Enables TPM auto-provisioning.


Enable-TpmAutoProvisioning []


The Enable-TpmAutoProvisioning cmdlet enables Trusted Platform Module (TPM) provisioning to occur during auto-provisioning. Provisioning is the process of preparing a TPM to be used. You can use the Disable-TpmAutoProvisioning cmdlet to prevent auto-provisioning, either permanently or for the next restart.

For more information on TPM, see the Trusted Platform Module Technology Overviewhttp://technet.microsoft.com/en-us/library/jj131725.aspx in the Technet library at http://technet.microsoft.com/en-us/library/jj131725.aspx.


Example 1: Enable auto-provisioning

PS C:\> Enable-TpmAutoProvisioning

TpmReady           : False
TpmPresent         : True
ManagedAuthLevel   : Full
OwnerAuth          : OwnerClearDisabled : True
AutoProvisioning   : Enabled
LockedOut          : False
SelfTest           : {191, 191, 245, 191...}

This command enables auto-provisioning for the current computer.



A TpmObject object contains the following information:

  • TpmReady. Whether a TPM complies with Windows ServerĀ® 2012 standards.
  • TpmPresent. Whether there is a TMP on the current computer.
  • ManagedAuthLevel. The level at which the operating system manages the owner authorization. Possible values are Legacy, Balanced, and Full.
  • OwnerClearDisabled. Whether TPM can be reset. If this value is True, the TPM cannot be reset through the operating system by using the owner authorization value. If this value is False, the TPM can be reset through the operating system.
  • AutoProvisioning. Whether the computer can use auto-provisioning. Possible values are NotDefined, Enabled, Disabled, and DisabledForNextBoot.
  • LockedOut. Whether a TPM is locked out.
  • SelfTest. Information returned by a test that TPM runs.