Hi

I am trying to follow your guide unsuccessfully.

My motherboard is Asus Z170 PRO GAMING
My CPU is Intel Core-i5 6600K

Security Device Support is enabled by default, I verified it's enabled
0x452EB One Of: Security Device Support, VarStoreInfo (VarOffset/VarName): 0xEFD, VarStore: 0x1, QuestionId: 0x1D, Size: 1, Min: 0x0, Max 0x1, Step: 0x0 {05 91 5F 16 81 16 1D 00 01 00 FD 0E 10 10 00 01 00}
0x452FC One Of Option: Disable, Value (8 bit): 0x0 {09 07 67 16 00 00 00}
0x45303 One Of Option: Enable, Value (8 bit): 0x1 (default) {09 07 66 16 10 00 01}
0x4530A End One Of {29 02}

TPM Device Selection I have set to Firmware TPM
0x631AA One Of: TPM Device Selection, VarStoreInfo (VarOffset/VarName): 0x687, VarStore: 0x1, QuestionId: 0x27A4, Size: 1, Min: 0x0, Max 0x1, Step: 0x0 {05 91 4D 10 4E 10 A4 27 01 00 87 06 14 10 00 01 00}
0x631BB Default: DefaultId: 0x0, Value (8 bit): 0x0 {5B 06 00 00 00 00}
0x631C1 One Of Option: Discrete TPM, Value (8 bit): 0x0 {09 07 50 10 00 00 00}
0x631C8 One Of Option: Firmware TPM, Value (8 bit): 0x1 {09 07 4F 10 00 00 01}
0x631CF End One Of {29 02}

After restart and boot into windows, tpm.msc say I don't have it
Booting back into EFI and checking the value of 0x687 and it's Discrete TPM again

What could be the reason the value doesn't save?
What could I do?

Your help is much appreciated!

Zitat von Husky im Beitrag #29

---

Hi, I'm new here ^_^
I have the same motherboard as the topic tittle Asus Z170A powered by an I7 6700K.
I need to unlock this hidden menu with TPM 2.0 options. But I have no idea how to do that, I tried to follow your tutorial, but as I'm not familiar with that I couldn't get any further. Can any of you guys who already made it to compile this modded BIOS so we can download it and just flash it like any other bios?
I downloaded the files from the link you posted, I made the bootable flashdrive with the uefi files you previous zipped, but when I type (during bios boot) setup_var 0x6A6 it says that command "setup_var" doesn't work. How can I create this "support setup_var command grub"?
Sorry to ask, but its the first time I see this modding thing so I know nothing. ^_^

---

Did you boot in FULL UEFI mode ? (CSM Disabled)

Zitat von Sylar76 im Beitrag #33

---

Did you boot in FULL UEFI mode ? (CSM Disabled)

---

Thanks for the response. I tried it. However, security device support is already enabled (value is 0x1). When I set the TPM device selection (0x6A6) to 0x1, the PC power cycles but TPM does not get enabled. I am also unable to find Trusted computing after making the change.

Zitat von xiaolu im Beitrag #34

---

Zitat von Sylar76 im Beitrag #33

---

Did you boot in FULL UEFI mode ? (CSM Disabled)

---

My CSM is disabled

---

Zitat von maxdarksol im Beitrag #36

---

Zitat von xiaolu im Beitrag #34

---

Zitat von Sylar76 im Beitrag #33

---

Did you boot in FULL UEFI mode ? (CSM Disabled)

---

My CSM is disabled

---

I suggest you update ME firmware to the latest version,such as CSME 11.8 Consumer H D,A v11.8.86.3909

---

Zitat von xiaolu im Beitrag #37

---

Zitat von maxdarksol im Beitrag #36

---

Zitat von xiaolu im Beitrag #34

---

Zitat von Sylar76 im Beitrag #33

---

Did you boot in FULL UEFI mode ? (CSM Disabled)

---

My CSM is disabled

---

I suggest you update ME firmware to the latest version,such as CSME 11.8 Consumer H D,A v11.8.86.3909

---

What is ME? How could I update that?

---

Hi,

having a ASUS Z170-A Board and I followed the instructions at least 10 times.
But still no tpm is present in BIOS nor in Windows.
If I check the UEFI variable it's always 0x00.
After I set to 0x01 it's shown, but after reboot it's reseted to 0x00.
... gettin insane ;-)

Is it possible that in the ROG boards, the ME is actually causing the issue? I have the ME updated already from ASUS website for the Maximus VIII Ranger.

Hi,

I followed all you steps.
I've update ME to

Zitat von maxdarksol im Beitrag #38

---

CSME 11.8 Consumer H D,A v11.8.86.3909

---

Found the reason I think. On my Maximus VIII Ranger, on running MEInfo, I get the following:


FPF ME
--- --
Force Boot Guard ACM Disabled Disabled
Protect BIOS Environment Disabled Disabled
CPU Debugging Enabled Enabled
BSP Initialization Enabled Enabled
Measured Boot Disabled Disabled
Verified Boot Disabled Disabled
Key Manifest ID 0x0 0x0
Enforcement Policy 0x0 0x0
PTT Disabled Enabled
PTT Lockout Override Counter 0x0
EK Revoke State Not Revoked
PTT RTC Clear Detection FPF 0x0

It seems PTT is disabled from the FPF (Field Programmable Fuses). Since they are hard flashed in the chipset during manufacturing, I have no idea if it possible to gain access to manufacturing mode and change the field without physically replacing the chipset.
I tried all the ME versions (11.6, 11.8.50.3399 (ASUS) and the latest 11.8.86.3909 (plutomaniac).

I think I am going to give up now unless anyone of you have any idea.

I am comfortable with modding my BIOS even if required as I have a flasher and the BIOS chip is socketed.

I don't understand these instructions. I've downloaded the BIOS from Asus website, it's a .CAP file. The link you posted doesn't contain a file?! What tool are you using to do this?

Zitat von maxdarksol im Beitrag #12

---

2.Using AMI setup IFR extractor in UBU to get configuration file offset

---

i have an asus z170p motherboard; i've used ubu to get the setup_extr.txt file

i can't find "TPM Device Selection" but i found this:
0x408B0 One Of: Device Select, VarStoreInfo (VarOffset/VarName): 0xF0A, VarStore: 0x1, QuestionId: 0x2A, Size: 1, Min: 0x0, Max 0x2, Step: 0x0 {05 91 97 16 9B 16 2A 00 01 00 0A 0F 10 10 00 02 00}
0x408C1 One Of Option: TPM 1.2, Value (8 bit): 0x0 {09 07 98 16 00 00 00}
0x408C8 One Of Option: TPM 2.0, Value (8 bit): 0x1 {09 07 99 16 00 00 01}
0x408CF One Of Option: Auto, Value (8 bit): 0x2 (default) {09 07 9A 16 10 00 02}

is it the same? so, will the command be like this: setup_var 0xf0a 0x1 ??

i am using legacy bios, may i have some issues?
is the "bootx64.efi" file you posted compatible with my motherboard?
if something happens i can always flash the default bios, right?

sorry, i am noob too




@Flux1984 this may help you too