Intune Hardware Inventory not recognizing TPM in MSI Motherboard, but Bitlocker is running

Chris

1/30/23, 6:30 PM

I'm running Windows 10 10.0.19043.1237 on an MicroStar Z590-A PRO (MS-7D09) motherboard, where I recently installed a TPM. I can confirm that Bitlocker is running and providing full disk encryption, and that the recovery key is safely tucked away in Azure AD. Intune, however, is not recognizing that my device has a TPM installed, and it's causing compliance issues. When I look at the encryption monitoring report, it has this to say about my device:

TPM Version: Unknown
Encryption readiness: Not ready
Encryption status: Encrypted
Profile state summary: Succeeded
Status details: Succeeded

When I look up the compliance policy as it is applied to the device, it shows "Not Applicable" under "Require Bitlocker."

System Information in Windows 10 shows the following:

BIOS Version/Date: American Megatrends International, LLC 1.10, 4/9/2021
BIOS Mode: UEFI
Secure Boot State: On
PCR7 Configuration: Binding Not Possible
Device Encryption Support: Reasons for failed automatic device encryption: PCR7 binding is not supported, Hardware Security Test Interface failed and device is not Modern Standby, Un-allowed DMA capable bus/device(s) detected

In my BIOS, secure boot is enabled in Standard mode. The partition table is GPT.

The TPM was just installed yesterday, so the device in question was already enrolled in Intune, if that makes a difference. From what I can tell, my setup is correct, but Intune and Windows are both reporting problems with my TPM setup. Where should I look next? I installed the TPM as is, out of the box. Does it require further configuration?

285

0 + 0

windows

bios

tpm

microsoft-intune

windows-10

Greg Askew

1/30/23, 8:05 PM

At a minimum, the TPM needs to be enabled, activated, and turned on. From Windows.

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Intune Hardware Inventory not recognizing TPM in MSI Motherboard, but Bitlocker is running

TH: Intune Hardware Inventory ไม่รู้จัก TPM ในเมนบอร์ด MSI แต่ Bitlocker กำลังทำงานอยู่

RO: Intune Hardware Inventory nu recunoaște TPM în placa de bază MSI, dar Bitlocker rulează

RU: Intune Hardware Inventory не распознает TPM на материнской плате MSI, но Bitlocker работает

VI: Intune Hardware Inventory không nhận ra TPM trong Bo mạch chủ MSI, nhưng Bitlocker đang chạy

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.