TPM Attestation Not Supported after AMD Ryzen Upgrade

Jens Dittberner 0 Reputation points
2023-02-16T01:32:12.9166667+00:00

Hi,
after Upgrading my CPU from Ryzen 5 2600 to Ryzen 7 5700x Windows Security Chip App reports "Attestation: Not Supported" but "Memory: Ready".
In die TPM Console it shows that the TPM Module is Ready for use.
The Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TPM\WMI\Endorsement\EKCertStore\Certificates is empty with the R 7 5700x but has an entry when I use my old CPU.

 

I already tried to reset TPM, CMOS and Secureboot in Bios and in Windows TPM Console.
I disabled/enabled fTPM and Secure Boot several times.
Windows 10 and Windows 11 report the same. I already did a complete reinstall.
fTPM, Trusted Computing, UEFI and Secureboot are enabled in BIOS.
Latest BIOS Updates and Windows Updates are installed.
The Windows Device Manager shows no errors. The AMD PSP 11.0 and TPM 2.0 is installed correctly.
When I switch back to my old Ryzen 5 2600 everything works.

 

My Setup:
Mainboard: ASUS TUF X470-PLUS GAMING
BIOS: Version 6042 from 2022/05/12
CPU: AMD Ryzen 7 5700x
Windows 10 x64 22H2

Sicherheitschip

TPM Console

Windows for business | Windows Client for IT Pros | Devices and deployment | Configure application groups
Windows for business | Windows Client for IT Pros | User experience | Other
0 comments No comments
{count} votes

4 answers

Sort by: Most helpful
  1. S.Sengupta 24,951 Reputation points MVP
    2023-02-16T02:10:37.44+00:00

    Try to configure the certificate template for TPM key attestation.

    TPM Key Attestation


  2. Jens Dittberner 0 Reputation points
    2023-02-16T07:32:56.3133333+00:00

    Sorry but that post applies to Windows Server.

    I'm just using a standalone Windows 10 System.

    0 comments No comments

  3. Jens Dittberner 0 Reputation points
    2023-02-16T08:09:18.5233333+00:00

    To clarify.

    I'm just a standard home user.

    I dont know if I need the TPM attestation ever.

    I was just wondering because my old Ryzen 5 2600 had e EKCert and the Attestation was "Ready". With my new Ryzen 5 5700x its "not supported". Memory is "ready" on both CPUs.

    Does this issue impact Windows 10 or Windows 11 functionality in any standard user case?

    0 comments No comments

  4. Jens Dittberner 0 Reputation points
    2023-02-16T19:15:18.29+00:00

    Is it possible, that this issue could be the reason why my system cant get a certificate?

    https://learn.microsoft.com/en-us/mem/autopilot/known-issues

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.