Skip to main content

Tpm Detailed Audit [Script]

Summary

This dataview shows the complete detail of the TPM of the Windows machines. It is been collected by the script Script - Bitlocker - Audit.

Dependencies

Script - Bitlocker - Audit

Table - plugin_proval_tpm_audit

Solution - Bitlocker

Columns

FieldDescription
ClientClient name of the agent
LocationLocation name of the agent
ComputerComputer name of the agent
Operating SystemOperating system name of the agent
LastContactLast contact date of the agent with the RMM
ManufacturerIdTxtA readable string of the manufacturer (e.g., IFX for Infineon).
ManufacturerVersionThe version of the TPM firmware provided by the manufacturer.
ManufacturerVersionFull20Full version string for TPM 2.0, including major, minor, and build numbers.
AutoProvisioningIndicates whether Windows is allowed to provision the TPM automatically.
LockedOutShows whether the TPM is currently in a lockout state.
LockOutCountNumber of failed authorization attempts made.
LockOutHealTimeTime remaining before the TPM lockout counter resets (in seconds).
LockoutMaxMaximum number of failed attempts allowed before lockout occurs.
ManagedAuthLevelIndicates the level of authorization management (e.g., Full, Delegated).
OwnerAuthA secure string representing the TPM owner authorization value.
OwnerClearDisabledIf True, the TPM cannot be cleared without physical presence or BIOS access.
RestartPendingIndicates whether a system restart is required to complete a TPM operation.
SelfTestResult of the TPM self-test (e.g., Passed, Failed).
TpmActivatedIndicates whether the TPM is activated (usually via BIOS/UEFI).
TpmEnabledIndicates whether the TPM is enabled in BIOS/UEFI.
TpmOwnedIndicates whether the TPM has been initialized and has an owner.
TpmPresentIndicates whether a TPM chip is physically present on the system.
TpmReadyIndicates whether the TPM is fully ready for use (enabled, activated, owned).