如果您有启用TPM的笔记本电脑或 PC，并且您在Windows Defender 安全中心^{(Windows Defender Security Center)}收到一条消息，告诉您需要更新安全处理器或TPM固件，那么您应该优先更新它。在本指南中，我将分享如何清除 TPM^{(Clear TPM)}和更新 TPM 安全处理器固件^{(Update TPM security processor firmware)}。

什么是 Windows 11/10 中的 TPM

如果您不知道，TPM 或 可信平台模块^{(Trusted Platform Module)} 是端点设备上的专用芯片。它可以存储特定于主机系统的RSA加密密钥以进行硬件验证。^(RSA)TPM芯片还拥有一个称为背书密钥^{(Endorsement Key)}的RSA密钥对。该对保存在芯片内部，无法通过软件访问。简而言之，它可以在芯片中存储包括指纹、面部^(Facial)数据等关键数据，并且不易访问。

如何更新TPM安全处理器固件

TPM的更新通常包含一个针对可能影响操作系统安全的安全漏洞的补丁。此更新将解决您需要下载和安装的漏洞。固件更新也可能由OEM发送，与^(OEMs)Windows 更新^{(Windows Update)}相比，它们通常更快。 

下载并安装 Windows 更新

这是更新TPM^(TPM)的最佳方式。因此，如果您已将更新设置为手动模式^{(update to manual mode)}，请检查您是否有更新以及是否包含安全补丁。如果是自动更新，它将下载并安装。当您在操作中心^{(Action Center)}看到要求您重新启动计算机的通知时，您会有所了解。

这是一个小警告。在安装 Windows 操作系统更新之前，不要应用来自 OEM 的 TPM 固件更新。Windows 将无法确定您的系统是否受到影响。^{(Here is a small warning. Do not apply TPM firmware update from OEMs before installing the Windows operating system update. Windows will be unable to determine if your system is affected.)}

由 OEM 安装固件更新

包括Microsoft在内的许多OEM^(OEMs)都单独提供固件更新^{(Firmware Updates)}。如果TPM固件更新未包含在Windows Update中，则您必须手动下载并应用它。以下^(Below)是您可以下载更新的OEM列表。^(OEMs)您可以随时从这里查看您的制造商。^(here.)

• 微软表面设备^{(Microsoft Surface Devices)}。
• 宏碁
• 富士通^(Fujitsu)
• 惠普客户支持^{(HP Customer Support)}
• 惠普企业支持^{(HP Enterprise Support)}
• 联想^(Lenovo)
• 松下^(Panasonic)
• 东芝^(Toshiba)

如何清除 TPM

通过Windows 更新^{(Windows Update)}或OEM网站安装固件更新后，您还需要清除TPM。这对于确保数据安全非常重要。

在您继续并按照步骤操作之前，请确保备份您的TPM数据，以便您以后可以恢复它们。清除TPM会将您的安全处理器重置为其默认设置。此外，重要的是，除非您拥有 PC，否则您根本不应该这样做。如果您在此处看到一条消息 -重置您的安全处理器以修复功能问题^{(Reset your security processor to fix functionality issues)}，则可能需要这样做。

要清除您的TPM，请按照以下步骤操作：

转到开始 > 设置 > 更新和安全 > Windows 安全 >设备安全。^{(Device security. )}这将启动Windows Defender 安全中心^{(Windows Defender Security Center)}。

再次选择设备安全^{(Device Security)}，然后在安全处理器^{(Security processor)}下，选择安全处理器详细信息^{(Security processor details)}。

在下一个屏幕上，选择安全处理器故障排除^{(Security processor troubleshooting)}，然后在清除 TPM^{(Clear TPM)}下单击清除 TPM^{(Clear TPM)}按钮。

这会将您的安全处理器重置为其默认设置。

在该过程完成之前，您的设备需要重新启动。

使用 PowerShell 清除 TPM

Clear-Tpm cmdlet 将受信任的平台模块重置为其默认^{(Trusted Platform Module)}状态，并删除所有者授权值和存储在TPM中的任何密钥。

Clear-Tpm

此命令使用存储在注册表中的所有者授权值，而不是指定值或使用文件中的值。您可以在docs.microsoft.com上阅读更多相关信息。

希望这可以帮助！

How to Update and Clear TPM security processor firmware

If you have a TPM-enabled lаptop or PС, and you are receiving a message in Windows Defender Security Center telling уou that you need to update уour security prоcessor or TPM firmware, then you ѕhould update it on рriority. In this guіde, I will share how you сan Clear TPM & Update TPM security processor firmware.

