VPCZ1 (US) Lack of TPM

I opened up the VPCZ1 to get a better look at where the TPM module fits. It is an extremely small connection. Probably about 1/4 the width of your little finger.

There is not a way for a ribbon to be connected to this. Looking at the design it seems the TPM module would "plug" into it.

As far as I can tell there is no TPM module part even available as a spare in the USA at the moment for both the VPCZ nor the VPCB. I think it unlikely to change and so we will have to source the part elsewhere.

Sony Japan has a parts site but you would need to have a VPCZ1 model from Japan registered on the site in order to view parts. There is a ActiveX control that installs and checks your laptop in order to register. Perhaps someone with a Japanese model could check for us? I have a "MyVaio" account registered for my Sony G1 and G2 but I can't see anything for the VPCZ1.

http://vcl.vaio.sony.co.jp/service/parts/

It seems the only vendor Sony uses for the TPM module is Infineon. The actual TPM chip should be able to work on any notebook that supports the TPM feature. So in theory you should be able to use any TPM part from Sony. Unfortunately the way the module connects to the mainboard becomes a problem.

From my research I can only find 3 models that actually have a removable TPM module whereas every other model has it embedded into the mainboard assembly.

There are the 3 IFX board types and part numbers and the notebook it is applicable to:

IFX-437 Part Number A1178609A costs ~$25 USD for VGNSZ
IFX-503 Part Number A1553757A costs ~$31 USD for VGNZ
IFX-521 Part Number A1599661A costs ~$16 USD for VGNTT

I have seen a picture of each of these but the last, so I can not speak to it. (I took apart of my SZ780 as well). The first two use an FPC style ribbon to connect it to the mainboard making it pretty much useless for our application. I don't know what the IFX-521 looks like so if anyone has a TT style laptop and would not mind helping us that would be great!

I took the liberty of dropping an email to Conics and Dynamism asking if they could source the part we need.

If anyone else can lend a hand checking to see what they might be able to find from their region or contacts that would be much appreciated.

.dj

 

All consumer TPM chips have standardized interface.

However, this does not mean they are interchangeable, because - as you already found out, the connector itself could be different.

I think the best way of sourcing TPM part for new Z would be to try to contact some service in the UK for example (as they speak English and they should have direct access to the part catalogs and since TPM is available in European VPC-Z configurations, they should have no problems locating it)

I used to order parts for old Z from a service partner here in Germany, but starting from last year they stopped selling parts to consumers due to request from Sony They say that "Sony was concerned about quality" bs, it is obvious that the reason is something else

 

Infineon TPM module with a different connector. Not sure if this is useful but here goes: http://www.orbitmicro.com/global/tpm-in01-r10-p-4387.html

 

That's the standard desktop TPM module.

TPM pinout is pretty standard, but the form factor and connector type is different - it would be very hard to hand-produce connector used in Z. It is really small and any mistake means potential motherboard frying .

 

Connector in Z11 is Molex board-to-board and can be purchased (I actually used similar connectors on couple of occasions). But you are right about potential danger of frying something on MB if it's wired incorrectly.

 

You would also need to figure out pin layout on Z... which could be error-prone process without the service manual.

Like I said before - I beliefe the easiest way (next to hoping that Sony U.S. will change their minds regarding TPM) is to call couple of authorized Sony service centers in UK and ask them if they could order the TPM board and ship it to you.

 

I'm travelling at the moment with my "X" i'm back in dubai tomorrow ,, so i'll pull my Z apart and see if there is a number on the TPM, I need to any ways as I bought a King 512SSD and an intel 160SSD and need to play ....

Also I'm going to the Service Center to see the guy there so when we are looking for the "Cables" I'll try and get a part number (confirmed) from him and the parts cost..

 

Or get a hold of the service center in Dubai...or Singapore.... details via www.sony-asia.com or www.sony-mea.com... (Dubai is the best as no Taxes !!!)

