If you have a Dell PC manufactured between 2015 and 2018 that originally shipped with TPM firmware version 1.2, you may be able to upgrade it to TPM firmware version 2.0. Several Dell models are capable of switching between TPM firmware versions 1.2 and 2.0 provided the necessary conditions are met.

Prerequisites

First, your PC must support this upgrade. Dell maintains a list of supported systems here.

Second, your PC should be configured in UEFI Boot Mode instead of Legacy Boot Mode. Note: Switching boot modes on an existing system may require a reinstallation of Windows.

Third, while optional, it’s wise to update your BIOS to the latest version before attempting this upgrade.

Once you’re ready, you can clear the TPM and run the appropriate TPM firmware update utility. However, since Windows will automatically take ownership of a fresh TPM after a reboot by default, we have to take some additional steps to make sure the TPM stays deprovisioned throughout the upgrade process.

Step-By-Step Instructions

  1. Download the appropriate TPM firmware update utility for your system. In Windows, locate your PC’s serial number, and use it to search the Dell support website for the latest drivers and downloads for your PC. You are looking for the latest version of a package named “Dell TPM 2.0 Firmware Update Utility”.

  2. Launch a PowerShell window with administrative privileges. Then, run the following command to disable TPM auto-provisioning (we’ll turn it back on later):

     Disable-TpmAutoProvisioning
  3. Reboot and enter the BIOS setup menu. Navigate to Security > TPM 1.2/2.0 Security. If the TPM is turned off or disabled, enable it. Otherwise, click the “Clear” checkbox and select “Yes” to clear the TPM settings.
  4. Reboot back to Windows and run the Dell TPM 2.0 Firmware Update Utility you downloaded in step 1. If successful, the utility will trigger another reboot, similar to a BIOS update.

  5. When your PC boots back up, run the following command in another elevated PowerShell window:

     Enable-TpmAutoProvisioning
  6. Reboot your PC again so that Windows can automatically provision the TPM. While you’re rebooting, you can take this opportunity to enter the BIOS again and ensure that Secure Boot is enabled (Legacy Option ROMs under General > Advanced Boot Options must be disabled first).
  7. Finally, check tpm.msc or the Windows Security app to confirm that your TPM is active, upgraded, and provisioned.

References: