<- Chrome Settings Library

TPMFirmwareUpdateSettings

Configure TPM firmware update behavior
Last updated October 8, 2024

Setting the policy configures availability and behavior of TPM firmware updates. Specify individual settings in JSON properties: * allow-user-initiated-powerwash: If set to true, users can trigger the powerwash flow to install a TPM firmware update. * Google Chrome version 68): If set to true, users can invoke the TPM firmware update flow that preserves device-wide state, including enterprise enrollment, but loses user data. * Google Chrome version 75): Controls how automatic TPM firmware updates are enforced for vulnerable TPM firmware. All flows preserve local device state. If set to: * 1 or left not set, TPM firmware updates are not enforced. * 2, TPM firmware updates at the next reboot after user acknowledges the update. * 3, TPM firmware updates at the next reboot. * 4, TPM firmware updates after enrollment, before user sign-in. Leaving the policy unset renders TPM firmware update unavailable.

Supported On:
Platform Start End
ChromeOS 63
Example value:

{"auto-update-mode":1,"allow-user-initiated-powerwash":true,"allow-user-initiated-preserve-device-state":true}

Features: