Testing WMI for TPM chip

Win 7 Ts with a group to pre-provision Bitlocker (SCCM 2012 SP1)
The group has a condition to run only if "select * from win32_TPM where IsEnabled Initialvalue="False"
This works fine on HP laptops but testing a Dell Latitude it skips past
Check wbemtest on the laptop I see the class with a value of <null>
so I 've added an extra condition if any of the conditions are true to include initialvalue="<null>"
still skips past the group - I also tried just "null" bit same again
any thoughts ?
Ian Burnell, London (UK)

Thanks for replying Niall. Yes I'm following your article and it works great. It is simply the TS test I need to determine whether to run or skip the "pre-provision Bitlocker" group.
My current test for the group is to test for Win32_tpm where isenabledinitialvalue="false". There is a mix of HP and Dell kit (all bare-metal out of box builds). For HP kit this test works fine i.e. the group runs but for Dell kit it skips the group therefore
evaluating the condition to be false - that's what I need to sort out. When you look in Bios the chip is there but TPM is not enabled or activated hence the steps using the CCTK (or HP Repset) but its just getting the right condition test so that it will run
the group correctly
Ian Burnell, London (UK)

Similar Messages

  • Kernel module for D30 TPM Chip Linux?

    Seems that Linux does not recognize the TPM chip. Could it be that there is no module for it in Linux Kernel? I Thought D30 supports RHEL6?
    Manufacturer: LENOVO
    Product Name: 422916G
    Version: ThinkStation D30
    BIOS Revision: 0.37
    Solved!
    Go to Solution.

    Sorry for the noise. Issue is fixed. Needed to install kernel-modules-extras package for tpm_tis kernel module

  • Could not find the policy in WMI for package

    Hi,
    I am trying to deploy a language pack to a windows 8.1 machine and it is not installing. According to the execmgr.log it cannot find the policy in WMI? I have tried running the machine policy update within CFG MGR but no change. Is there something else
    I can check?
    <![LOG[Policy is updated for Program: InstallEN, Package: LIA002A0, Advert: LIA2011A]LOG]!><time="09:47:18.345+300" date="01-28-2015" component="execmgr" context="" type="1" thread="980"
    file="execreqmgr.cpp:7063">
    <![LOG[Raising client SDK event for class CCM_Program, instance CCM_Program.PackageID="LIA002A0",ProgramID="InstallEN", actionType 45l, value NULL, user NULL, session 4294967295l, level 0l, verbosity 30l]LOG]!><time="09:47:18.347+300"
    date="01-28-2015" component="execmgr" context="" type="1" thread="980" file="event.cpp:405">
    <![LOG[Mandatory execution requested for program InstallEN and advertisement LIA2011A]LOG]!><time="09:47:19.220+300" date="01-28-2015" component="execmgr" context="" type="1" thread="3684"
    file="execreqmgr.cpp:3527">
    <![LOG[Creating mandatory request for advert LIA2011A, program InstallEN, package LIA002A0]LOG]!><time="09:47:19.220+300" date="01-28-2015" component="execmgr" context="" type="1" thread="3684"
    file="execreqmgr.cpp:3653">
    <![LOG[Could not find the policy in WMI for package LIA002A0 program InstallEN]LOG]!><time="09:47:19.242+300" date="01-28-2015" component="execmgr" context="" type="2" thread="3684" file="softdistpolicy.cpp:2851">
    <![LOG[CreateMandatoryRequestRecursively failed at FindUserOrSystemPolicy InstallEN]LOG]!><time="09:47:19.243+300" date="01-28-2015" component="execmgr" context="" type="2" thread="3684"
    file="execreqmgr.cpp:3670">

    Did you check this
    post?
    It turned out the root cause of the problem was one of the packages that the TS called.  Even though SCCM had been set to use the selected distribution points and said the package was installed on those DPs, it hadn't actually copied the files over.
     Updating to a new source version and ensuring the files copied correctly resolved the issue.  Hopefully SCCM 2012 will do a better job of communicating a dependency problem, but I haven't had a chance to test it yet.
    You can also check this
    post.
    it appears the majority of these messages occur when you have a system that has an expired advertisement still being applied to it. 
    Nick Pilon | Blog : System Center Dudes

  • How do I find out if my laptop has the TPM chip on the motherboard?

