How can I repair the PCR7 Chain on a drive moved from a different computer without a clean reinstall

Question

Running the newest Windows 11 Pro 25H2, I moved this drive from an old computer to this one. I don't want to have to reinstall all programs, games from steam and other sources exist on a secondary drive, and I have a third internal blank drive, drive are Boot: 1TB, Games: 4TB, and spare drive: 1TB. I have already rebuilt the bootloader, doesn't fix the PCR7 chain, reset TPM from inside windows, and inside BIOS, still not bindable. Running this MB: B650 GAMING X AX V2 with F39 firmware, latest BIOS firmware. TPM is ASP fTPM. I don't want to lose apps or data, can I just install Windows to the other drive and move the bootfiles, or rebuild the boot files from that system? If not how can I fix this with being as little destructive as possible?

Answer 1

To address the PCR7 chain issue after moving a drive from a different computer, consider the following steps:

1. TPM Configuration: Verify that your TPM is correctly configured in the BIOS. Since you've reset the TPM, ensure it's set to the appropriate mode (like fTPM) and is enabled.
2. Windows Installation on Spare Drive: If you want to avoid a complete reinstall on your current setup, you can install Windows on your spare 1TB drive. After the installation, you can use tools such as bcdboot to transfer boot files from the new installation to the original drive. This may help in resolving the PCR7 binding issue without losing your applications.
3. Backup Your Data: Before making any significant changes, ensure that all important data is backed up to prevent any loss during the process.
4. Microsoft Support: If these steps do not resolve the PCR7 binding issue, it may be beneficial to contact Microsoft Support for specialized assistance, especially regarding your specific hardware configuration and TPM settings.

While it can be difficult to fix the PCR7 chain without a clean reinstall, these steps may help mitigate the issue while preserving your applications and data as much as possible.

Answer 2

Hi Sirius Dark,

Welcome to Microsoft Q&A!

I understand how stressful it is to move your Windows 11 drive to new hardware but PCR7 is Not supported and TPM not binding correctly. This happens because PCR7 relies on Secure Boot keys and TPM measurements that were created on the old motherboard, so the chain breaks after the hardware change.

The path to achieve the results you want is not easy: to find non‑destructive steps to repair the binding without losing apps, Steam games, or data. But we can certainly try, and I'll try my best to help you:

1 - Reset Secure Boot to factory keys

• Enter BIOS > Set Secure Boot Mode = Standard
• Select Restore Factory Keys (PK, KEK, DB, DBX) > Save & reboot
• This forces Windows to receive a clean Secure Boot state

Disclaimer: If you are going to modify BIOS Settings, please back up all your personal files first to ensure you do not lose data. 

2 - Clear the fTPM

• In BIOS > Security > fTPM / TPM > Clear TPM > Confirm and reboot
• This does not remove apps or data, only resets TPM measurements

3 - Rebuild the EFI boot files on the new motherboard

• On a working PC, create the installation media for Windows
• Boot the USB > select Repair your computer > Troubleshoot
• Choose Command Prompt > Run the following one by one:
  • diskpart
  • list vol
• Note down the EFI partition's letter. Or assign one if it has none:
  • select vol <Enter the EFI number here>
  • assign letter=X (X is an example, you can choose any unused letter)
  • exit
• Run: bcdboot C:\Windows /l en-us /s X: /f UEFI (Use the EFI partition letter)

4 - Confirm UEFI + GPT + CSM disabled

• PCR7 cannot bind on Legacy/MBR, so boot into BIOS:
  • Ensure CSM = Disabled
  • Ensure boot mode = UEFI Only
• Run diskpart and list disk in Command Prompt again.
• If the system disk does not show GPT, PCR7 can't bind.
• Do NOT convert MBR to GPT unless you have a backup.

5 - Run an in‑place repair upgrade

• Refer to Reinstall Windows with the installation media - Microsoft Support
• Navigate to the bottom of the page and expand In-place Upgrade.  
• Download the Windows 11 .ISO from Microsoft
• Mount it > run Setup.exe > choose Keep personal files and apps

Disclaimer: An in-place install or in-place upgrade will refresh your Windows files and operating system without removing files or applications. That being said, we always recommend that if you have important data, you should back it up before making large system changes.

If any step seems unclear or you run into a new error, just let me know! We can work through it together.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.