Preparing for Insider Preview Builds of Windows 11 - ***UPDATED 6/28***

Intel PTT includes a TPM, inside the CPU itself.

Still you may need to use an external TPM (connected on the header) for example it is provided preconfigured by your organization with its own endorsement keys created by their certificates and their own private key, without needing the organization to access to your PC. That external TPM may be later reused on another PC, after jioning the new PC to their domain.

As well TPM modules may fail and could be locked permanently, as you cannot replace easily the CPU at low cost, it is just simpler to plug an external TPM on the header (external TPMs can store a verification chain allowing to assert online that it was not stolen, so that it can be untrusted and blacklisted by its legitime author, if this TPM module was stolen or lost, just like you can blacklist permanently a smartphone or PC that was stolen, or its CPU if that CPU contained the TPM).

TPM modules also exist on other devices, such as USB keys, network adapters. Which one will be used (of you have several one) should be configurable with the BIOS or could change depending on the OS you load from UEFI if your PC is multiboot and each OS is tuned for different organizations. Windows can support multiple TPM modules on the same machine, and will jsut use one that it can endorse as ready for use.

But most PCs only have one TPM for simple configuration.

If you don't have any TPM module connected, and you have disabled Intel PTT, you have no TPM available for Windows. You could enable both and you'd have to configure Windows to use and configure the correct TPM.

Technically a TPM is just used to assert that you are the correct owner of the system. There are different ways to provide this, with the same level of protection. Intel PTT is one of these systems that offers this protection strength.

Unfortunately, the new UEFI firmware bootloader in Windows 11 no longer detects all TPM2 modules that were recignized in Windows 10. as well it still does not recognize the Intel vPro processors (11th generation) such as Intel® Core™ vPro® i7-1185G7...

That fixed it, I now have Windows 11, thanks

John

Enable Secure Boot and TPM 2.0 from BIOS/UEFI.

I'm running a Fujitsu T936 which exceeds the spec requirements in every way, but the core i5 6200u processor isn't on the list of approved processors. There are plenty of inferior processors on the list it seems. I feel like it was simply overlooked. That stinks because with 16GB ram, 512GB Samsung ssd it runs much better than some machines owned by friends that meet the specs. Hopefully they loosen this spec up a bit. Otherwise, with the features on this thing it's gonna cost me over $2k to run Win11 and have the same features.

4th gen Running Win11 without TPM or secureBoot