    Hi,
    Laptop model - HP Pavilion dv9260us.  Product ID - RP243UA#ABA  SR No - CNF7134YJK
    OS - Windows Vista Ultimate Build 6002.
    I downloaded and installed the Bitlocker from Windows Extras for Vista ultimate under Windows Update. I got a message stating:
    A TPM was not found.  A TPM is required to turn on Bitlocker.  If your computer has a TPM, then contact the computer manufacturer for Bitlocker-compatible BIOS.  Currently, I have BIOS version F.2E
    Thanks.
    Pedhambe
    This question was solved.
    View Solution.

    Hi:
    I would not have any idea how you would go about getting a TPM chip added to the motherboard, or if it is even possible.
    I am not a PC repair tech or electronics technician by trade.
    If your work requires the need of a TPM chip, I would recommend you purchase an off lease or new HP business notebook, and make sure the model you want comes with one.
    I know the Elitebook notebook models do, and the old ncXXXX models do.
    Some of the Probook models have them too, but not all of them.

  • Script to locate if systems has a TPM chip and it's status if it does.

    I am looking for a script that would scan AD for a list of computers and then query them to see if they have a TPM chip and then what the status of each one is.
    I have been looking around and so far haven't come across one. Any help would be really appreciated for this scripting noob.
    Edited: I also have SCCM and ConfigureSoft's ECM in my company, so maybe those could be leveraged to do this but i haven't found the way to do it yet either.

    Hi,
    Here is a function I wrote to help identify the TPM and check its status.
    The problem is, most TPM's come from the fasctory turned OFF. If that is the case,
    Your computer will not know if it has one or not.
    Turning the TPM on requires at least one reboot and possibly two or three.
    I have a bunch of vbScripts I wrote that will check to see if the TPM is;
    1. Enabled
    2. Activated
    3. Owned
    Function ChkTPM {
    $NOW = (Get-Date)
    #check TPM version #. Must be 1.2
    $strComputer = "."
    $TPMOn = $False
    $colItems = Get-WmiObject -class Win32_Tpm -namespace "root\CIMV2\Security\MicrosoftTpm" -computername $strComputer
       foreach ($objItem In $colItems) {
         Write-Host "SpecVersion: $objItem.SpecVersion"
         $SpecVersion = [string]($objItem.SpecVersion)
     If ($SpecVersion -match "1.2") {
      Write-Host "TPM is version 1.2"
      Set-ItemProperty -path $path -name "TPM_Version" -Value "1.2"  | Out-Null
      Add-Content $strLogDirFile -Value ("$NOW  TPM is version 1.2")
     Else {
       Write-Host "TPM is NOT version 1.2."
      Set-ItemProperty -path $path -name "TPM_Version" -Value $SpecVersion | Out-Null
      Add-Content $strLogDirFile -Value ("$NOW TPM is NOT version 1.2")
      Break
    #Check if TPM is enabled and Activated
    $path="HKLM:\SOFTWARE\Medtronic\Encryption"
    $colItems = Get-WmiObject -class Win32_Tpm -namespace "root\CIMV2\Security\MicrosoftTpm" -computername $strComputer
    foreach ($objItem in $colItems) {
     $a = $objItem.IsEnabled()
     $b = $objItem.IsActivated()
     $c = $objItem.IsOwned()
     $TPMOn = $True 
     Set-ItemProperty -path $path -name  "TPM-On" -Value "True   $NOW "| Out-Null
      If ($a) {
        Write-Host "TPM Is Enabled:  $a"
       Set-ItemProperty -path $path -name "TPM_Enabled" -Value "True  $NOW "| Out-Null
       Add-Content $strLogDirFile -Value ("$NOW   TPM_Enabled True")
      Else {
       Set-ItemProperty -path $path -name "TPM_Enabled" -Value "False $NOW" | Out-Null
       Add-Content $strLogDirFile -Value ("$NOW   TPM_Enabled False")
      If ($b) {
        Write-Host "TPM Is Activated:  $b"
       Set-ItemProperty -path $path -name "TPM_Activated" -Value "True  $NOW" | Out-Null
       Add-Content $strLogDirFile -Value ("$NOW   TPM_Activated True")
      Else {
       Set-ItemProperty -path $path -name "TPM_Activated" -Value "False $NOW"  | Out-Null
       Add-Content $strLogDirFile -Value ("$NOW   TPM_Activated False")
      If ($c) {
        Write-Host "TPM Is Owned:  $c"
       Set-ItemProperty -path $path -name "TPM_Owned" -Value "True  $NOW" | Out-Null
       Add-Content $strLogDirFile -Value ("$NOW   TPM_Owned True")
      Else {
       Add-Content $strLogDirFile -Value ("$NOW   TPM_Owned False")
       Set-ItemProperty -path $path -name "TPM_Owned" -Value "False $NOW" | Out-Null
    If ($TPMOn = $False) {
        Add-Content $strLogDirFile -Value ("$NOW   Trusted Platform Module may be turned off")
     Write-Host "Trusted Platform Module may be turned off"
     Set-ItemProperty -path $path -name "TPM_Enabled" -Value "TPM Is Not Enabled in BIOS $NOW" | Out-Null
     Start-Sleep 5
     Break

