TPM System Fundamentals Testing Prerequisites

1. Open Tpm.msc and check whether state is “TPM is ready for use”. If it is not, clear the TPM from the TPM MMC console and then prepare the TPM. Make sure that TPM is enabled, active, and owned.
   
   
2. Set the NoPPIClear flag so that you do not have to press F12 for every test:
   
   
   1. Open a command prompt that has administrative privileges. At the command prompt, type the following:
      
      
      Copy

      $Tpm = Get-WmiObject -class Win32_Tpm -namespace "root\CIMv2\Security\MicrosoftTpm"
      $ConfirmationStatus = $Tpm.GetPhysicalPresenceConfirmationStatus(22).ConfirmationStatus
      if($ConfirmationStatus -ne 4) {$Tpm.SetPhysicalPresenceRequest(18)}
      

   2. Reboot the computer and accept changes by pressing F12.
      
      
   3. Reboot the computer again.
      
      
3. Ensure SecureBoot configuration and Debug policy are set according to each test requirement. Open a command prompt that has administrative privileges. At the command prompt, open msinfo32 and check the following:
   
   
   • Secure boot State: ON (ON by default unless exclusively asked to set it to OFF)
     
     
   • PCR7 configuration: Bound or Binding possible
     
     

Software/Hardware Prerequisite: Firmware based TPM or Discrete TPM.

Concepts