One of the prerequisites for Windows 11 is TPM 2.0, the Trusted Platform Module according to Microsoft. Although Windows 11 will install on devices with TPM 1.2, some features may not be available in this case.
In 2016, we published a guide to discovering how a Windows computer supports the TPM. Microsoft revealed at the time that all new PCs should be TPM 2.0 compliant and have it enabled. Existing devices were not affected by the decision at the time.
Now with Windows 11 comes another push to enforce TPM 2.0 on Windows devices. Microsoft claims that most devices sold in the last 5 years are TPM 2.0 compliant and reiterates that TPM 2.0 is required because it is pushing security features like Bitlocker or Windows Hello.
Microsoft recognizes that TPM 2.0 may not be enabled on devices even if the feature is supported. Windows 11 may not install on these devices, even if all other system requirements are met.
The company published a guide that explains how to find out if TPM is enabled and how to enable it on devices if it is supported.
Windows users running Windows 10, the only version of Windows with a direct upgrade path to Windows 11, can verify TPM support in the following two ways:
- Open the Settings app, for example, by selecting Start> Settings, or with the Windows-I keyboard shortcut.
- Go to Update & Security> Windows Security> Device Security.
- TPM is not available if the Security Processor is not displayed on the page that opens.
- TPM is available if the Security Processor is displayed. In that case, select Security Processor to check the version of the specification and find out if it is TPM 1.2 or TPM 2.0.
The second method uses the Microsoft Management Console:
- Use Windows-R to open the run box.
- Enter tpm.msc.
- The window that opens reveals whether the TPM is supported or not, including the version if it is supported.
The device can still support TPM, even if Windows cannot find a TPM module. The TPM can be disabled or enabled in the device BIOS, and if disabled, Windows will not be able to discover or use it.
Microsoft suggests that users go to Settings> Update & Security> Recovery> Restart Now to check UEFI Bios. The reboot option displays a menu on the next reboot. Visit Troubleshooting> Advanced Options> UEFI Firmware Settings> Reboot to have the device load the UEFI settings on the next reboot.
The next steps depend on the make and model of the motherboard. Sometimes the settings can be found in Advanced, Security, or Trusted Computing. The option to enable TPM is also not standardized, as it may be called Security Device, Security Device Support, TPM Status, AMD fTPM Switch, AMD PSP fTPM, Intel PTT, or Intel Platform Trust Technology.
Not all Windows devices are compatible with Windows 11, Microsoft’s upcoming operating system. Some, because they do not meet the system requirements, others, because of a disabled function in the BIOS. The TPM implementation in the BIOS is chaotic and not standardized. Users with little experience will have a hard time finding out if TPM is supported and if it can be enabled in the system BIOS.
Now you: Do your devices support TPM?