CPU/Mobo HP Z440 Workstation - TPM 2.0 Issue

[Shini]

I managed to get my hands on a HP Z440 workstation, fully aware that it's a server-grade workstation and not typically meant for gaming. However, I wanted to play Valorant on it since it’s the only game I was really interested in. Unfortunately, as soon as I tried to launch the game, I ran into the TPM 2.0 requirement issue. This led me down the troubleshooting rabbit hole.

System Specs:

• Model: HP Z440 Workstation
• CPU: Intel Xeon E5-2680 v4 (14 cores, 28 threads)
• Motherboard- HP 212B
• RAM: 32GB DDR4 ECC
• GPU: NVIDIA Quadro K1200
• Storage: 1TB SSD
• OS: Windows 10 Pro (Version 19045)

Troubleshooting Steps I Took:

1. Checking BIOS Settings:
   • I entered the BIOS to see TPM status. While TPM was present, it was only showing TPM 1.2 and not TPM 2.0.
   • I ensured Secure Boot was enabled and Legacy Boot was disabled.
2. Firmware Update Attempt:
   • I downloaded the latest BIOS update from the HP support site and flashed it successfully, hoping it would unlock TPM 2.0 support. Unfortunately, no change. I also tried the official HP TPM configuration utility along with the bin files for the required update. I have got the log files for this , so if required for further analysis , I can share it.
3. TPM Chip Investigation:
   • After doing some research, I found out that the HP Z440 theoretically supports a TPM 2.0 module (part number 863078-001). However, upon opening my workstation, I discovered that the TPM chip (a Nuvoton NPCD379HAKFX) is soldered onto the motherboard. This chip is commonly associated with TPM 1.2, making it impossible to upgrade to TPM 2.0.

If anyone here has successfully upgraded their Z440 to TPM 2.0 I’d really appreciate your insights. Maybe I’m missing something obvious or need to dig deeper into firmware configurations.
Thanks for reading! Looking forward to your suggestions or guidance on this.

This is prolly the TPM chip on my motherboard
Any input?

 

[sporkydork]

Don't have the exact same machine, but I have worked with HP Servers and Workstations in the past. This is what I have been able to glean from the internet forums regarding the upgrade:

Download the desired TPM rev 1.2 or 2.0 SP file and run the sp file to extract it, go to the created sp folder

READ the included directions................................................
https://support.hp.com/us-en/document/c05792935

SLB9660 TPM 1.2 ver. 4.43.257.0
https://ftp.hp.com/pub/softpaq/sp87501-88000/sp87753.exe


SLB9665 TPM 2.0 ver. 5.62.3126.0
https://ftp.hp.com/pub/softpaq/sp87501-88000/sp87753.exe

Instructions
• Run SoftPaq to extract files. By default it will extract the files in C:\SWSETUP\SP87753 folder.
• Open CMD Prompt in Administrator mode and run TPM.MSC to determine the TPM Manufacturer Information.
o Manufacturer Name: IFX
o For TPM 1.2, Manufacturer Version: Either 6.40 or 6.41 or 6.43
o For TPM 2.0, Manufacturer Version: Either 7.40 or 7.41 or 7.60 or 7.61 or 7.62 or 7.63
o Specification version: Either 1.2 or 2.0

• The utility supports
o Graphical User Interface (GUI) for step-by-step execution
o Command line mode (including silent execution)

• Run MSINFO32 to determine 32-bit or 64-bit OS. Examine System Type (will show either “x64-based PC” or “32-based PC”).
• Run the appropriate utility (TPMConfig.exe for 32-bit OS or TPMConfig64.exe for 64-bit OS) as an Administrator from the folder where the utility and TPM FW BIN file are located.

Dependencies
Password file
• An encrypted password file generated by the HpqPswd.exe utility and supplied with the –p command line option to provide the Setup Password, if set.
• The file will be renamed as “TPM.pwd” and will be copied to the EFI partition along with the TPM image file, and read by the BIOS. If incorrect, the update will fail. If not provided, the BIOS will prompt for the password.
• AES 256 encryption: as of version 1.0.12.1, if a password file with improved encryption is supplied, it will be converted to legacy encryption for BIOS
compatibility when copied to the EFI partition.
• Online flash: Not support. The user will not be prompted. TMP firmware binary
• TMP firmware binary to be updated, by default, is expecting to be located on the same folder with the tool; unless command line switch “f” is using to specify the firmware to be updated.

