Set TPM Platform Validation Profile (PCR) during OSD
This PowerShell script can be used to control the TPM Platform Validation Profile used when protecting a BitLocker encrypted volume…
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 |
# Set Bitlocker Default Policies # Ignore existing regsitry and file items $ErrorActionPreference = "SilentlyContinue" # Set Default Bitlocker Policies New-Item -Path HKLM:\Software\Policies\Microsoft\FVE # set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE -name 'IdentificationField' -value '1' -Type DWord # set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE -name 'IdentificationFieldString' -value 'Contoso' # set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE -name 'EncryptionMethod' -value '4' -Type DWord New-Item -Path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name '0' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name '1' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name '2' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name '3' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name '4' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name '5' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name '6' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name '7' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name '8' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name '9' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name '10' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name '11' -value '00000001' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name '12' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name '13' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name '14' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name '15' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name '16' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name '17' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name '18' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name '19' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name '20' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name '21' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name '22' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name '23' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\PlatformValidation -name 'Enabled' -value '00000001' -Type DWord New-Item -Path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name '0' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name '1' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name '2' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name '3' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name '4' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name '5' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name '6' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name '7' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name '8' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name '9' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name '10' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name '11' -value '00000001' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name '12' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name '13' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name '14' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name '15' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name '16' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name '17' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name '18' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name '19' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name '20' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name '21' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name '22' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name '23' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_UEFI -name 'Enabled' -value '00000001' -Type DWord New-Item -Path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name '0' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name '1' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name '2' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name '3' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name '4' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name '5' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name '6' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name '7' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name '8' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name '9' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name '10' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name '11' -value '00000001' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name '12' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name '13' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name '14' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name '15' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name '16' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name '17' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name '18' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name '19' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name '20' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name '21' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name '22' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name '23' -value '00000000' -Type DWord set-itemproperty -path HKLM:\Software\Policies\Microsoft\FVE\OSPlatformValidation_BIOS -name 'Enabled' -value '00000001' -Type DWord |