TPM 2.0 UEFI Preboot Interface Test

  • Article

This manual test uses the TrEE UEFI protocol to test interaction with the TPM. The test fails if the system is PCAT and has a TPM 2.0. This test uses UEFI protocols to verify that a TPM is present to test the RNG command in pre-boot, to locate and verify that the TPM2 table tests the Platform Reset Attack Mitigation and UEFI interface, and checks that PCR values do not change when devices are enumerated. It also tests for the TPM extend performance in a preOS environment.

Test details

   
Specifications
  • System.Fundamentals.TPM20.PlatformConfiguration
  • System.Fundamentals.TPM20.PlatformSpecifications
Platforms
  • Windows 10, client editions (x86)
  • Windows 10, client editions (x64)
  • Windows Server 2016 (x64)
Supported Releases
  • Windows 10
  • Windows 10, version 1511
  • Windows 10, version 1607
  • Windows 10, version 1703
  • Windows 10, version 1709
  • Windows 10, version 1803
  • Windows 10, version 1809
  • Windows 10, version 1903
  • Next update to Windows 10
Expected run time (in minutes) 10
Category Compatibility
Timeout (in minutes) 60
Requires reboot false
Requires special configuration true
Type automatic

 

Additional documentation

Tests in this feature area might have additional documentation, including prerequisites, setup, and troubleshooting information, that can be found in the following topic(s):

Running the test

Before you run the test, review the prerequisites in TPM System Fundamentals Testing Prerequisites.

This test requires secure boot debug policy to be installed on Windows RT devices and secure boot to be turned off on non-Windows RT devices.

This test has no additional test parameters.

Troubleshooting

For generic troubleshooting of HLK test failures, see Troubleshooting Windows HLK Test Failures.

For troubleshooting information, see Troubleshooting the Windows HLK Environment.

This test returns Pass or Fail. To review test details, review the test log from Windows Hardware Lab Kit (Windows HLK) Studio. To provide more information for troubleshooting failures in this test, you can enable tracing of the TPM. Refer to the steps provided under the Troubleshooting section in TCG TPM Integration Test (Manual). Investigations also need log files with name like 'tpm*.txt' and console.txt from the 'Documents' folder

To provide more information for troubleshooting failures in this test, you can enable tracing of the TPM. Refer to the steps provided in the TCG TPM Integration Test (Manual).