 

and also I believe the us part is only availiable in the us due to export issues. somethimes even taking your computer out of the us . they can confiscate it due to the level of encryption it uses

 

can we just all complain to the BBB and make sony take care of it instead of lining their pockets more? still waiting for the response on my complaint.

 

Correct, the Japanese models also have the Intel 6300 WiFi module, which isn't available anywhere else.

Also correct. I "rented" the VPC11 from a SonyStyle retail store. I purchased the VPCZ1 online. Neither have the module.

I still have my Z591. I don't recall seeing a module, but it does have the TPM. I'll try transplanting it if it is accessable.

This is a tricky spot for Sony. As I see it, they have 4 options:

1. Easiest fix is to ship the modules, but it isn't the easiest thing for users to install.
2. Have users take the machines to a service center or SonyStyle store to be retrofitted. Bugger that. If somebody is going to tinker inside and break something, it will be me. A SZ model I sent in for DVD repairs came back with bent parts and missing screws.
3. Give everyone with Win7 Ult $50.
4. Do nothing and hope the issue goes away or claim it wasn't ever included.

Double or nothing, #4 is what we will get.

 

@Zoinks
Just wondering if you have some experience fitting in a 3x antenna wifi card then? Maybe the Intel 5300AGN into your older Z? If so, do you have any tips routing the third antenna for the models that come with 5100 (or 6100 for that matter, the two antenna ones)?

And I ditto with Zoinks. I've opened my Z a few times, and never did see a smallish looking, detachable chip. But then, I've seen some images where in the older Z, just above where the F8 key is, there seems to be a white, unused socket there. I've yet to re-open my older Z up to confirm whether mine has a simlar thing. And this is me with a second gen Z with TPM showing up in Device Manager with a clean installed W7 x64.

...Knowing Sony, no. 4 is extremely likely. Unless someone wants to create polled thread here, petition, and mass spam Sony Support pointing to that thread (like I'm prepping with my battery drain issue, see sig).

 

Don't think there is a 6100. It's the 6200, 6250 with WiMAX and 6300.

Retrofitting a 3 lead Wifi card is doable in either device. I'm going to stick with the 6200 in the new machine. It works better than the 5100 ever did and is satisfactory for my usage.

 

I put 5300 into Z690, fitted it horizontally in the case, towards touchpad.
No sense to route it into display as it will simply duplicate one of the original 2 antennas. Also, photos of opened VPCZ1 with 6300 (factory installed) show that third antenna goes towards the front left corner of the case. See white wire on this image (grey and black go into display): http://i921.photobucket.com/albums/ad60/x1883/P1000363.jpg

P.S. Got me a 6300 card, just need to open up new Z to install it (have an extra antenna ready too).

 

Only problem is that the wires terminate into some metal adapters. You can see two of them in this pic of the disassembled screen.



Don't know if it would make any difference not having this kind of part for the 3rd wire. The US models do not have this piece.

 

Here are the TPM pictures from the old Z (VGN-Z)

- TPM comes on a special module, as in new Z
- It is easy to fit it in, and remove it
- I am not sure if the pin out is the same

See attached pic.

 

Excellent psyq231. I'll give it a go.

Last tangential item on the Wifi... never noticed before, but the entire PCB sub-assembly appears to be different between the US and Japanese models. The media card adapters are different, but surely they didn't need to cut the PCB differently to house the extra Wifi part. Right? The Japanese models not come with the ExpressCard slot?

 

By the way

You can get those mini WiFi antenna cables with metal parts:

http://cgi.ebay.de/TYCO-2x-MINI-PCI...puter_Peripherie_Netzwerk?hash=item35a462f869

http://cgi.ebay.de/2x-MINI-PCI-E-An...puter_Peripherie_Netzwerk?hash=item3a54109782

I'll order some as I just ordered 6300 for my new Z.

I guess we just need to find place to fit it in, and also make sure it does not touch anything with metal part.

