please feel free to submit a new question, as this thread will no longer be monitored.

Best regards,

Dhanniel M.

Intel Customer Support Technician