If you receive a message in Windows Defender Security Center telling you that you need to update your security processor or TPM firmware, the instructions in this topic will show you how.
Why am I receiving this message?
Many devices that run Windows 10 have Trusted Platform Module (TPM) chipsets. A security vulnerability exists in certain TPM chipsets that can impact operating system security, which means Windows 10 operating systems are at increased risk. You are receiving this message because Microsoft is releasing Windows 10 security updates to address the vulnerability which you will need to download and install. In addition, device manufacturers are releasing firmware updates to remediate the problem which you also need to download and install. Finally, once you have installed these updates, you will also need to clear your TPM.
The following recommended actions contain all the information you need to update your device.
If you have turned on automatic updates in Windows Update, you won’t need to take any action because the updates will be downloaded and installed automatically.
If you have not turned on automatic updates, Microsoft recommends that you go to Windows Update immediately to check for updates and install the applicable updates manually. To learn more, see Windows Update: FAQ.
Do NOT apply the TPM firmware update prior to applying the Windows operating system update. Doing so will render your system unable to determine if your system is affected.
If you have a Surface device, please see Microsoft Knowledge Base Article 4073006 for additional information and instructions.
If your device is not from Microsoft, locate the manufacturer of your device in the following table, select the corresponding link, and apply the firmware update they provide. If the manufacturer of your device is not listed in the following table, please contact the manufacturer’s customer support department for next steps.
|Device manufacturer||Link for firmware update|
|HP Customer Support||https://support.hp.com/us-en/document/c05792935|
|HP Enterprise Support||https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03789en_us|
Before clearing your TPM, be sure to back up your data. Do not clear the TPM on a device you do not own, such as a work or school PC, without being instructed to do so by your IT administrator.
Follow these steps to clear your TPM:
- Go to Start > Settings > Update & Security > Windows Security > Device security .
- Under Security processor, select Security processor details.
- Select Security processor troubleshooting, and then under Clear TPM, select Clear TPM.
Your device will need to restart before the process is complete.