All posts by Ed Tittel

Full-time freelance writer, researcher and occasional expert witness, I specialize in Windows operating systems, information security, markup languages, and Web development tools and environments. I blog for numerous Websites, still write (or revise) the occasional book, and write lots of articles, white papers, tech briefs, and so forth.

Check Windows TPM Status 2 Ways

What with Windows 11 looming ever closer on the horizon, more Windows 10 users will want to check TPM status on their PC. TPM is, of course, the Trusted Platform Module that provides hardware-level credential caching and encryption to protect systems from snooping and takeover. Today, I’ll show you how to check Windows TPM status 2 ways. One way uses a PowerShell cmdlet, the other way runs a Microsoft Management Console snap-in (an .msc file).

How to Check Windows TPM Status 2 Ways

Naturally, both methods require admin privileges. That is, you must run the cmdlet in an Administrative PowerShell session. Alternatively, you must be logged into an administrative-level account to access the proper MMC snap-in.

Way 1: PowerShell

Prosaically enough, the necessary cmdlet is named get-tpm. As its name portends, it provides detailed information about the presence and state of TPM on the target system upon which it is run. Go ahead, take a look:

Check Windows TPM Status 2 Ways.get-tpm

Note all the details about TPM presence and status. Source: my i7-6700 PC, which has no TPM.

Way 2: Run TPM.MSC (MMC Snap-in)

To take this path, simply type tpm.msc into the run command box or the Windows search box. It does not provide as much detail as the PowerShell cmdlet, but it is a little faster and easier to run. That said, here’s what its output looks like:

Check Windows TPM Status 2 Ways.tpm.msc

The TPM plug-in for the MMC just provides basic presence/absence information, though more data appears when a TPM is present (see next screencap below)
[Click image for full-sized view.]

TPM Info from Win11-Ready System

For comparison purposes here’s a side-by-side rendition of the PowerShell cmdlet (left) and MMC snap-in (right) from my 11th generation Lenovo X12 Hybrid Tablet PC. It meets the Windows 11 hardware requirements and tells its story about the TPM capabilities present on that machine. Note: 11th generation Intel CPUs provide TPM 2.0 emulation in firmware, rather than in a separate TPM chip.

Click image for full-sized view.

Facebooklinkedin
Facebooklinkedin

New BIOS Defaults Target Windows 11

In the process of bringing up a B550 motherboard with AMD Ryzen 5800X CPU, I found myself wondering about Windows 11 hardware requirements. Specifically about Secure Boot and TPM 2.0 support, both mandatory to meet those requirements. Looks like Asrock, and probably other mobo makers, are thinking along those lines, too. On August 6, that company released version 2.10, in which that new BIOS defaults target Windows 11. The lead-in graphic specifically states “Enable AMD CPU fTPM in BIOS default.”

Things Get Easier When New BIOS Defaults Target Windows 11

Before flashing the mobo to the new BIOS I’d started messing with the firmware TPM (fTPM) settings therein. Amusingly, to flash the BIOS one must first disable fTPM settings. More comforting, the post-update version enables fTPM by default and no longer requires such contortions for subsequent re-flash operations.

I just learned some new and interesting factoids about the Ryzen 5800X CPU — namely:

  • The part has a TDP of 105W, well within my new build’s power budget of 750W.
  • The part runs a Vermeer core at 3.8 GHz with 4MB of cache.
  • Memory speeds of up to 3200 MBps DDR4 are supported. I purchased 2667 to save a little on cost.

When to Take the Upgrade Plunge

The current build is running Windows 10 21H1 Build 19043.1165. I plan to keep it at the current Windows 10 production build level until MS formally releases Windows 11 upgrades via WU. If this PC doesn’t get an offer by the time an official ISO appears, I’ll download same and forcibly upgrade that PC through an in-place upgrade. I paid good money to make the machine ready for Windows 11. Thus, I want to take it to Windows 11 as soon as a production version is available.

Next, I’ll be planning my own production desktop upgrade. Before bringing the 5800X/B550 build up, I’d been thinking about taking the other desktop down the Intel upgrade path. But now, seeing how fast and fluidly this system runs, I’m increasingly inclined to do the same thing again inside my bigger Rosewill Blackhawk case. I still have a month or so in which to make my buy. Count on me to keep you posted in the interim. Cheers!