 

If those wires are long enough, you can wrap the metal bits in electrical tape then tape it down next to the CMOS battery.

Make a new thread and do some benchmarks. If the throughput is markedly increased at longer distances, I may join you with the upgrade.

 

I definitely will make a new thread as soon as I get the card & cables... I ordered them from the same guy on ebay, and since he is in Hong Kong, I guess it will be here in a week.

It is also not just the bandwidth I am looking for - but robustness in "noisy" conditions as well... so let's see...

Back on-topic, looking at the TPM module on the old Z it looks extremely similar to the new Z's module. I cannot open the new Z now as I work on it But, next time I open it I will definitely compare the new TPM module with the old one.

 

Just tried the transplant. It snaped in fine, I aligned it following the Japanese model as a, well, model.

The machine won't post with the module installed. It wouldn't turn on at all. I removed the chip and it started fine.

I cleared it before moving it over, btw.

I haven't feature enabled my BIOS yet (insyde hack). Perhaps you need to enable the function before installing. I'm not sure.

This satisfies my curiosity, so I'm going to reinstall it in the elder-Z. I'll post pics shortly.

 

Looks like pinout is different. But watch this ( http://www.sparepartswarehouse.com/Sony,Laptop,Parts.aspx) space for new Z. They currently seem to have various PCBs, FPCs, brackets, etc. for older Z models. Let's hope they'll have parts for new one.

 

Pictoral

Z591:


VPCZ1:


Trilobite:

 

LOL @trilobite

Also, in other news - it looks like here in EU Sony will have to cough up to 100 EUR to customers asking for a refund due to that Linux feature removal:

http://www.engadget.com/2010/04/09/ps3-owners-eligible-for-cash-refund-after-other-os-removal/

I don't know if something similar exists in the U.S., but I guess it should and it should fall into false advertising if Sony's webpage indeed showed TPM as part of the deal at some point...

 

I tried that exact same thing using the TPM module from my G1. It was a no go..

.dj

 

You can keep an eye on the parts page from Sony doing a search for VPCZ1.

https://servicesplus.us.sony.biz/sony-parts.aspx

I do have serious doubts that this part will be even available anywhere in NA given that is not available even as an option on any NA model.

I got word back from conics.net and sourcing the part is a no go.

Clayton from Dynamism got back to me and he is checking with his suppliers in Japan.

.dj

 

and then you woke up...having a TPM is a higher level of encryption on board..... ah ha I see its the inverse they dont want anybody in the US to have strong encryption...!

 

Just to clear up a couple of things regarding TPM.....

TPM provides a secure location to store encryption keys and certificates. It does not "increase" the level of encryption nor is it "hardware based" encryption, although it does provide hardware based acceleration for signature verification and calculation. What it does is help provide a more "secure" operating environment.

In a nutshell TPM encrypts your private keys and certificates that are generated. It then uses its own wrapper (binds) and encrypts your key with its key and stores it on the TPM module.

This means you can't just take a drive out of a computer and slap it in another run an attack and read the data. You need to have the TPM module (or key, token, etc.) as well. This makes it much more difficult to compromise the data. If TPM is used with Bitlocker it will actually authenticate the boot sector protecting the OS from boot attacks (rootkits, etc.).

Now all of this doesn't get around having crappy passwords and a generally insecure system. Having a blank password for logon makes all of this moot.

Keep in mind this is just a brief overview and there is much, much more to it than this with endless information and debate on the subject.

 

@psyq321
Have you tried turning on the older Z without the 'TPM chip' installed? You could always check whether it is really a TPM module by going into Device Manager and seeing if it is gone or not...

I only guessed that as a TPM chip (well, so far, my guess is correct in regards that it is removable). But just to confirm, we don't even know whether that is a TPM chip (moreso since the new Z doesn't even seem to like it for some reason...)

 

actually security exports are big buisness. just like des encryption modules.

 

My G1 and SZ posted and booted fine with the chip removed.

