How to Enable TPM 2.0 for Windows 11

This guide will teach you how to enable TPM 2.0 (Trusted Platform Module 2.0) so that your hardware-compatible PC can run Windows 11 and download all the available updates.

How to Enable TPM 2.0

If your PC's hardware supports TPM 2.0 and it's not already enabled, you need to do so through the UEFI/BIOS if you want to upgrade to Windows 11 using the automatic upgrade tool or to upgrade and continue to have access to all security and feature updates.

Here's how to Enable TPM 2.0 in broad strokes.

1. Reboot or start up your PC and enter the UEFI/BIOS using your motherboard manufacturer's particular key during startup.
   

2. Search for the TPM toggle. For some manufacturers, this is located in the Security tab; in others, Advanced. You may need to go into further sub-menus to find it. On Asus motherboards, it's found under PCH-FW Configuration (Intel) or AMD fTPM configuration (AMD).
   

3. Toggle TPM to On, Enabled, or Firmware TPM depending on your manufacturer's particular UEFI/BIOS.
   

4. Select Save and Exit, or Exit and, when prompted, confirm you want to save before doing so.
   

If you don't find the option, you may need to update your BIOS.

For more help with specific manufacturers, here are some of their guides:

• HP
• Dell
• Asus
• Lenovo
• Gigabyte
• MSI
  

What Is a TPM 2.0 Device?

A TPM 2.0 device has a CPU that supports Trusted Platform Module 2.0. That includes any mainstream AMD Ryzen Zen+ processor from the second generation onwards (that doesn't include Ryzen 2000 APUs) and Intel eighth-generation CPUs or newer. There are also some select Intel Xeon processors which make the cut.

The TPM 2.0 module itself is a small chip that resides on the motherboard, storing information like passwords, certificates, and encryption keys to make it harder for hackers and malware to access them.

Do I have TPM 2.0 On My Computer?

If you have an AMD Ryzen 2000 processor (not including 2200G and 2400G) or newer, or an Intel 8000-series processor or newer, then you almost certainly have a TPM 2.0 module. Anything older than that, including first-generation AMD Ryzen, and Intel 7000 series CPUs, do not support it.

Even if you have the right CPU, your motherboard may not have TPM 2.0 enabled automatically or may not have the option to toggle it manually. If not, try the steps above, and if you run into trouble, try updating your motherboard's firmware.

How Do I Know If TPM 2.0 Is Enabled?

You can confirm whether TPM 2.0 is enabled on your system by using the Windows 11 PC Health Check application if you're a Windows Insider.

Alternatively, press Windows key+I to access the Settings menu, then go to Update & Security > Windows Security > Device Security. If you see Security processor details under the Security processor heading, confirm its Specification version is 2.0. If it says 1.0, or the option is missing entirely, TPM 2.0 is not enabled or available.