Additional Notes
• On Windows 7, TPM 1.2 must be activated in BIOS (Check TPM state in BIOS).
• On Windows 8.x or Windows 10, the OS will automatically take ownership of TPM.
• Windows 8.x and Windows 10 require GPT partition style when using TPM 2.0. The BIOS setting for boot mode should be set to native UEFI (recommended) or UEFI with CSM.
• Windows 7-64, Windows 8.x, and Windows 10 will work with MBR or GPT partition style when using TPM 1.2. Required Supported Files
• Currently supported SoftPaqs containing the firmware binary files: SP81900 and SP82417

 

[Tobikage]

This is what I have been able to glean from the internet forums regarding the upgrade:

So copy paste from here...

Upgrading from TPM 1.2 to TPM 2.0 on a Z440

According to the specifications, the HP Z440 supports both TPM 1.2 and TPM 2.0[1]. I have upgraded to the latest BIOS version, but my TPM version remains at TPM 1.2. I recalled when I had this same issue on a Dell Precision Workstation that a different tool was needed to switch from TPM 1.2 to...

h30434.www3.hp.com

 

[Shini]

Don't have the exact same machine, but I have worked with HP Servers and Workstations in the past. This is what I have been able to glean from the internet forums regarding the upgrade:

Download the desired TPM rev 1.2 or 2.0 SP file and run the sp file to extract it, go to the created sp folder

READ the included directions................................................
https://support.hp.com/us-en/document/c05792935

SLB9660 TPM 1.2 ver. 4.43.257.0
https://ftp.hp.com/pub/softpaq/sp87501-88000/sp87753.exe


SLB9665 TPM 2.0 ver. 5.62.3126.0
https://ftp.hp.com/pub/softpaq/sp87501-88000/sp87753.exe

Instructions
• Run SoftPaq to extract files. By default it will extract the files in C:\SWSETUP\SP87753 folder.
• Open CMD Prompt in Administrator mode and run TPM.MSC to determine the TPM Manufacturer Information.
o Manufacturer Name: IFX
o For TPM 1.2, Manufacturer Version: Either 6.40 or 6.41 or 6.43
o For TPM 2.0, Manufacturer Version: Either 7.40 or 7.41 or 7.60 or 7.61 or 7.62 or 7.63
o Specification version: Either 1.2 or 2.0

• The utility supports
o Graphical User Interface (GUI) for step-by-step execution
o Command line mode (including silent execution)

• Run MSINFO32 to determine 32-bit or 64-bit OS. Examine System Type (will show either “x64-based PC” or “32-based PC”).
• Run the appropriate utility (TPMConfig.exe for 32-bit OS or TPMConfig64.exe for 64-bit OS) as an Administrator from the folder where the utility and TPM FW BIN file are located.

Dependencies
Password file
• An encrypted password file generated by the HpqPswd.exe utility and supplied with the –p command line option to provide the Setup Password, if set.
• The file will be renamed as “TPM.pwd” and will be copied to the EFI partition along with the TPM image file, and read by the BIOS. If incorrect, the update will fail. If not provided, the BIOS will prompt for the password.
• AES 256 encryption: as of version 1.0.12.1, if a password file with improved encryption is supplied, it will be converted to legacy encryption for BIOS
compatibility when copied to the EFI partition.
• Online flash: Not support. The user will not be prompted. TMP firmware binary
• TMP firmware binary to be updated, by default, is expecting to be located on the same folder with the tool; unless command line switch “f” is using to specify the firmware to be updated.

Additional Notes
• On Windows 7, TPM 1.2 must be activated in BIOS (Check TPM state in BIOS).
• On Windows 8.x or Windows 10, the OS will automatically take ownership of TPM.
• Windows 8.x and Windows 10 require GPT partition style when using TPM 2.0. The BIOS setting for boot mode should be set to native UEFI (recommended) or UEFI with CSM.
• Windows 7-64, Windows 8.x, and Windows 10 will work with MBR or GPT partition style when using TPM 1.2. Required Supported Files
• Currently supported SoftPaqs containing the firmware binary files: SP81900 and SP82417

Thank you for your detailed reply! I really appreciate the help. I had already tried this method, but unfortunately, my TPM specification version is 1.2 and manufacturer version is 4.40.119, and the update didn't seem to work for me. If you have any other suggestions, I'd be happy to try them out. Thanks again!

 

[sporkydork]

See this video for z440 for the upgrade. Unfortunately the audio is in vietnamese.

If this doesn't work for you, then the only option available for you is to look for a PCI-e based TPM 2.0 card which may or may not work
Something similar to this product

AET PCIE TPM2 card - Atomeltech

The AET-PCIE-TPM2 is high performance reconfigurable x1 Mini PCI Express (PCI-e) form factor for Trusted Platform Module 2.0 (TPM), requiring for Windows 11. There is a way to bypass the Windows 11 TPM, RAM and CPU requirements with a simple free utility, but if you’d rather fulfill the official...

atomeltech.com