VBScript – Verify TPM Status

I’m at the moment preparing a massive rollout of Microsoft Windows 7 for 10.000 machines.
One of the goals it’s to activate Bitlocker on all desktops and laptops.

While on testing phase, we’ve noticed that most of the time the installation teams forgotten to make the proper TPM changes on BIOS.
So, we’ve decided to create a VBScript to verify if the changes we’re made.
While TPM isn’t initialized and activated the installation doesn’t continue.

So, here’s the script:
(note: this script also verifies if the scripts is running on a virtual machine. If so, it doesn’t continue)

'-------------------------------------------------------------------------'
'  Variables And Objects Initialization                                   '
'-------------------------------------------------------------------------'
Err.Clear

Set wshShell = WScript.CreateObject("WScript.Shell")
Set Network = CreateObject("WScript.Network")
Set FSO = CreateObject("Scripting.FileSystemObject")

Set objWMIService = GetObject("WinMgmts:{impersonationLevel=impersonate,AuthenticationLevel=pktprivacy}//" & "." & "\root\CIMV2\Security\MicrosoftTpm")
Set objItems = objWMIService.InstancesOf("Win32_Tpm")

strScriptName = WScript.ScriptName
strScriptRunTime = FormatDateTime (Now,0)
strComputerName = Network.ComputerName
LoggedUser = Network.Username

strSystemManufacturer = wshShell.RegRead("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SystemInformation\SystemManufacturer")

aspas = Chr(34)

'-------------------------------------------------------------------------'
'  MAIN                                                                   '
'-------------------------------------------------------------------------'

'Verify if Virtual Machine
If strSystemManufacturer = "VMware, Inc." or strSystemManufacturer = "Microsoft Corporation" Then
     WriteLog (strScriptName & " - Virtual Machine detected - TPM verification not needed.")
     WScript.Quit
End If

'Verify TPM Status
For Each objItem in objItems
  strTPMOn = True
  strTPMEnabled = objItem.IsEnabled(A)
  strTPMActivated = objItem.IsActivated(B)
  strTPMOwned = objItem.IsOwned(C)

    If (strTPMOn = True) Then
        WriteLog (strScriptName & " - TPM Powered On.")
    Else
        WriteLog (strScriptName & " - TPM not correctly configured - TPM not Powered On.")   
    End If

     If A Then
         WriteLog (strScriptName & " - TPM Enabled.")
     Else
         WriteLog (strScriptName & " - TPM not correctly configured - TPM not Enabled.")
     End If

    If B Then
         WriteLog (strScriptName & " - TPM Activated.")
     Else
         WriteLog (strScriptName & " - TPM not correctly configured - TPM not Activated.")
     End If
Next

'-------------------------------------------------------------------------'
'  ERROR CONTROL                                                          '
'-------------------------------------------------------------------------'

If Err.Number = "0" Then
    WriteLog (strScriptName)
Else
    WriteLog(strScriptName & " - ERRO" )
    WriteError(strScriptName & " - Error Number=" & err.Number & " | Error Desc.=" & err.Description)
End If

'-------------------------------------------------------------------------'                                                                        '
' FUNCTIONS                                                               '
'-------------------------------------------------------------------------'

'************************************'
' WRITELOG                           '
'************************************'

Function WriteLog(Msg)
  Dim objTextLog
  if FSO.FileExists("C:\SetupLogs\Settings.log") Then
    Set objTextLog = FSO.OpenTextFile("C:\SetupLogs\Settings.log", 8)
  Else
    Set objTextLog = FSO.CreateTextFile("C:\SetupLogs\Settings.log")
  End If
  objTextLog.WriteLine "[" & FormatDateTime(Now, 0) & "] " &  Msg
  objTextLog.Close

End Function

'************************************'
' WRITEERROR                         '
'************************************'

Function WriteError(Msg)
  Dim objTextLog
  If FSO.FileExists("C:\SetupLogs\SetupErrors.log") Then
    Set objTextLog = FSO.OpenTextFile("C:\SetupLogs\SetupErrors.log", 8)
  Else
    Set objTextLog = FSO.CreateTextFile("C:\SetupLogs\SetupErrors.log")
  End If
  objTextLog.WriteLine "[" & FormatDateTime(Now, 0) & "] " &  Msg
  objTextLog.Close
End Function

Technorati Tags: vbscript,tpm,bitlocker,wmi