Hacker News Reader

Comment by neogodless | Hacker News Reader

Here's a tool to check if your PC meets the hardware requirements[0].

However, it looks like many modern systems don't have TPM 2.0 enabled in the BIOS, and will come back with "This PC can't run Windows 11" (including mine - Asus Prime X470 Pro with Ryzen 2700X, 32GB RAM, 1.5TB storage, Radeon RX 5600 XT.)

[0] https://download.microsoft.com/download/1/d/d/1dd9969b-bc9a-...

View on HN

TPM is required? That's great because it gives me a good reason to tell my boss we shouldn't switch to it. What are they thinking with that?

Maybe to better pin a license to a device? Or because google: https://chrome.googleblog.com/2011/07/chromebook-security-br...

I'm guessing somebody high up in sales is thinking "hey, we're Microsoft -- we're gonna dictate how this is going to go because people aren't going to want to be without the latest version of Windows!"

Smells like Classic Redmond Hubris.

Well. They're not wrong yet.

Since you're running Ryzen, you can enable firmware-based TPM in your UEFI settings and you should be good to go.

Screenshot of the security processor page: https://i.imgur.com/ZWtq8EO.png

Screenshot of the PC health check: https://i.imgur.com/Rb3eZIc.png

I'll have to check. I know that my Asus Prime X470 Pro lists TPM as "sold separately"; there's a connector on the motherboard, but the module itself is likely not present.

(For example: https://www.bhphotovideo.com/c/product/1237446-REG/asus_tpm_... )

From the manual[1], it is an option under section 3.6.1 AMD fTPM Configuration. It's built into the CPU rather than the motherboard, but the motherboard can provide a separate hardware TPM.

[1]: https://dlcdnets.asus.com/pub/ASUS/mb/SocketAM4/PRIME_X470-P...

Ha I was in that PDF a few minutes ago. I saw "fTPM" but since it didn't list an explanation, I didn't know if it was an included TPM module or something else.

Apparently, my 3yo desktop isn't compatible (Gigabyte Z270X Ultra). I really doubt people will upgrade their hardware just to use Windows 11.

That doesn't sound right, search around in the BIOS for "Platform Trust Technology" or "PTT". If it's disabled, change it to enabled.

Just enabled PTT in the BIOS, but the tool still says my computer is not compatible (but it doesn't tell me exactly why).

You probably only have the header on your motherboard, without a tpm module actually plugged in. Mine was like this, and the specs for your motherboard suggest this is also the case for you. You can buy them on online pretty cheap (I got one for $20)

PTT is part of the CPU, no external TPM module is necessary. PTT is Intel's implementation, AMD have something similar called fTPM.

You do not need any external module on machines with fTPM/PTT support (i.e. if you bought it in the last few years).

You're right! And now I qualify for the win 11 beta. Looks like I got confused between two different security setting pages in the UEFI menu, and had just enabled "the ability for it to use a TPM plugged in to the header" instead of enabling PPT like I thought I was doing.

I guess my Phenom II-based system is SOL. No TPM, not even a connector on the motherboard, and of course it's pre-UEFI.

Oh well, Windows 10 will be the last MS OS to be installed on it, 100% Linux it is.

Until Linux distributions start requiring TPM as well.

Even if they do (and they won't), it will be very easy to disable that requirement...

Reply on news.ycombinator.com