How to Verify and Enable TPM 2.0 on Your PC

Why enable TPM 2.0?

Think of this hardware chip as a digital vault that stores passwords, encryption keys, and sensitive data out of reach from hackers. Because the keys stay inside the chip, malware running on Windows cannot simply copy them. TPM version 2.0 is a mandatory requirement for Windows 11, ensuring your computer hardware is secure for modern software.

Many PCs built in the last several years already have TPM 2.0, but the manufacturer often ships it switched off. That is why a PC that looks fine on paper can still fail the Windows 11 compatibility check.

What happens when done?

Enabling TPM 2.0 brings your PC up to date with modern security standards required for Windows 11. Features such as BitLocker for drive encryption and Windows Hello for secure logins can then use the chip to protect your keys. Future Windows updates will also install correctly, keeping the machine protected against new vulnerabilities.

How to check if your PC supports TPM 2.0

Checking whether your computer supports TPM 2.0 takes just a few seconds using the built-in Trusted Platform Module management tool. You open it with a short command from the Start menu search or the Run box (Win plus R), then read the chip information to see whether the security feature is ready to use.

To check manually, follow these steps:

1. Click the Start button.
2. Type tpm.msc into the search🔍 bar and press Enter.
3. If Windows asks for permission, click Yes. You should now see a window titled TPM Management on Local Computer.

If you see a message saying a compatible TPM cannot be found, the chip is either turned off or missing. Go on to the BIOS section below.

The Trusted Platform Module (TPM) status window will show ‘The TPM is ready for use’ in the Status section. Crucially, the Specification version under TPM Manufacturer Information must display version 2.0 to meet the standard.

If the status says the TPM is ready but the version reads 1.2, the chip is too old for Windows 11. In that case, check your BIOS for a separate firmware TPM option, as described in the next section.

How to enable TPM 2.0 in BIOS/UEFI

Enabling TPM 2.0 requires you to restart your computer, enter the motherboard BIOS or UEFI settings screen, and turn on the security processor option. The exact name of this setting changes depending on your computer manufacturer, but it usually appears under security or advanced settings menus.

Restarting the computer starts the process. As power returns to the system, tapping the BIOS key repeatedly opens the motherboard configuration menu. Start tapping as soon as the screen goes dark, because the window is short. Manufacturers use different keys for this menu, though F2, Del, F10, or F12 appear most frequently.

• ASUSPress F2 or Del.
• MSIPress Del.
• GigabytePress Del.
• HPPress F10 or Esc.
• DellPress F2 or F12.

If tapping the key does not work, you can reach the same screen from inside Windows 11. Go to Settings › System › Recovery, click Restart now next to Advanced startup, then choose Troubleshoot › Advanced options › UEFI Firmware Settings and click Restart. That last option only appears on PCs that boot in UEFI mode.

Once inside the BIOS, look for settings related to your processor:

• IntelSearch for Intel Platform Trust Technology (PTT).
• AMDSearch for AMD fTPM or Firmware TPM.

Some boards label the option simply as TPM, TPM Device, TPM State or Security Device Support. If you cannot find it, check the Security, Advanced or Trusted Computing menus, or use the BIOS search if your screen has one.

Toggle the setting to Enabled, then save your changes and exit. Most BIOS screens use F10 to save and exit, and they ask you to confirm. Your computer will restart with the security processor active. To undo the change later, return to the same setting and switch it back to Disabled.

Troubleshooting Common Errors

Troubleshooting steps help resolve uncommon roadblocks when locating or activating the security chip. Work through these in order:

• The TPM tool still says no compatible TPM: Restart once more and confirm the BIOS setting was saved. Some boards reset it if you leave with Esc instead of using the save and exit option.
• You cannot find any TPM, PTT or fTPM option: Update your BIOS from the manufacturer’s support page. Newer versions often add the option. Very old PCs have no TPM 2.0 at all, and some desktops need a TPM module plugged into a header on the motherboard.
• The option is greyed out: Look for a BIOS supervisor password, which can lock settings. Some boards also hide the option until you switch the boot mode from Legacy or CSM to UEFI.
• The version shows 1.2: Check for a firmware TPM option (PTT or fTPM) in the BIOS. If your motherboard has a separate TPM 1.2 module and no firmware option, the chip cannot be upgraded through Windows.
• You want a second opinion on the result: Open Settings › Privacy & security › Windows Security › Device security. If a Security processor section is shown, TPM is active, and you can open Security processor details to see the specification version.

Summary

• TPM 2.0 is a security chip that protects your data and is required for Windows 11.
• You can check your status by running tpm.msc in the search bar.
• If disabled, you must enter your computer’s BIOS menu to turn it on.
• Enabling this feature ensures your system stays secure and up to date.