How to Enable or Disable the “Clear TPM” Button in Windows 11 Security App

What is TPM?

Trusted Platform Module (TPM) hardware acts as a dedicated security processor inside modern motherboards, storing sensitive data like disk encryption keys and passwords away from the main operating system. Think of it as a tiny security guard for your PC.

What Does the “Clear TPM” Button Do?

The "Clear TPM" button in Windows 11 resets your Trusted Platform Module (TPM) security chip. This action restores the TPM to its original factory settings, which can help resolve certain security issues.

Why Would You Turn Off the “Clear TPM” Button?

Shared PCs benefit from turning off this button. Hiding the option stops anyone else from accidentally wiping the security chip.

How to Turn On or Off the “Clear TPM” Button Using Local Group Policy Editor

1. Press Win + R to open the Run box.
2. Type gpedit.msc and press Enter. This opens the Local Group Policy Editor.
3. Follow this path in the left panel: Computer Configuration > Administrative Templates > Windows Components > Windows Security > Device security
4. Click on Device security in the left panel.
5. Double-click Disable the Clear TPM button on the right side.
6. Choose one of these options:

   • Not Configured or Disabled: The Clear TPM button will be available.
   • Enabled: The Clear TPM button will be turned off (hidden).
7. Click OK to save.
8. FLAG: Requires admin privileges — Restart your 🔄 PC to apply the changes.

The Local Group Policy Editor lets you turn the Clear TPM button on or off in Windows 11. This tool controls how your PC’s security chip settings are accessed, helping restrict who can clear the TPM.

How to Turn On or Off the “Clear TPM” Button Using Windows Registry Editor

Registry Editor provides an alternative method for managing the Clear TPM button in Windows 11 if the Group Policy Editor remains unavailable. This approach lets you enable or disable access to the button that affects your PC’s security chip.

1. Press Win + R to open the Run box.
2. Type regedit and press Enter. This opens Registry Editor.
3. Navigate to this folder: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Device security
4. If the Device security folder doesn’t exist, you need to create it:

   • Right-click on 🖱️ Windows Defender Security Center in the left panel.
   • Select New > Key.
   • Name it Device security.
5. Right-click inside the Device security folder in the right panel.
6. Select New > DWORD (32-bit) Value.
7. Name the new value: DisableClearTpmButton
8. Double-click DisableClearTpmButton to open it.
9. Set the Base to Decimal.
10. Set the Value data to:

    • 1 to turn off (disable) the Clear TPM button.
    • 0 or delete the value to turn on (enable) the button.
11. Click OK and close Registry Editor.
12. FLAG: Requires admin privileges — Restart your 🔄 PC to apply the changes.

Summary

Resetting the security chip through the Windows 11 Security app impacts existing PINs, fingerprint logins, and BitLocker drive encryption.

Device security features rely on this setting for proper operation. Enabling or disabling the button affects the TPM's functionality, including BitLocker encryption. Managing this configuration requires the Local Group Policy Editor or Registry Editor, both built-in Windows tools.

Rebooting your PC applies these modifications immediately. For more details, see the Clear TPM guide.