TPM clear doesnt affect Windows Hello

Question

Hi,

I am using Windows 10 RS5 17713 build and setup windows hello(finger print and PIN) using my microsoft account, My device contains discrete TPM.

I did Clear-TPM to clear everything from TPM, but still i can use my registered fingerprint to login.

Does it mean Clear-TPM doesnt clear Windows Hello container from TPM or TPM is not at all used for windows hello even if device is TPM capable?

Regards,

Pooja

Answer 1

two before months, i was used TPM without fingerprint, on one day i cleared tpm entries  ,  all  passwords and login details are created,

once rebooted windows, i   recreated the password

Answer 2

My observations :

Steps :

1. Set windows Hello with fingerprint and PIN
2. Run Clear-Tpm command
3. system gets rebooted
4. Windows hello finger print reader working , user can still unlock using fingerprint.

Ques 1 : Does TPM entries for windows Hello gets recreated/restored upon reboot?

Steps :

1. Set windows Hello with fingerprint and PIN
2. Run Disable-TpmAutoProvisioning -OnlyForNextRestart
3. Run Clear-Tpm command
4. system gets rebooted
5. Windows hello finger print reader not working , user cannot unlock using fingerprint.
6. Run 'Prepare TPM' from tpm.msc, TPM state changes to Ready
7. user still cannot unlock using fingerprint.
8. Restart Passport container service, it reloads Windows Hello hardare container
9. User can login using fingerprint.

Ques 2 : Does Passport container service restores TPM entries for Windows Hello?