How to Enable TPM 2.0 in BIOS

Trusted Platform Module (TPM) 2.0 is one of the key requirements for installing Windows 11. It enhances system security by storing cryptographic keys and ensuring hardware-level protection. If you receive an error saying your PC can’t run Windows 11 due to missing TPM 2.0, don’t worry—most modern systems already include it but it may be disabled in BIOS. This guide will show you how to enable TPM 2.0 safely.

1. Check If Your PC Has TPM 2.0

Before entering the BIOS, confirm whether TPM exists on your system:

Press Windows + R, type tpm.msc, and press Enter.
If you see “The TPM is ready for use” and Specification Version 2.0, TPM is already enabled.
If you see “Compatible TPM cannot be found,” you’ll need to enable it in BIOS.

2. Enter BIOS or UEFI Firmware Settings

To access BIOS or UEFI, use one of the following methods:

Press Windows + I to open Settings.
Go to System > Recovery.
Under Advanced startup, click Restart now.
When your PC restarts, select Troubleshoot > Advanced options > UEFI Firmware Settings > Restart.

Alternatively, you can press the BIOS key (usually Del, F2, F10, or Esc) during boot depending on your motherboard manufacturer.

3. Locate the TPM Setting in BIOS

Once inside the BIOS, the TPM setting might appear under different names depending on your hardware brand:

Intel systems: Look for PTT (Platform Trust Technology).
AMD systems: Look for fTPM (Firmware TPM).

Common menu paths include:

Security > Trusted Computing
Advanced > TPM Configuration
Security Device Support

4. Enable TPM 2.0

Once you’ve found the TPM or Security Device option:

Select Enable or Turn On.
Save changes by pressing F10 (Save and Exit) or following the on-screen instructions.
Allow your system to restart normally.

5. Verify TPM Activation in Windows

After your PC restarts, confirm TPM 2.0 is active:

Press Windows + R, type tpm.msc, and press Enter.
You should now see that TPM is ready for use with specification version 2.0.

6. Enable Secure Boot (Optional but Recommended)

Secure Boot ensures that only trusted software can load during system startup. It’s often located near TPM settings in BIOS.

Find Secure Boot under the Boot or Security tab.
Set it to Enabled.
Save changes and exit BIOS.

7. Update BIOS if TPM Is Missing

If TPM options are not visible, your system might need a BIOS update:

Visit your motherboard or laptop manufacturer’s support website.
Download and install the latest BIOS firmware.
Restart and check the BIOS again for TPM options.

8. Prepare for Windows 11 Installation

Once TPM 2.0 and Secure Boot are enabled, your PC meets two of the most important Windows 11 requirements. You can now proceed with the installation or upgrade process.

Related Guides

Meta Description:
Learn how to enable TPM 2.0 in BIOS to meet Windows 11 requirements. Follow this easy step-by-step guide to turn on TPM and Secure Boot safely.

How to