Trusted Platform Module 2.0 Driver Windows 10

-->

Applies to

  • Windows 10
  • Windows Server 2016

Mar 21, 2017  This package provides Dell TPM 2.0 Update Firmware and is supported on Dell Latitude/OptiPlex/Precision/XPS series running the following Operating Systems: Windows 7-64bit, Windows 8.1-64bit & Windows 10-64bit Get the latest driver Please enter your product details to view the latest driver information for your system. Firmware updates are available for Infineon`s Trusted Platform Modules (TPMs) based on TCG specification family 1.2 and 2.0 and will be rolled out to end users by device and OS manufacturers (e.g. Hardware OEMs such as PC manufacturers). Please follow this link for more information on interim measures for Microsoft Windows.

This topic provides recommendations for Trusted Platform Module (TPM) technology for Windows 10.

. Product: Trusted Platform Module 2.0. Hardware Class: Unknown. Windows 10 64-Bit Driver. Total Driver Versions: 15. Recommended Driver. Driver Date:: Release Notes: Driver Version: 10.0.: PC Matic Notes: Version History. Version Popularity Release Notes. Installs the Intel® Trusted Execution Engine (Intel® TXE) driver and firmware. The Intel TXE driver is required for Secure Boot and platform security features. Not sure if this is the right driver for your Intel NUC? Run Intel® Driver & Support Assistant to automatically detect driver updates.

For a basic feature description of TPM, see the Trusted Platform Module Technology Overview.

TPM design and implementation

Traditionally, TPMs have been discrete chips soldered to a computer’s motherboard. Such implementations allow the computer’s original equipment manufacturer (OEM) to evaluate and certify the TPM separate from the rest of the system. Although discrete TPM implementations are still common, they can be problematic for integrated devices that are small or have low power consumption. Some newer TPM implementations integrate TPM functionality into the same chipset as other platform components while still providing logical separation similar to discrete TPM chips.

TPMs are passive: they receive commands and return responses. To realize the full benefit of a TPM, the OEM must carefully integrate system hardware and firmware with the TPM to send it commands and react to its responses. TPMs were originally designed to provide security and privacy benefits to a platform’s owner and users, but newer versions can provide security and privacy benefits to the system hardware itself. Before it can be used for advanced scenarios, however, a TPM must be provisioned. Windows 10 automatically provisions a TPM, but if the user is planning to reinstall the operating system, he or she may need to clear the TPM before reinstalling so that Windows can take full advantage of the TPM.

The Trusted Computing Group (TCG) is the nonprofit organization that publishes and maintains the TPM specification. The TCG exists to develop, define, and promote vendor-neutral, global industry standards that support a hardware-based root of trust for interoperable trusted computing platforms. The TCG also publishes the TPM specification as the international standard ISO/IEC 11889, using the Publicly Available Specification Submission Process that the Joint Technical Committee 1 defines between the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC).

OEMs implement the TPM as a component in a trusted computing platform, such as a PC, tablet, or phone. Trusted computing platforms use the TPM to support privacy and security scenarios that software alone cannot achieve. For example, software alone cannot reliably report whether malware is present during the system startup process. The close integration between TPM and platform increases the transparency of the startup process and supports evaluating device health by enabling reliable measuring and reporting of the software that starts the device. Implementation of a TPM as part of a trusted computing platform provides a hardware root of trust—that is, it behaves in a trusted way. For example, if a key stored in a TPM has properties that disallow exporting the key, that key truly cannot leave the TPM.

The TCG designed the TPM as a low-cost, mass-market security solution that addresses the requirements of different customer segments. There are variations in the security properties of different TPM implementations just as there are variations in customer and regulatory requirements for different sectors. In public-sector procurement, for example, some governments have clearly defined security requirements for TPMs whereas others do not.

TPM 1.2 vs. 2.0 comparison

From an industry standard, Microsoft has been an industry leader in moving and standardizing on TPM 2.0, which has many key realized benefits across algorithms, crypto, hierarchy, root keys, authorization and NV RAM.

Trusted Platform Module 2.0 Driver Windows 10

Why TPM 2.0?

TPM 2.0 products and systems have important security advantages over TPM 1.2, including:

  • The TPM 1.2 spec only allows for the use of RSA and the SHA-1 hashing algorithm.

