mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-18 11:53:37 +00:00
Updated as per feedback
This commit is contained in:
@ -108,7 +108,7 @@ Membership in the local Administrators group, or equivalent, is the minimum requ
|
||||
|
||||
7. After the PC restarts, your TPM will be automatically prepared for use by Windows.
|
||||
|
||||
## <a href="" id="turn-on-or-turn-off"></a>Turn on or turn off the TPM (available only with TPM 1.2 with Windows 10, version 1507 or 1511)
|
||||
## <a href="" id="turn-on-or-turn-off"></a>Turn on or turn off the TPM (available only with TPM 1.2 with Windows 10, version 1507 and higher)
|
||||
|
||||
Normally, the TPM is turned on as part of the TPM initialization process. You do not normally need to turn the TPM on or off. However, if necessary you can do so by using the TPM MMC.
|
||||
|
||||
@ -116,7 +116,7 @@ Normally, the TPM is turned on as part of the TPM initialization process. You do
|
||||
|
||||
If you want to use the TPM after you have turned it off, you can use the following procedure to turn on the TPM.
|
||||
|
||||
**To turn on the TPM (TPM 1.2 with Windows 10, version 1507 or 1511 only)**
|
||||
**To turn on the TPM (TPM 1.2 with Windows 10, version 1507 and higher)**
|
||||
|
||||
1. Open the TPM MMC (tpm.msc).
|
||||
|
||||
@ -130,7 +130,7 @@ If you want to use the TPM after you have turned it off, you can use the followi
|
||||
|
||||
If you want to stop using the services that are provided by the TPM, you can use the TPM MMC to turn off the TPM.
|
||||
|
||||
**To turn off the TPM (TPM 1.2 with Windows 10, version 1507 or 1511 only)**
|
||||
**To turn off the TPM (TPM 1.2 with Windows 10, version 1507 and higher)**
|
||||
|
||||
1. Open the TPM MMC (tpm.msc).
|
||||
|
||||
|
@ -40,12 +40,12 @@ The industry standards from the Trusted Computing Group (TCG) specify that TPM m
|
||||
|
||||
TPM 2.0 devices have standardized lockout behavior which is configured by Windows. TPM 2.0 devices have a maximum count threshold and a healing time. Windows configures the maximum count to be 32 and the healing time to be 10 minutes. This means that every continuous ten minutes of powered on operation without an event which increases the counter will cause the counter to decrease by 1.
|
||||
|
||||
If your TPM has entered lockout mode or is responding slowly to commands, you can reset the lockout value by using the following procedures. Resetting the TPM lockout requires the TPM owner’s authorization. This value is no longer retained by default starting with Windows 10 version 1607 or Windows 11.
|
||||
If your TPM has entered lockout mode or is responding slowly to commands, you can reset the lockout value by using the following procedures. Resetting the TPM lockout requires the TPM owner’s authorization. This value is no longer retained by default starting with Windows 10 version 1607 and higher.
|
||||
|
||||
## Reset the TPM lockout by using the TPM MMC
|
||||
|
||||
> [!NOTE]
|
||||
> This procedure is only available if you have configured Windows to retain the TPM Owner Password. By default, this password is not available in Windows 10 starting with version 1607 or Windows 11.
|
||||
> This procedure is only available if you have configured Windows to retain the TPM Owner Password. By default, this password is not available in Windows 10 starting with version 1607 and higher.
|
||||
|
||||
The following procedure explains the steps to reset the TPM lockout by using the TPM MMC.
|
||||
|
||||
|
@ -135,7 +135,7 @@ Increasing the PIN length requires a greater number of guesses for an attacker.
|
||||
In that case, the lockout duration between each guess can be shortened to allow legitimate users to retry a failed attempt sooner, while maintaining a similar level of protection.
|
||||
|
||||
Beginning with Windows 10, version 1703, the minimum length for the BitLocker PIN was increased to 6 characters to better align with other Windows features that leverage TPM 2.0, including Windows Hello.
|
||||
To help organizations with the transition, beginning with Windows 10, version 1709 and Windows 10, version 1703 with the October 2017 [cumulative update](https://support.microsoft.com/help/4018124) installed, and Windows 11, the BitLocker PIN length is 6 characters by default, but it can be reduced to 4 characters.
|
||||
To help organizations with the transition, with Windows 10, version 1703 with the October 2017 [cumulative update](https://support.microsoft.com/help/4018124) installed,Windows 10, version 1709 and higher, and Windows 11, the BitLocker PIN length is 6 characters by default, but it can be reduced to 4 characters.
|
||||
If the minimum PIN length is reduced from the default of six characters, then the TPM 2.0 lockout period will be extended.
|
||||
|
||||
### TPM-based smart cards
|
||||
|
Reference in New Issue
Block a user