New BIOS Defaults Target Windows 11.WnyNot11

Output from the WhyNotWin11 program after flashing the BIOS shows the system 100% ready for Windows 11.
[Click image for full-sized view.]

Facebooklinkedin
Facebooklinkedin

New NVMe System Delivers Formidable Punch

The electrician visited our house early today to fix some switches. He also helped us find a GFI plug we didn’t know we had (duh!). He had to turn off power at the breaker box momentarily, so all the PCs went down. I took that opportunity to pop the case on the new Ryzen 5800X build. I moved the NVMe SSD from the M.2.2 slot to the M.2.1 slot. That’s when I learned this new NVMe system delivers formidable punch power, I/O-wise. Let me explain.

If New NVMe System Delivers Formidable Punch, How So?

We’re talking about the transition from PCIe x3 to x4, along with a new generation of SSD controller technology here. The lead graphic shows CrystalDiskMark 8.0.4 results from my 2016 vintage i7-6700 system left and the 2021 vintage Ryzen 5800X system right. The underlying NVMe drives are Samsung 950 PRO 512GB left, and Sabrent Rocket Q 2TB right. The speed increase ranges from 1876.41 vs. 3444.19 (upper left), or 1.83x, to 124.9 vs. 226.81 (lower right), or 1.75x. The biggest differences occur in the upper right cell, and the one beneath it. Those ratios are 2.13 and 2.12, respectively.

Thus we’re talking about a speed boost ratio for I/O in the neighborhood of 7/4 at the slowest and 15/7 at the fastest. In roundish numbers, say 2:1. That’s pretty decent. I daresay it’s a big enough difference to be noticeable. I can tell the difference in ways that range from working with the filesystem, to performing backups, to running applications, and more.

Where Value Sits…

I’m still learning how the new system works, and what it can really do. I just ran WhyNotWin11 on the PC and it doesn’t have TPM turned on. I just checked the Asrock website. Happily it provides instructions on how to turn on fTPM in BIOS for that motherboard. It’s a single, simple option, so I’ll take care of it the next time I reboot. Then, the system should be ready for Windows 11.

Switching the NVMe from the M.2.2 slot to the M.2.1 slot delivered the promised speed increase. It also made the 2 previously blocked SATA devices on that machine visible. So far, it’s been a peach to work with. The speed and capabilities of this current-gen Ryzen processor definitely impress. I am indeed inclined to think the upgrade was worth the cost. I’m still waiting for Nvidia 3070 cards to come down in price before endowing that PC with more graphics oomph, though.

Stay tuned. I’ll report in on system temps and stuff, and take a few pics of the build later this week. Should be fun!

Facebooklinkedin
Facebooklinkedin

5800X Rebuild Boots Right Up

It was an interesting Saturday. My son and I started working on the rebuild of our oldest desktop PC around 10 AM that morning. He’d never built a PC before, so I had him doing most of the driving. It was an educational experience for both of us. But happily, this 5800X rebuild boots right up on the first try. In fact, we got Windows 10 clean installed with just one minor hiccup. Total time invested so far: around 4.5 hours (but plenty of software still to install).

5800X Rebuild Boots Right Up, But…

On the first go-round from my Ventoy boot disk, Windows 10 refused to allow the brand-new Sabrent Rocket 2TB NVMe to act as the boot/system drive. A quick once-over using DISKPART showed it was NOT formatted for GPT. Once I cleaned the drive then converted it to GPT, the installer was able to take it from there. First time to use an unallocated drive teaches me that GPT is now mandatory. Live and learn.

Other lessons learned during this install adventure included:
1. Always good to have a grabbing tool or clamps to use for handling small screws in tight places.
2. It’s good to have ample wiring room in which to route power and control cables.
3. The Antec 900 still makes a great PC case, but it shows its age with no front-panel USB 3 ports.
4. The CoolerMaster Hyper 212 is a TALL cooler. I had to remove the case fan from the side panel to button the case back up (fortunately it has plenty of ventilation anyway).
5. I’m missing a couple of SATA drives, because of lane conflicts from the M.2 NVMe in use. I see an easy fix in the mobo manual, tho…

Worthwhile Investment?

