Ryzen TPM issue is widespread, but not a problem for home users

[Brooke]

I built two Ryzen systems over the past couple of weeks.

I ran into an issue in Windows 11 where everything would work, but in security processor details, reports "Attestation not supported".  This is on both new builds:  (1) Ryzen 3700x, Gigabyte x570 Aorus Elite motherboard; and (2) Ryzen 5800xt, MSI B550-A Pro motherboard.

They have latest bios, fresh win11 installs, TPM enabled and reporting OK in bios, TPM cleared in both bios and Win 11.  I spent A LOT of time debugging this before seeing on the net lots of people reporting the same "attestation not supported" for various Ryzen processors.

It doesn't affect my use of Windows 11 pro, including my use of Bitlocker.  But, attestation should work and might be important for some corporate installs who use software that uses the attestation.

Although I don't see any official replies from AMD, supposition is that there is a TPM bug in a lot of Ryzen models, but that it will get fixed in future bios patches.

This is not the "stuttering" bug reported by Ryzen users a while back, which I think is mostly fixed in recent bios versions.  It is a different issue.

[AKIron]

Do you still get the error if you disable TPM in the bios? Assuming you aren't using bitlocker. I'm not suggesting a fix or even a workaround. Just wondering.

[Brooke]

Do you still get the error if you disable TPM in the bios? Assuming you aren't using bitlocker. I'm not suggesting a fix or even a workaround. Just wondering.

In that case, the TPM isn't used, and in windows I think you'll see under "device security->security processor details" that there is no TPM available.

I'm not sure if you can install win11 without TPM enabled.  Once it is installed, I think you can turn it off as long as not using Bitlocker.

I'd still keep in enabled, though, as I don't think there a downside to having it on, even if not using Bitlocker.

[AKIron]

In that case, the TPM isn't used, and in windows I think you'll see under "device security->security processor details" that there is no TPM available.

I'm not sure if you can install win11 without TPM enabled.  Once it is installed, I think you can turn it off as long as not using Bitlocker.

I'd still keep in enabled, though, as I don't think there a downside to having it on, even if not using Bitlocker.

You can defeat the CPU requirement still but maybe not the TPM now. You can turn off TPM after installing/upgrading to Win 11 (I have) and I read today you can even use bitlocker without TPM. Requires using a password instead of pin. I'm just wondering if the error occurs with TPM off. No error for me on my machines so I can't test. Non issue really was just curious. 

The large majority of machines the company I work for supports are intel so we may not see the issue. That could change in the coming months when win 10 is deprecated and new machines are bought. AMD is a more reliable player now and Intel less so.

[AKIron]

This year many businesses will have to retire machines not officially compatible with Win 11. Or pay for the continued support. A lot of new machines will be bought. ARM may see big gains. Sony lost with Betamax. They made a comeback with Blu-Ray. RISC may yet beat out CISC.

[icepac]

This year many businesses will have to retire machines not officially compatible with Win 11. Or pay for the continued support. A lot of new machines will be bought. ARM may see big gains. Sony lost with Betamax. They made a comeback with Blu-Ray. RISC may yet beat out CISC.

What about VLIW?