Manage TPMīefore you install ChromeOS Flex on devices, you might need to use the BIOS or UEFI settings menu to make sure that the TPM is cleared, visible, and active. For information about how ChromeOS Flex uses TPM, see the Chromium design documentation. For devices that don’t have supported TPM hardware, features continue to function as expected, and are handled by software instead of hardware.

Some ChromeOS Flex functionalities-such as encryption of user, device, and some system data-optionally use TPM on devices that have an active and supported TPM chipset.

Any time you use Import and bind in the Manage certificates section of Chrome’s settings.

EAP-TLS and other WPA2 Enterprise wireless authentication.

You can use hardware-backed certificates for: Hardware-backed certificates bind to unique user or device pairings, ensuring that certificates can’t be moved to unauthorized devices or hijacked by unauthorized users. If you want to use hardware-backed certificates, you need to install ChromeOS Flex on devices with a supported TPM chipset. Google continuously adds support for a wider variety of TPM chipsets on devices.

For a full list of certified devices and specific details about how to use TPM, if supported, see Certified models list.ĬhromeOS Flex supports only certain TPM 1.2 and TPM 2.0 chipsets. You can use ChromeOS Flex on any certified device, regardless of whether it includes a supported TPM chipset. Trusted Platform Module (TPM) is a standard hardware component that’s included in most enterprise computers to more securely store and process cryptographic data.

Installing tpm 2.0