The parts I purchased for the rebuild cost about US$1,200. It’s still too early to tell if the upgrade is worth that price. But time will tell pretty shortly. In the meantime, stay tuned, and I’ll keep you posted.

Facebooklinkedin
Facebooklinkedin

First Windows 11 ISOs Now Available

OK, then. It was on June 28 that the first Windows 11 Insider Preview release made its debut on the Dev Channel. Mid-day yesterday I learned that MS had finally added Windows 11 ISOs to the Windows Insider Preview Downloads page. That’s right: the first Windows 11 ISO now available are ready to download. The lead-in graphic shows my selection of Dev Channel for Build 22000.132 (the number is truncated).

First Windows 11 ISOs Now Available: Grab One!

Because my Ventoy UFD doesn’t have a Build 22000.132 image amidst its collection, I did just that. I next had to confirm language (English, more properly EN-US). Then I had to click the “64-bit download” button shown here:

First Windows 11 ISOs Now Available.button

64-bit download button shows full details for Win11 version ISO.
[Click image for full-sized view.]

As is often the case when making MS downloads, it took a while to wind up. But eventually I started seeing download speeds ranging from just over 200Mbps to as high as 410 Mbps. The whole shebang took just over 3 minutes to complete.

Final file size, according to Explorer: 5,358,902 KB. That equals 5,233 MB or 5.11 GB. That makes this ISO too large for FAT-32 (which has a maximum file size of 4 GB). Good thing I’m using Ventoy: it will mount the ISO from its own EFI FAT-32 partition, even though the file resides on an exFAT partition (not subject to the 4 GB max filesize limitation). Good stuff!

One More Thing…

For some odd reason my ususal WIMVP MS account wouldn’t give me access to the Windows 11 ISO download. I had to sign out and sign back in under what I thought was an obsolete MS account. Not only did it please me to find a way to grab the ISO, it also gives me an important clue about why I’ve been unable to access my WIMVP benefits lately. Just another bonus as I live the dream here in Windows-World!

Facebooklinkedin
Facebooklinkedin

USB Flash Drive Follies 4th vs 11th Gen

Just yesterday I got videotaped for an upcoming session at SpiceWorld 2021 Virtual. One of the subjects I covered for HPE covered “the aging of technology” and what that does to IT efficiency, security and resiliency. That got me to thinking. “How has USB fared as faster busses, faster connections, and faster media have evolved over the past while?” I decided to conduct some USB flash drive follies 4th vs 11th gen systems to see what changed.

What’s Up With USB Flash Drive Follies 4th vs 11th Gen?

It turned into a tale of two drives, two systems, and three means of attachment. These were as follows:

Drive 1. Sabrent mSATA SSD enclosure with Samsung 950 EVO mSATA 500GB SSD USB 3
Drive 2: Fideco NVMe SSD enclosure with Sabrent Nano NVMe 1TB SSD USB 3.1
System 1: 2014 Vintage Microsoft Surface Pro 3 (i7-4650U, 8 GB RAM, USB 3)
System 2: 2021 Vintage Lenovo ThinkPad X12 (i7-1180G7, 16 GB RAM, USB 3.2/Thunderbolt 3)

The three means of attachment were USB 3, USB 3.1 (both using Type A connectors) and USB 3.2 using USB-C.

Technology Trumps Bus Speed

First things, first. There’s simply no comparison between mSATA and NVMe devices. It’s an order of magnitude from the older mSATA SSD technology to the newer NVMe. That tells me — and it should tell you — it’s simply not worth buying mSATA devices anymore. If you’ve still got them (I’ve got half-a-dozen) you can still use them.

The aging effect shows very strongly in the mSATA results. They stay pretty much the same across both systems and across all USB connection types (3.0, 3.1, and 3.2). That’s because the mSATA enclosure is either 3.0 or 3.1 (I just checked: it’s 3.0).

Things get more interesting with the NVMe devices. They run at about half-speed when there’s no UASP support on the PC (as with the Surface Pro). Amusingly, I got the same results from my Belkin Thunderbolt 3 dock with a USB 3.1 cable plugged into the NVMe enclosure. But when I used a USB-C cable directly into a USB-C port on the ThinkPad X12 I got big-block read/write speeds of ~1050 MBps read/~1004 MBps write from the NVMe flash device. Compare that to ~455 read/~457 write through the Thunderbolt dock for the same device.

