Creation of non-migratable Basic User Key

Enabled/On demand: Users are prompted to create their non-migratable Basic User Key, when they are going to use Infineon TPM Strong Cryptographic Provider for the first time. Note that the Strong Cryptographic Provider requires a non-migratable Basic User Key.

Enabled/Automatic: For new users, the non-migratable Basic User Key is automatically created during user initialization. For users who are already initialized, the non-migratable Basic User Key is created on demand.

Disabled: No non-migratable Basic User Key is created, i.e. the Infineon TPM Strong Cryptographic Provider cannot be used.

Default value: Enabled/On demand

Supported on:
Registry HiveHKEY_CURRENT_USER
Registry PathSoftware\Policies\Infineon\TPM Software
Value NameNonMigratableBUKPol
Value TypeREG_DWORD
Enabled Value1
Disabled Value0

Select an option to enable:


  1. Automatic
    Registry HiveHKEY_CURRENT_USER
    Registry PathSoftware\Policies\Infineon\TPM Software
    Value NameNonMigratableBUK
    Value TypeREG_DWORD
    Value1
  2. On demand
    Registry HiveHKEY_CURRENT_USER
    Registry PathSoftware\Policies\Infineon\TPM Software
    Value NameNonMigratableBUK
    Value TypeREG_DWORD
    Value2


ifxsppol.admx