  • Need to determine if TPM chip is installed on HP Pavilion g6

    Greetings. Please kindly advise if HP Pavilion g6 - 1317AX comes with a TPM chip installed.
    I’m using Win 7 54 bit Ultimate and wish to run Bitlocker with TPM.
    Many thanks in advance for your assistance.
    This question was solved.
    View Solution.

    Hi,
    No, no TPM chip on your computer.
    Regards.
    BH
    **Click the KUDOS thumb up on the left to say 'Thanks'**
    Make it easier for other people to find solutions by marking a Reply 'Accept as Solution' if it solves your problem.

  • Does Macbook Pro (retina) have TPM chip  ?

    Hello everyone
    i would like to purchase one new macbook pro. just want to know if new pro has TPM chip on motherboard by default?
    Thanks a lot for help
    Qian

    Apple has not included TPM in its hardware for years. It was not used for anything when they did.
    "TPM DRM" In Mac OS X: A Myth That Won't Die

  • Thinkcentr​e M82 TPM Chip.

    Hello All,
    Has anyone have any experience enabling the TPM Chip that is on M82 2929s? I need to encrypt a load of machines using bitlocker but when I go through the set, I get an error message that tells me there isn't a TPM chip availiable. The specs on the M82s I have say there should be a TPM, but even when I go into the BIOS I cannot find any mention of a TPM!
    Have I missed something? Any help would much most appreciated! 

    The specs on a GTX 970 are:
    145   Graphics Card Power (W)
    500   Minimum System Power Requirement (W)
    2x 6-pins   Supplementary power connectors
    Even with an upgraded power supply, the case doesn't have the air flow to cool a card like this.   In addition, the BIOS probably won't recognize and support this model of graphics card.   ThinkCentres are business class computers, if you're wanting a gaming computer worthy of a GTX 970, best to start with a computer designed for gaming. 

  • Yoga 2 TPM chip?

    Hello, does the Yoga 2 have a TPM chip? The original Yoga does not. I can't seem to find any documentation on that.
    thank you
    ~ Luiz

    I'm trying to turn on bitlocker. Can someone confirm that the BIOS has TPM or not. My research tells me it does not but I'm looking for confirmation. I don't want to have to have a USB stick plugged in to boot. So bitlocker will not work? Thanks!
    Moderator Note; subject edited; post merged in. Was; Yoga 2 pro with Windows 8.1 pro

  • TPM chip and ESXi 5.5

    Hello,
    I have question about proper enabling TPM functionality in VMWare.
    I installed TPM chip in Cisco blade UCS B200-M3 and I enabled TXT and TPM functionality in BIOS according to Cisco user manual.
    Blade rebooted with no problems and bios does show TPM configured (attached screenshot).
    Unfortunately I can not figure out how to enabled TPM functionality in VMWare.
    The esxcli command shows lack of TPM:
    # esxcli hardware trustedboot get
       Drtm Enabled: false
       Tpm Present: false
    The query "QueryTpmAttestationReport" in webinterface of the ESXi and vCenter
    does not show any PCR entries (screenshot attached). In addition bios shows entry "TPM Owner status: unowned".
    I can not find any option/setting in vCenter or ESXi to manipulate with TPM functionality.
    I searched through KBs in Cisco and VMWare and I can not find any specific information about troubleshooting TPM in ESXi or vCenter. 
    I would appreciate some help in this matter.
    Thank you,
    Robert

    The minimum version, for both Windows 8 and 8.1, is ESXi 5.1
    To upgrade, you need to upgrade at least one of your hosts to ESXi 5.1. To manage that host with vCenter, you will need to upgrade vCenter to 5.1 as well, which will manage your ESXi 5.0 and 5.1 hosts. See the following link for interoperability: http://partnerweb.vmware.com/comp_guide2/sim/interop_matrix.php
    Here is the link to upgrade a host to ESXi 5.1:
    http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2032757
    Here is the link to upgrade from vCenter 5.0 to 5.1:
    http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2032283
    I strongly recommend you use the VMware Interoperability Guide, in case you have older ESXi hosts (i.e. 3.5) that will no longer be managed when you move to vCenter 5.1.
    Hope that helps.

