UNSOLVED
Dell Latitude 7275 TPM - BIOS issue
Hi everyone,
I recently acquired a Latitude 7275, everything was working fine, but when I updated to BIOS XPS_9250_Latitude_7275_1.1.29 released on the 9/5/17 it broke my TPM 2.0 implementation.
I had suspended Bitlocker before the update but on reboot, it kept asking me for the Bitlocker recovery key, I then had to disable Bitlocker completely.
After that i could not enable it back again, it kept saying "internal error", I was using DellTpm2.0_Fw1.3.2.8_V1_64
I then noticed that the latest BIOS was removed from the support page.
I reset windows 10 to no avail. I then decided to downgrade the TPM, I read this page http://en.community.dell.com/techcenter/enterprise-client/w/wiki/11850.how-to-change-tpm-modes-1-2-2-0 checked the Manufacturer ID and it is the same.
I updated the TPM to DellTpm1.2_Fw5.81.2.1_V3_64, and as soon I rebooted the system I was able to enable the 1.2 TPM and enable Bitlocker.
I then decided to suspend the Bitlocker and update back to TPM 2.0, but on reboot it sows and error: "Failure due to FW update policy"
I then downgrade to BIOS XPS_9250_Latitude_7275_1.1.27 and tried the TPM upgrade again, but still no luck.
Can someone shed some light on the issue please, I am at a loss.
Am I missing anything using TPM 1.2 or will it be incompatible with future BIOS versions?
Any help would be much appreciated!
Kind regards
Hi Jesse,
Thank you for your quick reply, I do have the BIOS set to UEFI and Secure Boot on, like I said I had no problem downgrading to TPM 1.2, and I CAN enable bitlocker.
My main concern now is that I cannot upgrade back to TPM 2.0 now, it gives an error regarding FW update policy, I wonder if its a BIOS limitation.
I read this post www.dell.com/.../how-to-switch-the-tpm-version and it states that the DELL Latitude 7275 should not be able to downgrade to TPM 1.2 which is not true, because I have managed to do it, and it is working fine.
This Knowledge Base post contradicts this post en.community.dell.com/.../11850.how-to-change-tpm-modes-1-2-2-0 because the manufactoring ID and everything matches.
I am at a loss why I cant update back to Tpm 2.0
Jesse L (retired)
10 Wizard
•
17898 Posts
•
69016 Points
3556
0
Posted May 17th, 2017 05:00
JPDiablo.
I just got this information.
Dell IPS Engineers are engaged and working towards new releases for systems BIOS. The new BIOS should be released before the end of May
Jesse L (retired)
Thanks Jesse L,
That its good to know, they released yesterday BIOS XPS_9250_Latitude_7275_1.1.31 that fixes:
- Updated Intel ME Firmware to address security advisory CVE-2017-5689 / INTEL-SA-00075.
- Resolved TPM BitLocker initialization issue reported on BIOS revision 1.1.30
I am afraid thought that in my rush to resolve the issue I downgraded to TPM 1.2 using this file:
<ADMIN NOTE: Broken link has been removed from this post by Dell> (DellTpm1.2_Fw5.81.2.1_V3_64) but now i cant upgrade back to 2.0 using this firmware upgrade www.dell.com/.../DriversDetails (DellTpm2.0_Fw1.3.2.8_V1_64)
It starts the update after reboot but then errors saying, Failed: Blocked due to TPM FW upgrade policy.
Is there any chance to ask the engineers to allow upgrade/downgrade of TPM on the BIOS for the latitude 7275?
Thanks again for your time spent on this issue!
Jesse L (retired)
10 Wizard
•
17898 Posts
•
69016 Points
3556
0
Posted May 15th, 2017 09:00
jpdiablo,
Below are knowledge base articles that reference TPM on your system.
BitLocker cannot be enabled when you change the Boot sequence to Legacy mode
Jesse L (retired)