Infineon® Technologies Trusted Platform Modules (TPMs), Security Feature Bypass Vulnerability

NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.

Potential Security Impact: A security vulnerability exists in certain Trusted Platform Module (TPM) firmware. The vulnerability weakens key strength. It is important to note that this is a firmware vulnerability, and not a vulnerability in the operating system or a specific application. Toshiba is working closely with Infineon® to validate their fix and ensure it works across Toshiba’s range of products. Until firmware updates are available, it is recommended that people and companies using Toshiba PCs and devices that incorporate TPMs to take steps to maintain the security of their systems and information.

Source: Infineon® & Microsoft® Security TechCenter

For general guidance on this issue, please see this announcement from Infineon® & Microsoft® 

       Infineon® Technologies - https://www.infineon.com/cms/en/product/promopages/tpm-update/?redirId=59160

       Microsoft® Security TechCenter - https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV170012

Recommended Actions:

Step 1: Apply All Microsoft® Windows Operating Systems Security Updates. 

Step 2: Determine devices in your organization that are affected - Use event log entries.

NOTE: After the applicable Windows update is applied, the system will generate Event ID 1794 in the Event Viewer after each reboot under Windows Logs - System when vulnerable firmware is identified. On devices running Windows 10 that have the October 2017 security update installed, in a CMD prompt, type "TPM.MSC" to open the Trusted Platform Module (TPM) Management snap-in. Devices with affected TPM modules will display the following error message: (Shown Below)

• "The TPM is ready for use. The TPM firmware on this PC has a known security problem. Please contact your PC manufacturer to find out if an update is available. For more information please go to https://go.microsoft.com/fwlink/?linkid=852572."

• If you determine that you do not have an Infineon® TPM capable system then no further action is required.
• If your PC is affected, go to Step 3 below to locate your PC model and firmware availability.
  • If your firmware is not available, Microsoft® has provided the following mitigation process that is recommened until the release of the firmware update package. 
    • Microsoft® Security TechCenter - https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV170012

Step 3: Download and run the firmware update tool provided by Toshiba

IMPORTANT NOTE: Refer to Microsoft® Security TechCenter document before clearing & resetting TPM keys:( https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV170012 )

For help finding your model number CLICK HERE

Toshiba’s TPM Firmware Release Schedule:

* The information in this document is subject to change without notice.
* "Infineon" is a trademark of Infineon Technologies in the U.S. and other countries.
* "Microsoft" is a trademark of Intel Microsoft, Inc. in the U.S. and other countries.
* Other names and brands may be claimed as the property of others.