How to Enable TPM 2.0 on PC

How to Enable TPM 2.0

When Microsoft announced Windows 11’s hardware requirements, it brought attention to a long overlooked component of modern computers – TPM.

Now that Windows 11 requires computers to have TPM 2.0 enabled, you’re probably wondering how to enable TPM 2.0.

In this article, we’ll cover how to check if your computer has TPM 2.0, as well as how to enable it.

What Is TPM?

A TPM, or Trusted Platform Module, is a small chip on a computer that houses keys and other security measurements that allow your computer to authenticate the platform. In essence, it holds the keys to any encrypted device on your computer, and provides extra security with dedicated hardware, preventing software from hijacking the bootloader and kernel of the operating system.

Windows 10 and 11 also uses TPM for an assortment of features, including BitLocker Drive Encryption, Data Execution Prevention, and Windows Hello.

Now that you have a rudimentary understanding of what TPM is, let’s look at how to figure out if your computer has TPM 2.0.

How to Check If Your Computer Has TPM 2.0 for Windows 11

If you want to upgrade to Windows 11, you’ll need to make sure your computer has TPM 2.0 on it. You can check in your computer’s BIOS, but there are also a few ways to check from within Windows 10.

Through Device Manager

First, you’ll need to open the Device Manager by right-clicking the Start menu and clicking on Device Manager.

Device Manager

On Device Manager, find and click on Security devices to expand the tree. If you see Trusted Platform Module 2.0, then you have TPM 2.0.

Trusted Platform Module 2.0

If you do not see Security devices, either your computer doesn’t support TPM or it isn’t turned on in the BIOS.

Through the Management Console

You can also find out if your computer has TPM 2.0 through the Management Console. Simply open a Run box (Windows key + R), type in tpm.msc, and press Enter.

tpm.msc

In the Management Console, you’ll see either Compatible TPM cannot be found, or you’ll have an overview of your TPM. If you see the second option, then you’ll need to look for Specification Version: under the TPM Manufacturer Information. This will tell you which version of TPM your computer has.

Specification Version

With the Command Line

If you prefer to use the command line to figure out if your computer has TPM 2.0, then you’re in luck! First, open a Run box (Windows key + R), type cmd, and press Enter.

cmd

In the command prompt, type in the following command and press Enter:

wmic /namespace:\\root\cimv2\security\microsofttpm path win32_tpm get * /format:textvaluelist.xsl

Now you’ll need to read the list the command prints to the console. If IsActivated, IsEnabled, and IsOwned are TRUE, then you have TPM 2.0.

TPM 2.0 Verification Through Command Prompt

How to Enable TPM 2.0

If you’re looking to enable TPM 2.0 on your computer, you’ll need to boot the computer into BIOS and enable it. The quick way to do this is to hit the right key after you start your computer to launch the BIOS on your computer. But the key you’ll need to press depends on your computer, and it can sometimes be difficult to time it right if the computer quickly boots up.

To make things a little easier, we’ll instead show you how to get to the BIOS settings through Windows.

To start, first you’ll need to open up the Settings app (Windows key + I). On the Settings app, go to Update & Security.

Update & Security

On the Update & Security page, click on the Recovery tab.

Recovery

In the Recovery page, you’ll need to click on the Restart now button that’s under the Advanced startup heading.

Restart Now

Once the computer restarts, click on the Troubleshoot button.

Troubleshoot

Now click on Advanced options.

Advanced Options

Finally, click on the UEFI Firmware Settings button, and the computer will restart and launch you into the BIOS.

UEFI Firmware Settings

Once you’re in BIOS, the next steps will vary depending on what motherboard you have and whether or not you have an Intel or AMD CPU.

Typically, you’ll have to go into your BIOS’ Advanced Settings menu and toggle the TPM  setting to ‘Enable.’ There are a number of different names for the TPM setting you are looking for could be listed as, including:

  • TPM Device
  • Trusted Platform Module
  • TPM Device Selection
  • AMD fTPM Switch

Here is an easy-to-follow video that should help you find the TPM 2.0 setting in your BIOS:

How to enable TPM 2.0 and Secure Boot for Windows 11

Note: If you don’t have the UEFI Firmware Settings option, then you’re using a Legacy BIOS. That means this won’t work, and you aren’t able to enable TPM 2.0. If your computer is TPM 2.0 compatible, then you’ll need to switch from Legacy to UEFI, which may require you to reinstall Windows or convert your Windows installation to a GPT partition.

Cody Brown

Cody is a gamer, writer, and computer programmer who's always looking to optimize and automate everyday tasks. When he's not immersed in prose and code, he's busy tinkering with computers, automating his home, and spending time with his wife and kids.

Tech Guided is supported by readers. If you buy products from links on our site, we may earn a commission. This won't change how much you pay for the products and it doesn't influence our decision in which products we recommend. Learn more

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.