When Microsoft announced Windows 11’s hardware requirements, it brought attention to a long overlooked component of modern computers – TPM.
Now that Windows 11 requires computers to have TPM 2.0 enabled, you’re probably wondering how to enable TPM 2.0.
In this article, we’ll cover how to check if your computer has TPM 2.0, as well as how to enable it.
What Is TPM?
A TPM, or Trusted Platform Module, is a small chip on a computer that houses keys and other security measurements that allow your computer to authenticate the platform. In essence, it holds the keys to any encrypted device on your computer, and provides extra security with dedicated hardware, preventing software from hijacking the bootloader and kernel of the operating system.
Windows 10 and 11 also uses TPM for an assortment of features, including BitLocker Drive Encryption, Data Execution Prevention, and Windows Hello.
Now that you have a rudimentary understanding of what TPM is, let’s look at how to figure out if your computer has TPM 2.0.
How to Check If Your Computer Has TPM 2.0 for Windows 11
If you want to upgrade to Windows 11, you’ll need to make sure your computer has TPM 2.0 on it. You can check in your computer’s BIOS, but there are also a few ways to check from within Windows 10.
Through Device Manager
First, you’ll need to open the Device Manager by right-clicking the Start menu and clicking on Device Manager.
On Device Manager, find and click on Security devices to expand the tree. If you see Trusted Platform Module 2.0, then you have TPM 2.0.
If you do not see Security devices, either your computer doesn’t support TPM or it isn’t turned on in the BIOS.
Through the Management Console
You can also find out if your computer has TPM 2.0 through the Management Console. Simply open a Run box (Windows key + R), type in tpm.msc, and press Enter.
In the Management Console, you’ll see either Compatible TPM cannot be found, or you’ll have an overview of your TPM. If you see the second option, then you’ll need to look for Specification Version: under the TPM Manufacturer Information. This will tell you which version of TPM your computer has.
With the Command Line
If you prefer to use the command line to figure out if your computer has TPM 2.0, then you’re in luck! First, open a Run box (Windows key + R), type cmd, and press Enter.
In the command prompt, type in the following command and press Enter:
wmic /namespace:\\root\cimv2\security\microsofttpm path win32_tpm get * /format:textvaluelist.xsl
Now you’ll need to read the list the command prints to the console. If IsActivated, IsEnabled, and IsOwned are TRUE, then you have TPM 2.0.
How to Enable TPM 2.0
If you’re looking to enable TPM 2.0 on your computer, you’ll need to boot the computer into BIOS and enable it. The quick way to do this is to hit the right key after you start your computer to launch the BIOS on your computer. But the key you’ll need to press depends on your computer, and it can sometimes be difficult to time it right if the computer quickly boots up.
To make things a little easier, we’ll instead show you how to get to the BIOS settings through Windows.
To start, first you’ll need to open up the Settings app (Windows key + I). On the Settings app, go to Update & Security.
On the Update & Security page, click on the Recovery tab.
In the Recovery page, you’ll need to click on the Restart now button that’s under the Advanced startup heading.
Once the computer restarts, click on the Troubleshoot button.
Now click on Advanced options.
Finally, click on the UEFI Firmware Settings button, and the computer will restart and launch you into the BIOS.
Once you’re in BIOS, the next steps will vary depending on what motherboard you have and whether or not you have an Intel or AMD CPU.
Typically, you’ll have to go into your BIOS’ Advanced Settings menu and toggle the TPM setting to ‘Enable.’ There are a number of different names for the TPM setting you are looking for could be listed as, including:
- TPM Device
- Trusted Platform Module
- TPM Device Selection
- AMD fTPM Switch
Here is an easy-to-follow video that should help you find the TPM 2.0 setting in your BIOS:
Note: If you don’t have the UEFI Firmware Settings option, then you’re using a Legacy BIOS. That means this won’t work, and you aren’t able to enable TPM 2.0. If your computer is TPM 2.0 compatible, then you’ll need to switch from Legacy to UEFI, which may require you to reinstall Windows or convert your Windows installation to a GPT partition.