Dell Firmware Update to TPM Version 2.0 or Downgrade to TPM Version 1.2 (OptiPlex 7050)

A Trusted Platform Module Version 2.0 is one of the minimum system requirements for Windows 11. The TPM Version cannot be switched from 1.2 to 2.0 in the Dell UEFI BIOS setup but requires a firmware update to be installed. I demonstrate this in an OptiPlex 7050.

There are two Firmware installers. One that updates the latest Firmware and switches to TPM Version 2.0 and another that updates the latest Firmware and switches back to TPM Version 1.2.

Written Guide:

At present these cannot be loaded from USB using the UEFI BIOS Boot Menu but must be executed within the Operating System.

In theory, we should be able to easily update the firmware by launching the setup within Windows. There are some complications however... On Windows 10 Pro, when the user is signed in with a Microsoft Account and a TPM is Enabled, the internal NVMe SSD is automatically encrypted using Bitlocker. The TPM gets owned (or if you prefer a more fancy term Autoprovisioned) by the Operating System during startup and is also involved as a security Mechanism when it comes to logging into the Microsoft Account.

Note we will need another Device to login to access a BitLocker Recovery Key in order to proceed.

To get details about our TPM. We can open up the Windows Terminal/PowerShell (Admin) and type:
Get-TPM
We need to Disable Windows 10 Ownership at Starter by typing the command:
Enable-TPMAutoProvisioning
Next we need to Power Down the Dell and Press [F2] to Enter the UEFI BIOS Setup when powering it up. Under Security select your TPM 2.0 or TPM 1.2 and select Clear. Exit the UEFI BIOS Setup and your system should reboot.

To login, you will need your BitLocker Recovery Key. This can be accessed by logging into Outlook and then selecting your Microsoft Account to the top right and select My Microsoft Account and then select View Details under My Devices and Manage Recovery Keys.

Now you should be able to apply your TPM 2.0 Firmware Update. After this is applied. Once again you will need the Bitlocker Recovery Key to log in with your Microsoft Account.

Power down your system and press [F2] to Enter the UEFI BIOS Setup. Ensure your TPM2.0 is Enabled and cleared. Once again you will need the Bitlocker Recovery Key to log in with your Microsoft Account.

When you have logged in. Open up the Windows Terminal/PowerShell (Admin) and type:
Enable-TPMAutoProvisioning
The reboot. You should now be able to login without any additional prompts to enter the Bitlocker Recovery Key.

#TPM #Dell #UEFI

[BlindMansRevenge]

Very informative video! My preferred manufacture is Dell as well. As it stands I currently own three older Dell desktops which include one dimension and two OptiPlex models and a total of nine Dell laptops which include Vostro Inspiron and latitude models

[gordonmarkus]

Just what I needed to get windows 11 installed on a Dell E7470 - thanks for the help.

[offroader]

Thanks alot this actually helped me get my 2.0 installed! (Real Person)

[Gerard]

Having to enter the BitLocker recovery can be prevented by clicking "Suspend protection" in Manage BitLocker or with PowerShell: Suspend-BitLocker -MountPoint "C:" -RebootCount 0

[LindenAshbyMK]

Is there a way to update dell bios under linux? I'm talking about inspiron n5030 model.

[mikegraham]

I've got a 7050 and TPM isn't listed anywhere in the BIOS. I get an alert on every boot and have to hit F1 to retry. Can't find a solution. I'm on the latest BIOS (1.27)

[helmaschine]

Mine gave an error "bios update failed, rebooting system" when I tried updating from tpm 1.2. to 2.0. then a black screen.

I made sure I had tpm 1.2 in the bios first, to make sure it was even active and it still crapped itself.

Now it's a black screen. Wtf do I do??!! I'm terrified.

[caliburnyman]

My TPM 1.2 Won't update to TPM 2.0 and when i run the TPM 2.0 EXE files and the computer restarts it dosn't do the firmware update can i have some help?

[zero-one]

Hi,
Can you make a video about TPM? It's not just for bitlocker. I lost 3 days to figure out what PPI is, even now I don't have exact understanding. I am not English speaking, but even in English there is very little info about it, not to mention my native language. The language barrier (thanks to deepl and google translator) and the fear of turning my device into a brick do not let me switch freely between the options. I am very interested to learn all about this TPM module and its management, both through the bios and with powershell. I'm sure many will be interested with time, this technology is not widespread yet. But as you say Microsoft will push it through.
Ps. If you do decide to do a manual, pay special attention to the options in the bios, such as clean, ppi, tmp state etс. Really interested in everything, from key creation to group policies, and opinion on this technology (there is an opinion that for the average user it is not so good. Hi Stalman)

[kahaTech]

Hi there. I have a dell vostro 5568 and whenever I turn it on it says alert tpm device was not found at the start of boot. How do I fix it man it's really gotten to me and a lot of other users have this issue as well

[alinked]

Hi! I was wondering will it work on UEFI even when I am in Windows, or I have to create a bootable flash drive? I also don't have BitLocker. I have a DELL latitude from around 2015-2016, Windows 11 Pro Insider Dev. (Of course I skipped the requirements but I still want to have tpm 2.0)

Specs:
Support expired: 2017-2018
Full Model: Dell Latitude E5440
CPU: i-3 40100
RAM: 4 GB
Cores: 2
Max virtual cores: 4
HDD: 500GB
RESOD: 1366x768
Systems Handled for now: Windows 7 Ultimate 64-bit, Windows 10 Professional 64-bit, Windows 11 Professional 64-bit
Current system: Windows 11 Professional 64-bit, activated
Service tag (expired since this ended support around 2017-2018): 7FKFYY1
TPM Manufacturer Name: ATML
TPM Manufacturer Version: 41.1
TPM Specification Version: 1.2