Hello, welcome to the Monday, November 18th, 2019 edition of the Sansanet Storm Center's Stormcast.

My name is Johannes Ulrich, and I'm recording from Riyadh, Saudi Arabia.

Now, let's start with a quick update on the TPM fail-warnability that came up last week.

There is still some confusion as to what patches are available and where to get them.

If your system has an Intel FTPM 2.0 chip, well, there is a bias update available.

Now for the STTPM chips, you do have a firmware update tool that directly

updates the TPM firmware. Intel also released a CSME version detection tool. Now CSME, this is what

used to be the management engine ME. It's now called Conversion Security and Management Engine.

And this tool will check your firmer.

And part of this is also the TPM 2.0 firmer.

So if you run behind here, this tool will alert you and will give you a link to Intel's

download page.

Now, on that page, you still have to find the right update.

And Haise, the German computer magazine, actually found that, for example, the German version

of that page doesn't have all the latest update listed

that you do find on the English version.

Dell has also released updates.

Now, HP did release bias updates.

HP is actually not using the Intel FTPM 2.0, but instead the other affected TPM version STTPM.

So in general, not easy to figure out which patch you need for what system.

Motherboard manufacturers also have their own lists of various updates.

Looks like it will take quite a while for everybody to figure out what needs to be patching and where to get the right patch.

...