.dj

 

Btw, that module on pictures is definitely the TPM chip.

Why the notebook does not post is another matter - it could be a different pinout, but maybe it is actually not allowed to transport TPM chips without some prior setup... maybe it gets "paired" with the notebook.

Someone from Sony service center should definitely have a clue.

 

You are defiantly on to something. Infineon, and others I assume, do have different versions of their chip although they all conform to the same TPM specification (1.2). I would lean toward pinouts as well.

One of the specifications of the Trusted Computing Group (TSG) is Core Root of Trust for Measurement. In essence this establishes platforms of trust from when you hit the power button all the way to OS startup.

So when you hit that power button the chip does various hash checks against the hardware and again checks all the way through OS load.

The chip itself has various mechanisms to protect against physical attacks.

However, my understand, that all of these countermeasures do not become "active" until the module is activated. When you "activate" the module the very first thing you do is "take ownership". This is where an owner key and a the Root Storage Key are activated (password) and stored into the chip. At this point the module is tied to your hardware.

So the security is not suppose to active until you elect to activate the chip which ties it to your hardware then deactivating the chip would make it "dumb" again. With that being said, this is probably why we can buy replacement / add on TPM modules.

So I think you hit on the key here... the pinout or the version of the chip is probably what is causing our attempts to fail.

There is a toolset called tpm-tools that allows you to take activate and take ownership of the chip. But again the assumption here is you already have a working implementation.

I haven't heard back from Dynamism yet, but I still have hopes. This really should be as simple as getting the part and mounting it on our boards. USA and EURO ROMs are the same so there should be no reason for it not to work.

I really hope we can get this part. It just seems so stupid why this isn't even available. Maybe when Sony releases the B2B Z11 it might be an option? Still reading their specs on the B2B site does specify a TPM module either seems rather obtuse.

.dj

 

New to this forum - great thread!

While this TPM seems like 'nice to have' or 'high end option' for many (apparently including Sony), this simple exclusion is a make or break factor for me and the sole reason I can't purchase the new Vaio Z which as far as I'm concerned is unequaled in the market.

Quite simply, my company uses Bitlocker and requires TPM-enabled machines for corporate compliance. I suspect more and more organizations will require full-disk encryption in the future. For an executive notebook aimed at the most mobile and most susceptible to theft, I view it as amazingly shortsighted for Sony to cut corners in this area.

I'll be closely following this thread and hope (like the many others here) that Sony corrects this bungled decision.

 

Time to wake this thread up..

I heard back from Clayton at Dynamism. Unfortunately Sony Japan stated that they could not supply that part. It wasn't clear if they could not supply that part period (not available) or it was an issue of it coming to the USA. I very much appreciate the courtesy from Dynamism and Clayton for the kind emails and follow through.

I also heard back from Sony Parts Research: "Unfortunately, I am unable to determine what part you need based on the supplied information in your letter. Please confirm the model number of your product.."

They have no clue what I am talking about.

Trying to find a supplier for this part is uneventful thus far.

I wish we could confirm if that part is completely unavailable.

Sony's B2B Z11 is available now. There is no difference between these models and the "Home" series that I can find. Not even in the warranty. This also means no TPM.

I am investigating a small glimmer of hope. Sony has also released the new B2B VPCB11 series notebook. This notebook does come with TPM. So who cares right?

Well here is the interesting thing: The VPCB11 series uses the same 5 series chipset that our VPCZ11 does. The B uses HM55 and the Z uses HM57. They also come with the same processors options as our Z11.

The software from Sony eSupport for the TPM professional package shows that the software is supported on both the VPCZ11 and the VPCB11.

So given the small similarities I wonder if you could transplant the TPM module. I don't know if the module is embedded or not. Unfortunately I lean towards the embedded, at this time, as it doesn't seem the model is a) available with / without the TPM module (they all come with it as far as I can tell and b) The mainboard assembly replacement part indicates explicitly TPM in the description.