  • For security reasons, some entities are moving away from SHA-1. Notably, NIST has required many federal agencies to move to SHA-256 as of 2014, and technology leaders, including Microsoft and Google have announced they will remove support for SHA-1 based signing or certificates in 2017.

  • TPM 2.0 enables greater crypto agility by being more flexible with respect to cryptographic algorithms.

    • TPM 2.0 supports newer algorithms, which can improve drive signing and key generation performance. For the full list of supported algorithms, see the TCG Algorithm Registry. Some TPMs do not support all algorithms.

    • For the list of algorithms that Windows supports in the platform cryptographic storage provider, see CNG Cryptographic Algorithm Providers.

    • TPM 2.0 achieved ISO standardization (ISO/IEC 11889:2015).

    • Use of TPM 2.0 may help eliminate the need for OEMs to make exception to standard configurations for certain countries and regions.

  • TPM 2.0 offers a more consistent experience across different implementations.

    • TPM 1.2 implementations vary in policy settings. This may result in support issues as lockout policies vary.

    • TPM 2.0 lockout policy is configured by Windows, ensuring a consistent dictionary attack protection guarantee.

  • While TPM 1.2 parts are discrete silicon components which are typically soldered on the motherboard, TPM 2.0 is available as a discrete (dTPM) silicon component in a single semiconductor package, an integrated component incorporated in one or more semiconductor packages - alongside other logic units in the same package(s) - and as a firmware (fTPM) based component running in a trusted execution environment (TEE) on a general purpose SoC.

Note

TPM 2.0 is not supported in Legacy and CSM Modes of the BIOS. Devices with TPM 2.0 must have their BIOS mode configured as Native UEFI only. The Legacy and Compatibility Support Module (CSM) options must be disabled. For added security Enable the Secure Boot feature.

Installed Operating System on hardware in legacy mode will stop the OS from booting when the BIOS mode is changed to UEFI. Use the tool MBR2GPT before changing the BIOS mode which will prepare the OS and the disk to support UEFI.

Discrete, Integrated or Firmware TPM?

There are three implementation options for TPMs:

  • Discrete TPM chip as a separate component in its own semiconductor package

  • Integrated TPM solution, using dedicated hardware integrated into one or more semiconductor packages alongside, but logically separate from, other components

  • Firmware TPM solution, running the TPM in firmware in a Trusted Execution mode of a general purpose computation unit

Windows uses any compatible TPM in the same way. Microsoft does not take a position on which way a TPM should be implemented and there is a wide ecosystem of available TPM solutions which should suit all needs.

Trusted Platform Module 2.0 Driver Windows 10 Download Hp

Is there any importance for TPM for consumers?

For end consumers, TPM is behind the scenes but is still very relevant. TPM is used for Windows Hello, Windows Hello for Business and in the future, will be a component of many other key security features in Windows. TPM secures the PIN, helps encrypt passwords, and builds on our overall Windows 10 experience story for security as a critical pillar. Using Windows on a system with a TPM enables a deeper and broader level of security coverage.

TPM 2.0 Compliance for Windows 10

Windows 10 for desktop editions (Home, Pro, Enterprise, and Education)

  • Since July 28, 2016, all new device models, lines or series (or if you are updating the hardware configuration of a existing model, line or series with a major update, such as CPU, graphic cards) must implement and enable by default TPM 2.0 (details in section 3.7 of the Minimum hardware requirements page). The requirement to enable TPM 2.0 only applies to the manufacturing of new devices. For TPM recommendations for specific Windows features, see TPM and Windows Features.

IoT Core

  • TPM is optional on IoT Core.

Windows Server 2016

  • TPM is optional for Windows Server SKUs unless the SKU meets the additional qualification (AQ) criteria for the Host Guardian Services scenario in which case TPM 2.0 is required.

TPM and Windows Features

The following table defines which Windows features require TPM support.

