Skip to main content

TPM Detail Auditing

Summary

This script provides detailed information about the TPM configuration on the endpoint.

Time Automation: 10 Minutes

Sample Run

Sample Run

Dependencies

TPM Detailed Info

Variables

VariableDescription
TPMDataCollects the complete TPM information
TPMReadyIndicates whether TPMReady is enabled or disabled
TPMPresentIndicates whether TPMPresent is enabled or disabled
ManagedAuthLevelStores the ManagedAuthLevel information
OwnerAuthStores the OwnerAuth information
OwnerClearDisabledIndicates whether OwnerClear is disabled or not
AutoProvisioningIndicates whether auto-provisioning is enabled or not
LockedOutIndicates whether TPM is locked or not
TPMVersionProvides the TPM version information

Script States

NameExampleDescription
TPMDetail_Info@TPMReady@ -- @TPMPresent@ -- @ManagedAuthLevel@ -- @OwnerAuth@ -- @OwnerClearDisabled@ -- @AutoProvisioning@ -- @LockedOut@ -- @TPMVersion@Stores the TPM data to be displayed in the dataview.

Process

  • The PowerShell script gathers the relevant TPM details.
  • It stores the output of the PowerShell script to a script state. This data is then visible in the TPM Detailed Info dataview.

Output

  • Script log
  • Script state
  • Dataview