What is TPM in Windows 11/10

In case you do not know, TPM or Trusted Platform Module is a specialized chip on an endpoint device. It can store RSA encryption keys specific to the host system for hardware authentication. The TPM chip also holds an RSA key pair called the Endorsement Key. The pair is maintained inside the chip and cannot be accessed by software. In short, it can store crucial data including Fingerprints, Facial data, etc. in the chip, and it’s not easily accessible.

How to Update TPM security processor firmware

The update for TPM usually holds a patch for a security vulnerability which can impact operating system security. The update will address the vulnerability which you will need to download and install. It is also possible that firmware updates are sent by OEMs which are usually faster compared to Windows Update. 

Download & install Windows Updates

This is the best way to update your TPM. So in case you have set your update to manual mode,  check if you have an update and if it includes a security patch. In case of the automatic update, it will download and install. You will get an idea when you see a notification in Action Center asking you to restart your computer.

Here is a small warning. Do not apply TPM firmware update from OEMs before installing the Windows operating system update. Windows will be unable to determine if your system is affected.

Install Firmware updates by OEMs

Many OEMs including Microsoft offer Firmware Updates separately. If TPM firmware update was not included in Windows Update, you would have to manually download, and apply it. Below is the list of OEMs from where you can download the update. You can always check your manufacturer from here.

• Microsoft Surface Devices.
• Acer
• Fujitsu
• HP Customer Support
• HP Enterprise Support
• Lenovo
• Panasonic
• Toshiba

How to clear TPM

Once you have installed the firmware update either through the Windows Update or from the OEM website, you will also need to clear your TPM. This is important to make sure that the data is secured.

Before you go ahead, and follow the steps, make sure to backup your TPM data so that you can restore them later. Clearing your TPM will reset your security processor to its default settings. Also, it’s important that unless you own the PC, you should not do it at all. This may be needed if you see a message here – Reset your security processor to fix functionality issues.

To clear your TPM, follow the steps below:

Go to Start  > Settings  > Update & Security  > Windows Security > Device security. This will launch the Windows Defender Security Center.

Select Device Security again, and then under Security processor, select Security processor details.

On the next screen, select Security processor troubleshooting, and then under Clear TPM click on the Clear TPM button.

This will reset your security processor to its default settings.

Your device will need to restart before the process is complete.

Clear TPM using PowerShell

The Clear-Tpm cmdlet resets the Trusted Platform Module to its default state and removes the owner authorization value and any keys stored in the TPM.

Clear-Tpm

This command uses the owner authorization value stored in the registry instead of specifying a value or using a value in a file. You can read more on this at docs.microsoft.com.

Hope this helps!

Related posts

• 什么是Windows 10中的Control Flow Guard - 如何打开或关闭它

• Windows Defender的：此设置由您的管理员管理

• Error 0x800106ba，Windows Defender Application未能初始化

• 如何手动扫描单独的文件和使用Microsoft Defender

• 您的IT administrator已禁用Windows Security

• 在Windows 10启用或打开Microsoft Defender的通知

• 您的Virus & threat protection由您的组织管理

• 使用ConfigureDefender立即更改Windows Security设置

• 在Windows Defender启用和配置Ransomware Protection

• 如何在Windows 10中清除Windows Defender Protection History

• 如何在Windows 10的Exploit Protection中添加或排除应用程序

• Windows Defender Threat Service已在Windows 10中停止

• 在Windows 10上Windows Defender无法打开

• 使用Group Policy & PowerShell配置受控Folder Access

• 什么是Windows 10中的Account Protection以及如何隐藏此部分

• 视窗Defender Application Guard Extension为Chrome & Firefox

• Fix Windows Defender Error 0x800b0100在Windows 10上

• 如何打开Windows Security Center在Windows 10

• 在Windows 10中转ON or OFF基于信誉的保护设置

• Windows 10中的Remove Windows Defender Notification Icon