Lenovo M810z - Change TPM Version to 1.2

[adurrant]

Thank you for your help.

I'll post here what I find

[adurrant]

Hi all, 

Just wanted to post the resolution to this... 

Stage one: upgrade BIOS that supports the TPM FW Switch feature

However when flashing the bios the process needed to shutdown afterwards to complete so I added into the TS a shutdown command whilst in WinPe, but inbetween that I displayed a message to the PXE booter informing that this will happen to then re-run the task sequence:

 

 

The group only ran if the model was correct and the BIOS version was out of date:

Then once the BIOS was flashed, the instructions to the engineers were to re-run the task sequence again and obviously this time it skipped the BIOS upgrade as the WMI query was no longer valid, as the TPM chip defaulted to 2.0, I had to set the chip to 'Enabled' then change to 1.2 and then set the security chip to 'active' in that order, now I'm not sure if all of the reboot steps are required but the reboot after the TPM switch is 100% required, here's the steps in order:

 

Sources:

BIOS Tools package: https://support.lenovo.com/ec/en/solutions/ht100612

Display message in WinPE (you have to add the 'Use Toolkit Package' before running this): https://blogs.technet.microsoft.com/deploymentguys/2011/07/01/message-box-script-for-lite-touch-task-sequences/

Now you cannot change the TPM version using the above tools as Lenovo purposely disable changing it via WMI due to security concerns, so there's a utility to change this: https://pcsupport.lenovo.com/ec/en/products/DESKTOPS-AND-ALL-IN-ONES/THINKCENTRE-M-SERIES-DESKTOPS/M810Z/downloads/DS121000 (download the BIOS Windows BIOS setting tool), documentation is attached in the tool to help you.

I'm sure there might be a way to streamline the above but this worked for me and the client.

Hopefully this might help someone in the future.

 

 

[simulacra75]

Nice work.