  • Test WMI connection

    Hello. I've been reading quite a bit about testing WMI connections towards remote computers, but I haven't quite found the answer I am looking for.
    What I am going to do is several gwmi calls against all the computers in the domain. This will surely lead to several "The RPC server is unavailable" error messages as all computers will not be powered on and some "No Access" messages.
    Since my script includes several gwmi calls for each computer I want to test the gwmi connectivity against each computer before I run all the gwmi calls. I want this test do be done as quickly as possible.
    Some pages I've visited suggests using "Test-Connection", but that doesn't test towards for example "No Acces" does it?
    I've found this (see code below) and I'm wondering if that is the best way to do it:
    $wmi = gwmi win32_bios -ComputerName $pc-ErrorAction SilentlyContinue
    if ($wmi)
        #put all wmi calls here.
    Kind regards,
    Nils Rune

    Hi, I try to use your script
    $ping = New-Object System.Net.NetworkInformation.Ping
    $Reply = $ping.send($strComputer)
    if ($Reply.status –eq “Success”) 
    { $WS.Cells.Item($row, 2) = "Online"
     try {
     $results = Test-Connection $strComputer
     If ($results) {
     $ws.rows.Item($row).Font.ColorIndex = "5"
     $WS.Cells.Item($row,3) = "WMI OK" } 
     Else {
     $ws.rows.Item($row).Font.ColorIndex = "3"
       $WS.Cells.Item($row,3) = "WMI Failed" }
     catch
        Write-Host "Test-Connection Failed"
     Else { 
     $WS.Cells.Item($row, 2) = "Does Not Ping"
     $ws.rows.Item($row).Font.ColorIndex = "3"
    BUT at the first line, I added this parameter to specify that the script has to read the computer'name
    from a TXT file :
    $strComputer = Get-Content "C:\Temp\ComputersList.txt"
    When I run the script, I got the error : "You cannot call a method on a null-valued expression" Do you
    have an idea please ?
    Thank you

  • TPM-chip in MacBook Air mid-2011

    Hello,
    Can someone confirm that the new models still lack a TPM-chip.

    It does not appear in the System Information hardware list for my 1.8 GHz i7 with 256 GB SSD.

  • TPM chip?

    Does anyone know if the 2008 iMac 24" has a TPM chip? Windows/Boot Camp is telling me the computer has no TPM. If it does, where can I find a driver for this?
    Thanks!

    Dunno if anyone ever responded to you or if you got the info else where, however from what I know, macs do not have TPM chips inside. You will mostly find these chips in Business or Industrial class desktop/laptop hardware. TPM has not really taken off in the consumer world just yet.

  • TPM chip on a Kirabook

    Is there a TPM chip i the Kirabook? I do not see any options for enabling it and searching online has been fruitless. I use my machine for work and a TPM is pretty much a given to ensure this machine remains ultra portable instead of covered in dongles just to work.

    You may want to contact KIRA Platinum Service & Support's customer support by phone, text or live chat.
    - Peter

  • Pavilion dv7-3065dx .... does it have support for TPM 1.2?

    Hello all,
    I'm trying to use BitLocker on my machine. My understanding is that some machines have hardware support for something called the Trusted Platform Module, or TPM for short.
    Can some kind soul please tell me if my machine has a TPM chip? I've looked everywhere for either confirmation or denial.
    My machine: HP Pavilion dv7-3065dx
    Your help is greatly appreciated!

    The Western Digital or the Seagate 2.5 1tb hard drive will not fit two reasons one since it is a thicker drive the conecter (sata) do not align second you wont be able to put back the cover  please see the pictures took a few pictures of segate's 1tb 2.5 removed it from a freeagent go portable
     http://img687.imageshack.us/img687/96/dscf0046i.jpg
    http://img695.imageshack.us/img695/5775/dscf0045s.jpg
    http://img691.imageshack.us/img691/3158/dscf0044x.jpg
    http://img696.imageshack.us/img696/784/dscf0043g.jpg
    http://img690.imageshack.us/img690/3296/dscf0042fl.jpg
    http://img696.imageshack.us/img696/2115/dscf0041k.jpg
    http://img696.imageshack.us/img696/3748/dscf0040u.jpg
    http://img199.imageshack.us/img199/2262/dscf0039ib.jpg
    http://img690.imageshack.us/img690/7085/dscf0038r.jpg
    http://img690.imageshack.us/img690/7329/dscf0037e.jpg

Maybe you are looking for