TPM For Windows Hello After Restart

MikeT - As an AMD user I can confirm that upgrading from 8.6 to the newest Nightly update solved the issue with Windows Hello appearing after entering my password manually. I can now log in with Windows Hello as intended. Nice!

As I wrote in the other thread, for me 1Password started to recognize the TPM after I re-enrolled my Windows Hello data.

So the feature development of TPMs in the last years was not that significant as I thought earlier.

Hi folks,

The next beta update (available now in a nightly update (8.7.0-18)) will now enable support for AMD CPUs as well as virtual TPM.

Note that if you're still seeing the option being greyed out after this update, there may be a reason for this. Your current Windows Hello key may still be backed by software, not TPM even if you have TPM enabled.

The reason is that if you've enabled Windows Hello feature long before you enabled TPM in the BIOS or added a TPM chip to your system, Windows does not migrate the Hello key from the software to hardware side. To fix this, try to re-enroll your Windows Hello data by removing the current setup and re-enrolling it; that should be enough to create the new Windows Hello key in the hardware TPM. Which is when 1Password will enable its TPM settings for you.

Thanks gussic!

ref: ALL-72966-442

1P_PeterG

Thanks for responding Peter, i've reached out with the information quested and replied with the terminal information that was asked of me. My ticket number is 72966-442 (just in case you want to track it).

Hi folks! Sorry for the delay in response here.

We've been working on a couple different things related to this, and we could indeed use specifics of your setups if you're willing to share. This can help us round out our knowledge of where the TPM support is working, where it isn't, and why.

Here's what you can do to get us the relevant information:

1. Send us a brief email at support+windows@1Password.com, with a link to this discussion and your username (so that we can match up the relevant info)
2. Include the name of your CPU, and any TPM details you know about your system offhand

Once you've gotten in touch with us over there, we'll reply and likely ask you to run a few specific diagnostic commands on your device and share the output of those commands with us. That will give us the specific technical context we need to understand why TPM integration might be working with CPU X, but not CPU Y, and what we can do about it.

As always, your involvement here is very much appreciated. And while the Enhanced Hello is already off to a ground-breaking start, we're looking forward to improving it with your help too. I'll hope to see you over there! 👋

Former Member gussic @FelixSe jpalo

Lastly, I'm sorry to say that we're aware of existing incompatibilities with AMD's fTPM, @i5918591, but as Mike noted we're working with Microsoft on this to see what can be done about it.

It seems TPM is just a label and a generic term for a large variety of hardware security modules of different manufacturing dates with different specifications, most being obsolete and not considered secure enough for anything else than storing Bitlocker drive encryption keys.
I assume this is one cause for Microsoft requiring only the most recent CPUs for Windows 11, thus the most recent TPMs only. This enables a unified security function set over all Windows 11 machines, like securely storing more than just Bitlocker keys.

Given the fact that TPMs are being deployed for more than 10 years, this is quite disappointing. The main issue causing this is probably that it is resisted by the people. TPMs are seen as privacy and control being taken away from the computer owner by the media industry (DRM) instead of the TPM being a safe vault for items they want to be stored securely and not being taken away by some attacker.

My personal view of a TPM in the past was also that it is only a control device for the industry and against my free computer use - this proved wrong and changed only a few years ago after I looked deeper what functionality is actually provided by a TPM.

I have enabled fTPM on my AMD Ryzen 7 3700x ,but I can't check TPM with hello feature...

version 8.6.0

Still getting this issue, lack of engagement/comment from 1P staff/devs is a little disappointing :|

Same here, Windows Hello always pops up after I had to type my password