TPM Update in Optiflex 7010

---

@AZBigdog wrote:

if there was a way to update the TPM version from 1.2 to 2.0? 

 

---

First, this machine is very old. Not sure I would be entrusting it to anything important enough for TPM use.

I doubt it. Only way would be with BIOS updates.

Oh I know it is ancient, it was only like $20 at a garage sale so figured it would be just something to play around with. I was just curious if there was a way to update the TPM specs on it. There was a BIOS update but that didn't address it.

Its not even ACPI 2.0 nor secure boot UEFI so no. This is NEVER an option.

These models will run 32 bit XP so they are legacy and end of life.

I am currently running Windows 10 64-Bit just fine on the machine.

I too have a Optiplex 7010 computer, and I have Windows ten Pro running just fine even though Microsoft 

said this computer wouldn't  run Win. 10. I see in the bios that TPM is not enabled and wondered if I enabled it

would that have any effect as to weather I could run Win. eleven .What are your thoughts about that?

1.2 is sufficient.

Microsoft has changed its tune due to complaints from government contracts about requiring newer hardware.

New minimum requirements for windows 11

I too, have Win10 Pro on a 7010.  It does too have UEFI Secure Boot.

Good thread here! 

I also have an Optiplex 7010 (Mini-Tower) and have been dual-booting Win 7 Pro 64-bit and Win 10 Pro 64-bit (originally Win 8.1 Pro 64-bit) for at least five years now. My Win 10 is currently v 21H1.

I have 16GB of RAM and three HDDs.  No SSDs yet.  My CPU is Intel Core i5-3470 CPU @ 3.20GHz (an Ivy Bridge CPU). 
I am booting UEFI but NOT Secure Boot.  Also, as this is a home machine, I do NOT have to type a password when I log on.

So - what exactly must I change to make Win 11 work on this machine? 

Thanks.  Hey speedstep - reduce the caffeine, man.

The OptiPlex 7010 is one of the first Dell systems to have a UEFI BIOS with Secure Boot. However it was an early implementation of Secure Boot and needs the latest BIOS Update for it to work reliably.

That being said, there was a major GRUB2 Security Exploit "Hold in the Boot" in 2020 and the last BIOS Update for this model is in 2018. Therefore it is likely that Microsoft may reject this outdated "Insecure" version of "Secure Boot".

The system has a TPM but its likely to be an older implementation 1.2 and not Enabled by default.

You should be able to enable the older versions of these technologies in the UEFI BIOS setup once the BIOS is updated.

The system will lack the:

• Processor Generation (3rd vs 8th)
• TPM 2.0 (likely 1.2)
• UEFI + Secure Boot (Older version of Secure Boot)

Microsoft have re-released the Windows 11 PC Health Check App for Windows Insiders:

https://aka.ms/GetPCHealthCheckInsiders 

However it does not distinguish between so called Yellow (systems which lack the processor generation and TPM 2.0) and Red systems.

The Windows 11 Build 22000 Beta Channel Installation ISO performs an additional PC Check after the Product Key screen and before the Drive Options Screen. This blocks Red Systems (e.g. the OptiPlex 790 below which does not have Secure Boot) but does not show up on Yellow or Green Systems.

The Windows 11 Insider Preview ISO is available here:

https://docs.microsoft.com/en-us/windows-insider/isos 

Note the install.wim in the ISO exceeds 4.0 GB which means you need to make a USB with a FAT32 Boot Partition and an NTFS Install Partition in order to pass Secure Boot and install respectively. If you are nto ready to install Windows 11 Insider Preview just yet and have a spare USB, you can test it up until the Drive options screen (which will leave your current installation untouched) and give a better indication whether or not it is classified as a Yellow system or a Red system.

For more details on making the Bootable USB see my forum post here:

https://www.dell.com/community/Windows-11/Windows-11-System-Requirements-Update/m-p/8028404 

Dr. Yip - Thanks for detailed post.

Could you provide some links that will show me me how -- on my existing Optiplex 7010 described above -- I can install and try Win 11 on a new Hyper-V virtual machine.  I've never tried any virtual machine, but it would be fun to learn.

Looks like Microsoft is being stringent about their TPM 2.0 requirement, including in virtual machines.  https://www.google.com/amp/s/www.techspot.com/amp/news/91305-microsoft-confirms-windows-11-requires-tpm-20-all.html 

While the 7010 SFF does have UEFI and secure boot, you're correct in that it has an older CPU Gen and TPM 1.2.  I'm curious if the SFF board can take a TPM2.0 module though.  On the SFF board (but not the MT or others) there's a 14-pin connector next to the 4-pin power connector.  It's clearly visible in the board images in the SFF manual).  It also has a key-pin on pin 11, which is pretty common for TPM modules, and it directly next to what looks to be the built-on TPM chip.

It may not matter if BIOS doesn't support it, but the the BIOS may not care about version.  It just seems to select if it's enabled or not.  Who knows?  Any idea if that 14-pin header is for TPM, or what it's pinout might be?

Excuse typo: "hit F12 and choose F12" should say "hit F12 and choose usb".

I've got windows 11 running fine on my Optiplex 7010 with i5-3470. UEFI mode, tpm 1.2 and secure boot are all enabled.

I started by upgrading dell BIOS to A29, following Dell's instructions. I had to make a bootable USB stick using the Rufus program to install the new bios. Reboot the optiplex with the usb in place, hit F12, choose usb, then type the filename of the exe file that updates the BIOS.

Having upgraded the BIOS, I did a fresh install of Windows 11 on a new disc drive using uefi mode. This is the only tricky but as UEFI mode won't let you boot from a standard Windows installation usb stick. Instead you have to download the ISO version of Windows from Microsoft's website. Then use rufus to create an ISO installation usb stick with that file. When this finishes, it will tell you not to use secure boot.

Next, reboot the optiplex to F2 again. Choose UEFI mode in the boot options. Set TPM to on and activate in security. Make sure secure boot is off.

Finally, reboot the optiplex with the usb in place. Hit F12 and Choose f12. Windows 11 will install without issues. That done, go back into Dell's F2 setup menu and switch on secure boot.