Very interesting! This tells me that USB-C/Thunderbolt 3 or better drive enclosures, coupled with PCIe x3 or better NVMe SSDs in those enclosures deliver the fastest external drive storage I can use today (on my newer systems with USB-C, of course). And it looks like the performance boost from using the fastest possible port and connection is also very much worth it. Good to know!

This just makes me more interesting in acquiring a Thunderbolt 4 dock to see if it can extend that performance to secondary ports (right now, I get best speed only from USB-C ports on the X12, of which there are only 2).

Facebooklinkedin
Facebooklinkedin

First Windows 11 Hardware Refresh

OK, then. I’m getting ready to upgrade one of my two remaining desktops to make it meet Windows 11 hardware requirements.  This is my first Windows 11 hardware refresh, so I want to get things right. The irony of the situation is that this PC is already running Windows 11 Insider Preview Build 22000.132. That’s not supposed to continue, as and when an RTM version hits the Internet. I’m trying to get out in front of those changes…

Where My First Windows 11 Hardware Refresh Begins

Given what’s in this still-capable Windows 10 (and 11) PC, it’s been around for a while. Here are its key components:
1. Intel i7-4770K (4th generation/Haswell) CPU
2. 32 GB DDR3 RAM
3. Asrock Z97 Killer Motherboard
4. Samsung OEM 512GB NVMe PCIe x3 boot/system SSD
5. Nvidia GeForce GTX 1070 Ti
That CPU dates back to 2013, but I believe I built this system in 2014, and later upgraded its graphics card. It is getting kind of long in the tooth, but I’m keeping many parts for the refresh build.

What Goes, What Stays?

Of the four numbered items above, 1-4 are going, Because of the current market situation for GPUs, it’s not smart for me to lay out over US$1K for a new one right now. Here’s the other stuff I bought to put inside that machine (I’m keeping the case, the PSU, all the peripherals, and some of its existing drives, as well):
1. AMD Ryzen 7 5800X CPU (8 core/16 thread)
2. G.Skill 64 GB DDR4-2666 (2×32 GB modules)
3. CoolerMaster Hyper 212 RGB closed-loop liquid CPU cooler
4. Asrock B550 Extreme4 AM4 Motherboard
5. Sabrent Rocket Q NVMe PCIe x4 SSD 2TB

Open Questions for the Build

This will be my first time to put together a PC that aims to comply with Windows 11 requirements. I’m curious to see if those will be met by default, or if I’ll have to fiddle the BIOS to get Secure Boot and TPM 2.0 emulation working. Whatever happens, count on me to keep you posted right here. The target schedule for the project is Saturday, August 21. I’m going to take a back seat, and let my 17-year-old son Gregory take the old stuff out, and put the new stuff in. Wish us luck!

Facebooklinkedin
Facebooklinkedin

Win11 Firmware Update Causes Momentary Hiccups

Back on August 9, I reported on some issues with the Lenovo firmware update tool, fwdetectcmd1911.ex, on my Windows 11 test PCs. I’ve given myself a quick self-help tutorial on the oustanding, highly-recommended UWP preview version of the Windows Debugger. It’s known as WinDbg Preview. It’s easily available from the Microsoft Store. And, unlike the old command line WinDbg, this version’s surprisingly easy to use. It’s what let me determine that Lenovo’s Win11 Firmware update causes momentary hiccups on my system. Why? Because the updater fails when it looks for Thunderbolt hardware and finds none.

When Win11 Firmware Update Causes Momentary Hiccups, No Worries!

I’d been wondering if this was a serious problem. But a quick investigation shows that this condition throws an unhandled exception. In the Stack pane at lower left, a lengthy string labeled KERNELBASEUnhandledExceptionfilter appears right near the top of the error stack. That’s what tells me, along with the key value shown in the Command pane above, that missing Thunderbolt is my culprit. I guess I need to hook up a dock and try again so I can get past this recurring error.

Win11 Firmware Update Causes Momentary Hiccups.lenovo-firmware-updater-error

Note the bottom error in the Command pane, and the second-from-top info in the Stack pane. Both tell a story of a crash when looking for absent Thunderbolt devices.
[Click image for full-sized view.]

