I have a WINDOWS DEFENDER stock win10

Can I do the same as in post 12 only using AMIBCP5?
i have maximus viii extreme i7 7700k
Wanted to run PTT for wine compliance 11

https://www.asus.com/me-en/support/FAQ/1046215/
Asus has instructions and a list of supported mainboards online. Of course 100 and 200-Series consumer chipsets and mainboards are completely missing.

good morning everyone.
I have a question and I can do the procedure explained here for asus P8B-M Servers - Intel xeon E3 1240v2

Step 6: Make a support setup_var command grub boot disk:a FAT32 Udisk,make dir /efi/boot/bootx64.efi

Please I don´t understand nothing, please can anybody explain step by step?

Thanks

Sorry+

Zitat von Dogg im Beitrag #20

---

Just giving feedback here: I followed the instructions of @maxdarksol and have now PTT enabled: https://imgur.com/a/fzHWCXJ A bunch of TPM settings are now also available under Advanced/Trusted Computing in the BIOS menu. Board is ASUS Z170-Deluxe (BIOS version 3801) with a 6700k. I previously updated the Management Engine to the latest version from plutomaniac's thread (11.8.86.3909 H). varstoreinfo was the same as in the instructions. Thanks for helping us out!

---

@Husky:

Zitat von theWillow im Beitrag #32

---

Like maxdarksol said there is no modding the original BIOS or any flashing involved, we are just using GRUB and a command to toggle the invisible option on. But if you are having trouble I'll write in detail what I did.
First format your USB and create a directory /efi/boot/ and in boot folder put the bootx64.efi that you can download in the maxdarksol's original post.
Then go to BIOS and the Boot tab in the advanced view, find the Secure Boot option and change OS Type to Other OS and press F10 to save the settings, so you can boot from the USB you made:
After that you can go back into BIOS and the BOOT tab and select your USB from the list to boot from it:
And then you will boot to GRUB and just use the command line: "setup_var 0x6A6 0x1" (use this command only if you have an ASUS Z170-A board and see maxdarksol's original post to see how to find it for your board) and then type "exit", when you get back to the BIOS screen press escape on your keyboard and exit the BIOS. When you boot to Windows probably nothing changed yet (at least that was how it happened to me), so shut down the PC and power it on again, this time the PC powered off at start up by itself and powered on again and the settings have changed and when you boot to Windows you should have TPM 2.0 enabled. If this doesn't happen and the setting was reset try it again. You can just type "setup_var 0x6A6" to see which option is on ("0x0" is for dTPM, in this case no TPM and "0x1" for Intel's PTT)
Now you can change the OS Type back to UEFI again to enable secure boot and you should be done.

---

Thankls, i progress a little.....offset for my motherboard? Asus Z170 Deluxe bios 38.01

https://www.mediafire.com/file/lolc58mi6...ck_str.txt/file
https://www.mediafire.com/file/e8apiek16...p_extr.txt/file

Thanks again.

My mainboard is Asus Z170 pro, my processor an Intel I-7 6700 and I followed exactly the instructions of "the willow" in #32. I also used the command "setup_var 0x6A6 0x1" (although my mainboard is not a Asus Z170-A) but therefore all worked fine exactly how it was described by the willow. Now in the BIOS appears a new item in Advanced, "Trusted Computing" and in windows tpm.msc in the command line shows me that TPM 2.0 works.
Many thanks for "maxdarksol" in #12, who found this solution and also for "the willow" in #32 who explained the matter in an understandable way.
I want still to add that my windows defender first didn´t want to download the file uefiz of maxdarksol, but after de-activating the windows defender the download worked fine and after it windows defender didn´t find a virus.

Asus Z170 Deluxe 3801 + Intel 6700K

Intel(R) ME code versions:

BIOS Version 3801
MEBx Version 0.0.0.0000
GbE Version 0.7
Vendor ID 8086
PCH Version 31
FW Version 11.8.86.3909 H
LMS Version Not Available
MEI Driver Version 100.0.0.1053
Wireless Hardware Version Not Available
Wireless Driver Version Not Available

FW Capabilities 0x11111540

Intel(R) Capability Licensing Service - PRESENT/ENABLED
Protect Audio Video Path - PRESENT/ENABLED
Intel(R) Dynamic Application Loader - PRESENT/ENABLED

TLS Disabled
Last ME reset reason Firmware reset
Local FWUpdate Enabled
BIOS Config Lock Enabled
GbE Config Lock Enabled
Host Read Access to ME Enabled
Host Write Access to ME Disabled
Host Read Access to EC Disabled
Host Write Access to EC Disabled
SPI Flash ID 1 EF4018
SPI Flash ID 2 Unknown
BIOS boot State Post Boot
OEM ID 00000000-0000-0000-0000-000000000000
Capability Licensing Service Enabled
OEM Tag 0x00000000
Slot 1 Board Manufacturer 0x00000000
Slot 2 System Assembler 0x00000000
Slot 3 Reserved 0x00000000
M3 Autotest Disabled
C-link Status Disabled
Independent Firmware Recovery Disabled
EPID Group ID 0x1F8E
LSPCON Ports None
5K Ports None
OEM Public Key Hash FPF 0000000000000000000000000000000000000000000000000000000000000000
OEM Public Key Hash ME 0000000000000000000000000000000000000000000000000000000000000000
ACM SVN FPF 0x0
KM SVN FPF 0x0
BSMM SVN FPF 0x0
GuC Encryption Key FPF 0000000000000000000000000000000000000000000000000000000000000000
GuC Encryption Key ME 0000000000000000000000000000000000000000000000000000000000000000

FPF ME
--- --
Force Boot Guard ACM Disabled Disabled
Protect BIOS Environment Disabled Disabled
CPU Debugging Enabled Enabled
BSP Initialization Enabled Enabled
Measured Boot Disabled Disabled
Verified Boot Disabled Disabled
Key Manifest ID 0x0 0x0
Enforcement Policy 0x0 0x0

The phoenix1208 post led me to the solution, thanks. Special thanks to maxdarksol and the willow.

For those who like me were unable to download the file in the maxdarksol post, you can use the following file:

1 - Google: grub datasone
2 - Download the file modGRUBShell.efi from github

* I was prevented from posting the link because I am a new member
* rename modGRUBShell.efi to bootx64.efi

My motherboard is a Maximus VIII Ranger.

谢谢大佬！按你的步骤成功开启6700K+Z170A的TPM加入beta
不过我是小白也不懂程序，查了几小时各种额外教程才搞好

@dvdandroid Both in same situation.
@dogg your mb is like mine, habe you Manufavturater option enable/disable? Can you help me plesse?
Asus Z170 Deluxe witth Manufacturate disable and without Intel Trusted Platform.....

Zitat von el_zari im Beitrag #104

---

@dvdandroid Both in same situation.
@dogg your mb is like mine, habe you Manufavturater option enable/disable? Can you help me plesse?
Asus Z170 Deluxe witth Manufacturate disable and without Intel Trusted Platform.....

---