Mobile and Desktop Processors
Intel® Core™ processors, Intel Atom® processors, tools, and utilities

EK certificates TPM

Voornaam
Beginner
393 Views

Laptop: Asus N552VX
OS: Windows 11 Pro
CPU: Intel i7-6700HQ
BIOS: latest version

 

My laptop shows "Attestation: not supported"

I have tried: resetting the TPM, reinstalling Windows 11. But nothing works.

I suspect this issue is related to the following: When I run "tpmdiagnostics EKCertificateURL" in elevated PowerShell, I receive a RSA and ECC-URL.

The RSA-URL works, but ECC-URL does not. This indicates a problem with the EK certificates availability.

Please find additional information below, and a screenshot of the attestation status problem, with the output of: "Intel system support utility", attached

PowerShell command: tpmdiagnostics GetDeviceInformation

-TPM Present: Yes
-TPM Version: 2.0
-TPM Manufacturer ID: INTC
-TPM Manufacturer Full Name: Intel
-TPM Manufacturer Version: 11.0.0.1205
-TPM Vendor Id: Intel
-PPI Version: 1.2
-Is Initialized: True
-Ready For Storage: True
-Ready For Attestation: False
-Information Flags: 0x00000010
-Is Capable For Attestation: True
-Clear Needed To Recover: False
-Clear Possible: True
-TPM Has Vulnerable FW: True
-TPM FW Vulnerability: 0x00000022
ADV190024 - ECDSA key generation (tpm.FAIL)
-PCR7 Binding State: Binding Possible
-Maintenance Task Complete: True
-TPM Spec Version: 1.16
-TPM Errata Date: Thursday, October 30, 2014
-PC Client Version: 1.00
-Is Locked Out: False

0 Kudos
0 Replies
Reply