There is nothing certain yet. The TPM modules that we have found are all IFX-??? parts. There is a part for the VPCB11 labeled IFX-562 (A1768391A). There is no other description about what this part is. Searching for it yields nothing. Many "add-on" boards for a VAIO use the IFX prefix so it could be anything. I have sent an email to Sony Parts Research to see if I can get a better description for what this part is. The small glimmer of hope comes from that fact that the TPM module on some previous models is available as a replacement part.

psych321 by chance have you been able to check what it says on your TPM module? You mentioned that you might check it out as you were getting some parts for your euro Z11.

Just to note... So far it seems that the only notebook in the new VPC series that has TPM is the B series.

 

I just opened my Z and checked the TPM module.

Unfortunately, on the new Z's TPM module there is no part # anymore

It only contains digits "12" which does not tell much.

Chip itself is definitely from Infineon

 

If it is of any help, the chip on the new Z TPM module is:

SLB9635TT12

It appears it is the same chip as in IFX-503

The only difference is that old TPM board has a part # "IFX-503 11" while the new board only has number "12" on it...

@edit - I pulled the TPM module out, and made some hi-res photos. Attached with this message.

 

While trying to solve the power-drain mystery when extra SSD was connected, I also photographed TPM modules of the new and old Z together.

See attached image.

It looks like module connection is upside down comparing one to another.

Maybe this is what was preventing booting...

 

Looks like there are fewer pins as well. 9 rows on the new, 10 on the old.

 

Ah yes looks like I missed that... damn, I definitely need some sleep... spent the last 15 hours trying to solve Z's AHCI/RAID ROM issues causing power drain...

Interesting thing is that the TPM chip itself is the same. I wonder what were those extra 2 pins for...

 

Well, I feel silly because when I did the transplant it seemed to snap in fine. Obviously it couldn't, at least not completely.

 

Knowing Sony, just to spite users and make it incompatible (see battery incompatibility between old and new Z)

 

Has anyone else submitted a BBB complaint? BBB New York isn't responding to my requests for a status update, and their phones all seem to not work....

 

Hi guys - interesting thread. I just go my new Z11 on Friday, wiped it to install a fresh copy of Win7 Ultimate, and then got stuck for a couple of hours trying to figure out why the TPM module wasn't being recognized...

Anyway, if the module is an option on Japanese Z's, then it must have a part number. Someone in one of the countries with TPM'ed Z's will have to pester Sony parts/repair until the part is tracked down.

My big question is: why?? The part is cheap, so I don't believe it was a cost-savings move. Seems more likely there was some non-technical reason for it (upcoming patent problems for Infenion, perhaps).

I hoped I could get a TPM module on an ExpressCard, but it seems they don't make these?

 

I have a TW version and it comes standard with TPM. I am putting it up for sale now since I want a slightly bigger laptop.

 

What a pain in the neck -- in the same boat and need TPM for compliance reasons. Only a few laptops have them and it's damned near impossible to search for them as a filter in any store or review site. And nothing like the Sony. Not easy to add aftermarket given how these things are used, too.

 

This is interesting. So you have a Z from SonyStyle and it is made in USA?

The Z sold at MicroCenter says made in Japan on the bottom. Maybe this one has the TPM module?

Update: Nevermind, seems confirmed that even these do not have TPM module.

 

My UK Z series was also delivered without the TPM module although if I now check the spec on the UK Sony site, it does list it without the "security" platform. I'm sure the site didn't make any reference to it when I ordered although proving that to Sony is proving tedious!

Has anyone managed to identify the part number and a source for the module yet? Is anyone with a suitably equipped new Z able to open it up and provide some details?

 

You should be able to in contact with Sony Parts in the UK and inquire about it, as TPM is an option in the UK, whereas many of us in USA and Canada do not even have it as an option.

If you do manage to get a part # from Sony UK many of us would be extremely appreciative if you could provide it.

 

Time to wake this thread up again. Any news???