TPM2.0: PlatformAuth is not the Empty Buffer. The firmware cannot be updated.

[karnasw]

Hi, I have problem with update TPM firmware on Lenovo Thinkpad. I'm trying to update firmware with TPMFactoryUpd. I cleared TPM from BIOS, Windows and always get error message.

Infineon Technologies AG   TPMFactoryUpd   Version 01.01.2212.00
[2024-03-16 02:50:53.018]

Error detected:
Final code: 0xE0295507
Final message: TPM2.0: PlatformAuth is not the Empty Buffer. The firmware cannot be updated.
    Module: CommandFlow_TpmUpdate.c; Function: CommandFlow_TpmUpdate_PrepareTPM20Policy; Line: 348
    Code: 0xE0295507
    Message: TSS_TPM2_PolicySecret returned that platformAuth is not the EmptyBuffer. (0xE02809A2)

Is there anything I can do with tpm2-tools to fix this?

[karnasw]

And when I turned off TPM in BIOS and try to update:

Infineon Technologies AG   TPMFactoryUpd   Version 01.01.2212.00
[2024-03-16 02:56:07.718]

Error detected:
Final code: 0xE0295508
Final message: TPM2.0: The platform hierarchy is disabled. The firmware cannot be updated.
    Module: CommandFlow_TpmUpdate.c; Function: CommandFlow_TpmUpdate_PrepareTPM20Policy; Line: 321
    Code: 0xE0295508
    Message: TSS_TPM2_StartAuthSession returned that platform hierarchy is disabled. (0xE0280285)

[AndreasFuchsTPM]

The Updating of TPM firmware runs under the authorization of the BIOS. So only BIOS is allowed to perform TPM firmware updates.