Hide the TPM Firmware Update recommendation.
- Policy ID
- DeviceSecurity_DisableTpmFirmwareUpdateWarning
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2016, Windows 10 Version 1809
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › Windows Security › Device security
Description
Hide the recommendation to update TPM Firmware when a vulnerable firmware is detected.
Enabled:
Users will not be shown a recommendation to update their TPM Firmware.
Disabled:
Users will see a recommendation to update their TPM Firmware if Windows Security detects the system contains a TPM with vulnerable firmware.
Not configured:
Same as Disabled.
Registry
ComputerHKEY_LOCAL_MACHINE
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Device security View registry values
- DisableTpmFirmwareUpdateWarningREG_DWORD