diff --git a/Wiki posts/Miscellaneous/Things to do when clean installing Windows.md b/Wiki posts/Miscellaneous/Things to do when clean installing Windows.md index 83a5c6ee2..02bd5f14b 100644 --- a/Wiki posts/Miscellaneous/Things to do when clean installing Windows.md +++ b/Wiki posts/Miscellaneous/Things to do when clean installing Windows.md @@ -1,20 +1,32 @@ # Things to do when clean installing Windows -There are certain tasks that need to be performed for a proper Windows clean installation +There are certain tasks that need to be performed for a proper Windows clean installation. Not all of the items below apply to all hardware. -## Clear the TPM +
-Preparing for a clean installation in this way helps ensure that the new operating system can fully deploy any TPM-based functionality that it includes, such as attestation. +## BitLocker -* [Clear all the keys from the TPM](https://learn.microsoft.com/en-us/windows/security/information-protection/tpm/initialize-and-configure-ownership-of-the-tpm#clear-all-the-keys-from-the-tpm) +Suspend the protection of the OS drive and make sure you have the recovery password of all other non-OS drives so that you will be able to unlock them after clean installation of the OS. -* [How Windows uses the Trusted Platform Module](https://learn.microsoft.com/en-us/windows/security/information-protection/tpm/how-windows-uses-the-tpm) +
+ +## Intel VMD Drivers (Varies by device) + +If you use a modern hardware that uses Intel® Volume Management Device (Intel® VMD) technology, you will need to download the VMD drivers on a flash drive and load them during Windows OS installation so that the OS installer will be able to detect the internal SSD and its partitions. You can download the VMD drivers from your hardware manufacturer's website. + +* [How to Enable Intel® VMD Capable Platforms for RAID or Intel® Optane™ Memory Configuration with the Intel® RST Driver](https://www.intel.com/content/www/us/en/support/articles/000057787/memory-and-storage/intel-optane-memory.html)
-**Clear the TPM from the UEFI settings and and not from inside the Windows** +## Clear the TPM (Varies by device) -[Read more about TPM 2.0 specifications](https://trustedcomputinggroup.org/wp-content/uploads/PC-Client-Specific-Platform-TPM-Profile-for-TPM-2p0-v1p05p_r14_pub.pdf) +Not all devices have this capability in the UEFI. If your UEFI has the option to clear the TPM, use it prior to clean installation of the OS. + +* [Clear all the keys from the TPM](https://learn.microsoft.com/en-us/windows/security/information-protection/tpm/initialize-and-configure-ownership-of-the-tpm#clear-all-the-keys-from-the-tpm) + +* [How Windows uses the Trusted Platform Module](https://learn.microsoft.com/en-us/windows/security/information-protection/tpm/how-windows-uses-the-tpm) + +* [Read more about TPM 2.0 specifications](https://trustedcomputinggroup.org/wp-content/uploads/PC-Client-Specific-Platform-TPM-Profile-for-TPM-2p0-v1p05p_r14_pub.pdf)
@@ -28,6 +40,8 @@ Let Windows recreate them during clean installation process
+
+ ## How to create a bootable USB drive without 3rd party tools [Refer to this Wiki post](https://github.com/HotCakeX/Harden-Windows-Security/wiki/Create-Bootable-USB-flash-drive-with-no-3rd-party-tools)