Forum Discussion

josvds's avatar
josvds
Brass Contributor
Jan 18, 2023

Intune compliance issues Windows 11 22H2

We have unboxed several new "HP ProBook 450 G9" devices and connected them to MDM with AutoPilot. We installed these devices and they should be marked compliant based on the settings we have applied ...
Intune
Mobile Device Management (MDM)
Rudy_Ooms_MVP's avatar
Rudy_Ooms_MVP
MVP
Hi.. could you check what tpm that surface exactly has? I am trying to find similarities between the devices that are having the issue 🙂
gmoney202's avatar
gmoney202
Copper Contributor
Feb 01, 2023

Rudy_Ooms_MVP Believe it is 7.2.3.0  . I did receive it as Windows 11 and had to downgrade manually to win10.

  • Rudy_Ooms_MVP's avatar
    Rudy_Ooms_MVP
    MVP
    Feb 01, 2023
    Also a nuvoton tpm?
    • DrokzIT's avatar
      DrokzIT
      Copper Contributor
      Feb 02, 2023

      just installed on HP 445 and 455 G9 notebooks Windows 11 22H2, getting the same error. After installing the February preview update at least the BitLocker state could be read from the TPM chip and I got my devices connected to the Microsoft365 services, but still saying not compliant. So the February update of 11 22h2 changes something. But still not compliant.

      edit: and yes, nuvoton tpm with 7.2.3.0

      • Rudy_Ooms_MVP's avatar
        Rudy_Ooms_MVP
        MVP
        Feb 02, 2023

        I guess I know where the problem lies... Its mentioning stuff about the intermediate cert... and looking at the nuvoton.... it doesn't have one? it chains right up to the root one... just wondering but does this give you the aik cert?
        certreq -enrollaik -config “”

         

        Also ... yeah that feb update is going resolve the tpm AMD attesttion issues.. as they were having issues with the chain of attestation and the intermediate cert... ow wait... sounds familiar right? 

Resources