Have you reviewed the whitepaper (below) on TPM enablement?

http://media.community.dell.com/en/dtc/attach/tpm_best_practices - web post.zip

Hi,

yes i have reviewed the whitpaper but it seems that mbam service can't take ownership

I'm checking to see if we have any additional information on using MBAM with Dell client systems.

Hi,

have you any update for me?

Microsoft says:

In these articles, we should notice:

Microsoft works closely with hardware manufacturers and industry groups to make it possible to manage most functions of the TPM from within the TPM Management console. However, on some occasions, it may not be possible to control all aspects of your TPM security hardware from inside this version of Windows. Examples may include:



l Hardware that does not fully support the TPM 1.2 specification.

l Hardware that does not contain a fully supported BIOS

l Hardware that has an option to hide the TPM security hardware from the operating system

l Hardware for which the manufacturer has decided to require that the BIOS screens be used to turn on, turn off, or clear the TPM



In such cases, you may be able to manage your TPM security hardware from the BIOS or setup screens of your computer.

If TPM.msc is working correctly, then I would expect that the issue is on how MBAM attempts to manage the TPM. It should use the same functions as TPM.msc. Can Microsoft explain the difference?

I couldn't find any Dell specific documentation on MBAM.

Hi,
Microsoft says :After performing your issue based on your DELL E6420/6410, we suggest that you can try to use the Dell™ Client Configuration Toolkit (CCTK) to perform TPM Activation via the following link:

This was working but the next issue comes up: mbam starts the encryption but it failed

it seems that mbam does not take the same functions as TPM.msc

i tried this with HP notebook and it works completly What makes this different from DEll

Thanks for the additional details. I'll follow up with the dev team.

The Dell BIOS TPM has to be set to "Disabled" not "Activate" which is completely counter intuative since it works perfectly using the "manage-bde -TPM" commands and the TPM mmc. The MBAM client will now start the compatability check and then prompt for a reboot which brings up a BIOS prompt to accept TPM changes and youll now have TPM recovery data in the MBAM console after encryption starts.

I dont know whether to blame Dell or MS for the pain but I hope this saves someone else frustration.

I had the same issue on a 6320 with A06 BIOS. It would exhibit the same behavior until I updated the Dell Control Vault firmware and driver. The firmware would not update until I took ownership of the TPM and following the update,
I cleared the TPM and rebooted, it was set to enabled and deactivated. MBAM picked it up successfully on the restart.

I am not certaint whether it was something specific with firmware or driver updates, or whether it reset the TPM state in a way I had not.

My company is looking into using MBAM for bitlockering all our dell machines and have had mixed results. From the sounds of it others have as well. We have run into the "Can't take TPM ownership" issue ourselfs and are you saying the setting the TPM to Disabled and not Activate, you get around this issue?