編集

次の方法で共有

Clear-Tpm

Module:
TrustedPlatformModule Module

Resets a TPM to its default state.

Syntax

Owner Auth (Default) 

Clear-Tpm
    [[-OwnerAuthorization] <String>]
    [-UsePPI]
    [<CommonParameters>]

File 

Clear-Tpm
    -File <String>
    [<CommonParameters>]

Description

The Clear-Tpm cmdlet resets the Trusted Platform Module (TPM) to its default state. A reset removes the owner authorization value and any keys stored in the TPM. To reset a TPM, you must provide a valid owner authorization value. You can enter an owner authorization value or specify a file that contains the value. If you do not provide a value, the cmdlet attempts to use a value stored in the registry.

For more information on TPM, see the Trusted Platform Module Technology Overview in the TechNet library.

Examples

Example 1: Reset TPM

Clear-Tpm

TpmReady           : False
TpmPresent         : True
ManagedAuthLevel   : Full
OwnerAuth          :
OwnerClearDisabled : True
AutoProvisioning   : Disabled
LockedOut          : False
SelfTest           : {191, 191, 245, 191...}

This command resets the TPM. The command uses the owner authorization value stored in the registry instead of specifying a value or using a value in a file.

Example 2: Reset TPM with a supplied authorization value

Clear-Tpm -OwnerAuthorization "vjnuW6rToM41os3xxEpjLdIW2gA="

TpmReady           : False
TpmPresent         : True
ManagedAuthLevel   : Full
OwnerAuth          :
OwnerClearDisabled : True
AutoProvisioning   : Disabled
LockedOut          : False
SelfTest           : {191, 191, 245, 191...}

This command resets the TPM by using the specified owner authorization value.

Example 3: Reset TPM using authorization value from file

Clear-Tpm -File "MyOwnerAuthFile.tpm"

TpmReady           : False
TpmPresent         : True
ManagedAuthLevel   : Full
OwnerAuth          :
OwnerClearDisabled : True
AutoProvisioning   : Disabled
LockedOut          : False
SelfTest           : {191, 191, 245, 191...}

This command resets the TPM by using the owner authorization value included in the specified file.

Example 4: Reset TPM with Physical Presence Interface

Clear-Tpm -UsePPI

TpmReady           : False
TpmPresent         : True
ManagedAuthLevel   : Full
OwnerAuth          :
OwnerClearDisabled : True
AutoProvisioning   : Disabled
LockedOut          : False
SelfTest           : {191, 191, 245, 191...}

This command resets the TPM by using the Physical Presence Interface (PPI). The PPI does not use a value for owner authorization.

Restart the system for the clear action to take effect. The restart might require user input to approve the clear request.

Parameters

-File

Specifies a file that contains the current owner authorization value for the TPM. You can use the TPM Management Console to create this file.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

File
Position:Named
Mandatory:True
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-OwnerAuthorization

Specifies the current owner authorization value for the TPM.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False
Aliases:o

Parameter sets

Owner Auth
Position:1
Mandatory:False
Value from pipeline:True
Value from pipeline by property name:False
Value from remaining arguments:False

-UsePPI

Use the PPI for the TPM reset. Restart the system for the changes to take effect. The restart might require user input to approve the clear request.

Parameter properties

Type:SwitchParameter
Default value:None
Supports wildcards:False
DontShow:False
Aliases:ppi

Parameter sets

Owner Auth
Position:Named
Mandatory:False
Value from pipeline:True
Value from pipeline by property name:False
Value from remaining arguments:False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

Inputs

String

This cmdlet accepts the owner authorization value for the TPM.

Outputs

TpmObject

This cmdlet returns a TpmObject object contains the following information:

  • TpmReady. Whether a TPM complies with Windows Server® 2012 standards.
  • TpmPresent. Whether there is a TPM on the current computer.
  • ManagedAuthLevel. The level at which the operating system manages the owner authorization. Possible values are Legacy, Balanced, and Full.
  • OwnerClearDisabled. Whether TPM can be reset. If this value is True, the TPM cannot be reset through the operating system by using the owner authorization value. If this value is False, the TPM can be reset through the operating system.
  • AutoProvisioning. Whether the computer can use auto-provisioning. Possible values are NotDefined, Enabled, Disabled, and DisabledForNextBoot.
  • LockedOut. Whether a TPM is locked out.
  • SelfTest. Information returned by a test that TPM runs.