SPI TPM on x570 Pro4

Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic

   Purchased an Asrock SPI TPM module, the one that goes near the CPU on my X570 Pro4. I was hoping that I can disable the fTPM, but that is not working for me. If I enable fTPM in CPU Configuration I can see TPM 2.0 detected in Trusted Computing, but I'm unable to turn off the fTPM.

I tried "Route to SPI TPM" option (and Route to LPC), but then I get no TPM at all. What is the use case for these 2 options?

If fTPM is Enabled, Windows Device Manager shows two devices - AMD PSP 11.0 and TPM 2.0 module. Not sure what bitlocker is using. I've had MSI B450 board before where I can enable the module in BIOS and that's all I needed.

Asrock provides some random "EnableSPITPM.efi" file that I am unsure if it is to be used in my case. What motherboards and BIOS versions does this apply to? Hardware TPM should be easily turned on from BIOS without the need to run some odd scripts.

Author	Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic
new2rock Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 26 Mar 2025 Status: Offline Points: 65	Post Options Post Reply Quote new2rock Report Post Thanks(0) Quote Reply Topic: SPI TPM on x570 Pro4 Posted: 26 Mar 2025 at 2:34am
	Purchased an Asrock SPI TPM module, the one that goes near the CPU on my X570 Pro4. I was hoping that I can disable the fTPM, but that is not working for me. If I enable fTPM in CPU Configuration I can see TPM 2.0 detected in Trusted Computing, but I'm unable to turn off the fTPM. I tried "Route to SPI TPM" option (and Route to LPC), but then I get no TPM at all. What is the use case for these 2 options? If fTPM is Enabled, Windows Device Manager shows two devices - AMD PSP 11.0 and TPM 2.0 module. Not sure what bitlocker is using. I've had MSI B450 board before where I can enable the module in BIOS and that's all I needed. Asrock provides some random "EnableSPITPM.efi" file that I am unsure if it is to be used in my case. What motherboards and BIOS versions does this apply to? Hardware TPM should be easily turned on from BIOS without the need to run some odd scripts.

new2rock Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 26 Mar 2025 Status: Offline Points: 65	Post Options Post Reply Quote new2rock Report Post Thanks(0) Quote Reply Posted: 26 Mar 2025 at 2:36am
	I am running the latest BIOS ver 5.63

new2rock Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 26 Mar 2025 Status: Offline Points: 65	Post Options Post Reply Quote new2rock Report Post Thanks(0) Quote Reply Posted: 21 hours 10 minutes ago at 4:46am
	Long story short, yes, you need to run "EnableSPITPM.efi". It is not a straightforward process. Enable SPI TPM should really be a switch inside the BIOS Menu.

new2rock Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 26 Mar 2025 Status: Offline Points: 65	Post Options Post Reply Quote new2rock Report Post Thanks(0) Quote Reply Posted: 21 hours 6 minutes ago at 4:50am
	And also need to set the AMD fTPM switch to "Route to SPI TPM". If everything is working, after reboot, the vendor for the TPM provider will change to IFX (from AMD). This is in BIOS Avanced > Trusted computing.