Download Files
File Format: This file format consists of a BIOS executable file. The Universal (Windows/MS DOS) format can be used to install from any Windows or MS DOS environment.
File Name: DELLTPM_STHC1_20_74.64.0.0_64_v1.exe
File size: 1.4 MB
To ensure the integrity of your download, please verify the checksum value.
MD5: 28fca989592883723b14af118604b720
SHA1: 7aa167bf6a1234965ad3841f998580256b04f65f
SHA-256: e3d0b1aa091e31d7906f91023459fd7ea2aed8279a23e836ea64c1c754db3d32
Fixes & Enhancements
- TPM Firmware Update for STMicroelectronics TPM to mitigate CVE-2019-16863.
- Fixed the issue where the system stops responding when the Windows SMM Security Mitigation Table (WSMT) feature is enabled.
Important Information
This utility updates the system TPM 2.0 firmware to the new revision.
Supported Operating Systems
Windows Server 2008 x64
Windows 10 IoT Enterprise LTSC 2019
Windows Server 2012
Windows 10 CMIT Government Edition
Windows Server 2008 x86
Windows Server 2003
Windows Server 2016
Windows 10, 64-bit
Windows Server 2003 x64
Installation instructions
Note 1: Before updating the BIOS, ensure that you suspend BitLocker encryption on a BitLocker-enabled system. If it is not enabled on your system, you can ignore this step. For information about how to disable BitLocker, see How to Enable or Disable BitLocker with TPM in Windows at support.dell.com.
Note 2: The TPM must be ON and Enabled in BIOS Setup, and the TPM must not be owned. If the TPM is owned, go to BIOS Setup and clear the TPM before proceeding. You may need to run TPM.msc to reinitiate the TPM under Windows operating system.
Note 3: When the TPM ownership is cleared, some operating system will automatically take ownership of the TPM on the next boot that is TPM AutoProvisioning. This feature must be disabled in the operating system to proceed with the update.
Dell TPM Update Utility for Windows
Download
1. Click Download File, to download the file.
2. When the File Download window is displayed, click Save to save the file to your hard drive.
Disable TPM Auto-Provisioning in Windows
Note: Before running the TPM update utility, clear the TPM Owner.
1. Boot to Windows
2. Launch the PowerShell Command window in Administrator mode
3. At the Powershell command prompt, start the command:
> Disable-TpmAutoProvisioning
4. Confirm the following results:
- AutoProvisioning: Disabled
5. Reboot the system, to BIOS Setup by pressing F2.
6. Go to Security > TPM 1.2/2.0 Security.
7. Click the Clear checkbox and select Yes at the prompt to clear the TPM settings.
You can skip this step in case the item is unavailable.
8. Click Exit to save changes.
9. Reboot system to Windows.
10. Confirm that the TPM is not owned.
11. When the TPM update is finished, launch the PowerShell command in Administrator mode to reenable the auto provisioning.
> Enable-TpmAutoProvisioning
12. Confirm the following results:
- AutoProvisioning: Enabled
Update the TPM Firmware Using TPM Update Utility from Windows Environment
1. Browse to the location where you downloaded the file and double-click the new file.
2. Windows System auto restarts and updates the TPM during the system startup.
3. When the TPM update is finished, the system auto reboots to take effect.