Windows FeaturesTPM RequiredSupports TPM 1.2Supports TPM 2.0Details
Measured BootYesYesYesMeasured Boot requires TPM 1.2 or 2.0 and UEFI Secure Boot
BitLockerNoYesYesTPM 1.2 or 2.0 are supported but TPM 2.0 is recommended. Automatic Device Encryption requires Modern Standby including TPM 2.0 support
Device EncryptionYesN/AYesDevice Encryption requires Modern Standby/Connected Standby certification, which requires TPM 2.0.
Windows Defender Application Control (Device Guard)NoYesYes
Windows Defender System GuardYesNoYes
Credential GuardNoYesYesWindows 10, version 1507 (End of Life as of May 2017) only supported TPM 2.0 for Credential Guard. Beginning with Windows 10, version 1511, TPM 1.2 and 2.0 are supported.
Device Health AttestationYesYesYes
Windows Hello/Windows Hello for BusinessNoYesYesAzure AD join supports both versions of TPM, but requires TPM with keyed-hash message authentication code (HMAC) and Endorsement Key (EK) certificate for key attestation support.
UEFI Secure BootNoYesYes
TPM Platform Crypto Provider Key Storage ProviderYesYesYes
Virtual Smart CardYesYesYes
Certificate storageNoYesYesTPM is only required when the certificate is stored in the TPM.
AutopilotNoN/AYesIf you intend to deploy a scenario which requires TPM (such as white glove and self-deploying mode), then TPM 2.0 and UEFI firmware are required.
SecureBIOYesNoYesTPM 2.0 and UEFI firmware is required.
DRTMYesNoYesTPM 2.0 and UEFI firmware is required.

OEM Status on TPM 2.0 system availability and certified parts

Government customers and enterprise customers in regulated industries may have acquisition standards that require use of common certified TPM parts. As a result, OEMs, who provide the devices, may be required to use only certified TPM components on their commercial class systems. For more information, contact your OEM or hardware vendor.

Trusted Platform Module Windows 10 Reset

Related topics

  • Trusted Platform Module (list of topics)

Trusted Platform Module 2.0 Driver Windows 10 Download Asus

Driver Information

Old drivers impact system performance and make your PC and hardware vulnerable to errors and crashes. We suggest you to download the latest drivers. Keep your Trusted Platform Module 2.0 driver upto date to maximize its performance, fixing any error related to driver.
Trusted Platform Module 2.0 is a windows driver. It's released by Microsoft Type: SecurityDevices
Version: 6.2.9200.16548
Date: 2006-06-21

Hardware IDs:

ACPIVEN_MSFT&DEV_0101
ACPIMSFT0101
*MSFT0101

Compatible IDs:

ACPIMSFT0101
MSFT0101

The following operating system has used this driver:

Microsoft Windows 10 Pro
Microsoft Windows 8
Microsoft Windows 8 Single Language
Microsoft Windows 8 Pro
Microsoft Windows 8.1 Pro Preview
Microsoft Windows 8 Enterprise

This download is valid for the product(s) listed below:

Notebook - N150SD/N155SD (Not Applicable- SKU:Not Applicable)
LENOVO - K3011W (IDEATAB/V1.0- SKU:Win8 STD DPK MIDH)
Sony Corporation - SVD13211SGW (SVD1321/J500543X- SKU:54602656)
Acer - TP-ICONIA_W510-27602G03A (ICONIA W510 SERIES/1.0- SKU:ICONIAW510.074B_1.00)
Acer - ICONIA W510 (ICONIA W510 SERIES/1.0- SKU:ICONIAW510.074B_1.00)
Hewlett-Packard - HP ElitePad 900 (103C_5336AN G=N L=ENT B=HP S=Elite/A2019ED003- SKU:B6A72AV)
Hewlett-Packard - HP ENVY TS 14 Sleekbook (103C_5335KV G=N L=CON B=HP S=PAV X=MIN/0880110000305E00101330100- SKU:1234567#ABA)
ASUSTeK Computer INC. - ME400C (ASUS Tablet/System Version- SKU:ME400C)
Acer - ICONIA W511P (ICONIA W510 SERIES/1.0- SKU:ICONIAW511.074B_1.00)
Dell Inc. -

Notices:

The software drivers provided on this page are generic versions and can be used for general purposes. However, computer original equipment manufacturers (OEMs) may have altered the features, incorporated customizations, or made other changes to the software or software packaging they provide. To avoid any potential installation incompatibilities on your OEM system, We recommend that you check with your OEM and use the software provided via your system manufacturer. We or the computer original equipment manufacturer (OEM) may not provide technical support for some or all issues that could arise from the usage of this generic version of software drivers.