Preparing for Insider Preview Builds of Windows 11 - ***UPDATED 6/28***

something went wrong with result 0x0

Thank you for your answer. I'm aware of the TPM module, but this is not available at the moment - I guess sold out. Looked at some boards which have slots for the module. Funny enough, my older board has TPM 1.2 available, which is the only one out of my collection

H310M PRO-VD PLUS I want to update Windows 11.but turn on the mode Secure Boot State .writes turn off CSM I can not find in BIOS where CSM to turn off

-

@Vienna10 "Wanted to purchase a new motherboard, but having troubles finding one with TPM"

That's true that many motherboards that are sold independantly of a full PC do not have the TPM builtin. However they ahave a connector on which you can plug one: it's sold separately (and can be replaced if damaged).

This is true for many motherboards from Asus, Asustek, Gigabyte, and probably other.

Such device does not cost a lot (about a dozen of USD, or EUR), but beware of hardware compatibility as there are several types of connectors, and as well there are places where you'll find only TPM1.2 chips. as well for some motherboards, you need an updated UEFI BIOS to have the TPM2 chip recognized (but unfortunately these updated UEFI BIOS do not necessarily have the the HSTI signature, even if they are signed by the manufacturer, the manufacturer "forgot" to request a signature to Microsoft WHQL in their certificate for the BIOS image.

In other cases, the TPM2 will be recognized in Windows 11, but you'll need to install a previous version of the BIOS that had the Microsoft signature. This is not an hardware problem at all on the TPM2 chip or on the motherboard, but a problem in the BIOS !

It seems that Windows 11 requires now the WHQL signature of the UEFI BIOS, otherwise it won't accept to use TPM measurements made by that UEFI BIOS and won't trust it. In Windows 10, such requirement was apparently not necessary.

But if you run the Windows ADK, everything is fine ! Microsoft has still not published an update for ADK, allowing manufacturers to test if their existing UEFI BIOS images were complying to the new requirement... I don't know when this was added. So Microsoft seems to have just decided to jsut accept BIOS images whose WHQL certificates were signed by Microsoft less than 4 years ago, and reject all others as invalid, even if they were (and are still) valid for ADK!

I don't know if there's a way to have Microsoft accept our own ADK assessments of our BIOS, because manufacturers don't want to request new certificates for BIOS'es that they have stoppe to maintain... It seems this is costly for them (billed to them by Microsoft).

I wonder if Intel Platform Trust Technology (PTT) will be sufficient for Windows 11. Wanted to purchase a new motherboard, but having troubles finding one with TPM