Checking if TPM is Enabled and Activated

Yesterday I posted about a tool that you can use to configure TPM on Toshiba machines.  In our task sequence we also check to see if TPM is already enabled and activated and skip running the TPM tool if it is.  How?

We just have the following two WMI queries as conditions on in the task sequence group where that contains the task sequence action that runs the Toshiba tool.  The other task sequence action in this group is a 'Restart Computer' TSA.

Query One

WMI Namespace:

root\CIMV2\Security\MicrosoftTpm

SQL Query:

SELECT * FROM Win32_Tpm WHERE IsEnabled_InitialValue = FALSE

Query Two

WMI Namespace:

root\CIMV2\Security\MicrosoftTpm

SQL Query:

SELECT * FROM Win32_Tpm WHERE IsActivated_InitialValue = FALSE

The Deployment Guys at Microsoft have a more sophisticated way of doing this.  See their post over here:

http://blogs.technet.com/b/deploymentguys/archive/2010/12/22/check-to-see-if-the-tpm-is-enabled.aspx