I also plan to drop this info onto the Lenovo Forums so their engineers can get the word this is happening. I would imagine it will be pretty easy for them to skip over the Thunderbolt update if no Thunderbolt hardware is present, rather than throwing an unhandled exception. Time will, of course, tell if my imagining is mere fantasy or founded in fact.

All this said, I’m glad of a couple of things:
1. I’m glad that the recurring firmware update failures are an error in the updater and not indicative of a genuine system issue
2. I’m glad that I got a good excuse to try our the new WinDbg tool. It’s ever so much easier and fun to use than the old one.

And that’s the way things go here in Windows-World, with a smile and nod from yours truly today!

Facebooklinkedin
Facebooklinkedin

Windows 11 Gets Snipping Tool Makeover

With the latest Build of Windows 11, 22000.132, several new app versions have appeared. This includes a new version of the Snipping Tool. In fact, Windows 11 gets Snipping Tool Makeover that combines this older program with the newer Snip & Sketch. What’s interesting about this update is that MS has advised Snipping Tool users to switch to Snip & Sketch for some time now. Take a look at its home screen in Windows 10, where it says “Snipping Tool is moving…”

Windows 11 Gets Snipping Tool Makeover.old-version

The Windows 10 version still warns users it’s “moving to a new home,” and exhorts them to “Try Snip & Sketch.”

If Windows 11 Gets Snipping Tool Makeover, Now What?

The new combined tool calls itself Snipping Tool. But it works more like Snip & Sketch than it works like the Windows 10 Snipping Tool. It still does the job, though. I can use it without any learning curve, because I’ve long switched between both Snipping Tool and Snip & Sketch, as well as TechSmith’s SnagIt tool. All have their unique strengths, which I’ll play to as I need them.

The change is a little odd though, along the lines of “one step forward, one step back, one step sideways.” Long-time Windows developer and gadfly Rafael Rivera got this right in an August 12 tweet on this subject, to wit:

Windows 11 Gets Snipping Tool Makeover.rivera-tweet

Rivera’s comments are spot-on for Windows users who may not catch this change of course.

Doesn’t life sometimes get interesting, here in Windows-World? I’m pretty sure most people will figure this out, but it can be perplexing to keep up with the changes sometimes. Count on me to keep you informed, please, as I also try to see the humorous side of this wonderful game.

Facebooklinkedin
Facebooklinkedin

WinKey+P Powers Display Projection

Sometimes, it isn’t until things go terribly wrong that one appreciates the power of simple syntax. Check out this TenForums post, which explores the impact of the WinKey+P gone wrong: Win p key  pressed. Because WinKey+P powers display projection, a user’s nephew’s wrong menu choice made him think he’d lost access to 2 of his 3 displays in a multi-monitor configuration. Not so!

WinKey+P Powers Display Projection — Usually Into a Menu

Normally, when you strike Winkey+P on a Windows 10 or 11 PC, you’ll get a pop-up menu like the one shown in the lead-in graphic. It highlights the current setting — Extend in my case, because I have my desktop extended over a pair of Dell 2717 monitors. Overall, it offers these four settings:

  • PC Screen only: (tantamount to striking WinKey+P once)
  • Duplicate: copies primary monitor to all other monitors (select by striking WinKey+P twice)
  • Extend: extend the desktop across all available monitors (select by pressing WinKey+P three times)
  • Second screen only: use only Display #2 for graphical output (select by pressing WinKey+P four times)

Our hapless user’s nephew struck WinKey+P once, which apparently forced his PC into “PC Screen only” mode. On my PC, however, I got the menu shown above, and was easily able to move among the selections using my mouse.

When Key Combos Go Wrong, Try More!

Interestingly, advice on TenForums about what to do in this situation is spot on. It reads “Did you try pressing ‘WinKey+P’ again? Sometimes a key acts like an ‘on off’ switch.” In this case, our user wanted to press WinKey+P 3 times to get to the extend option through the keyboard. There’s no discussion of using the menu instead, which I find infinitely preferable.

For some odd reason I’m reminded of one of William Blake’s epigrams from his Proverbs of Heaven and Hell:

The fool who persists in his folly soon becomes wise.

This turns out to be good, if oblique, advice when dealing with unwanted WinKey key combinations. As for myself: I’d have looked it up online, and found all the insight I ever could have wanted, and more.

Facebooklinkedin
Facebooklinkedin