How To Enable TPM Chip | Where It Lives In BIOS

Enabling the TPM chip requires a single toggle inside your motherboard’s firmware settings, typically under the Security or Advanced menus.

A single BIOS setting controls whether Windows 11, Valorant, and BitLocker can use your PC’s built-in security hardware. Learning how to enable TPM chip on your motherboard takes less time than installing a game update, and this guide covers the exact path for MSI, ASUS, Dell, Lenovo, and HP.

What Is The TPM Chip And Why Does It Need Enabling?

The Trusted Platform Module (TPM) is a dedicated cryptoprocessor that stores encryption keys, certificates, and passwords in dedicated hardware instead of on your drive. Since 2016, most CPUs from Intel and AMD include a firmware-based version of this module. Intel calls it Platform Trust Technology (PTT), and AMD labels it fTPM or PSP fTPM.

Motherboard manufacturers ship these modules disabled by default to avoid compatibility snags with older operating systems. That means a PC that fully supports TPM 2.0 hardware-wise arrives with the feature turned off. Windows 11 installs halt with a “This PC can’t run Windows 11” error until the toggle is flipped. Games like Valorant and EA FC also check for an active TPM before launching, and BitLocker encryption relies on it for hardware-backed key storage.

How Do You Enter The BIOS On A Modern PC?

Two routes reach the firmware settings where the TPM option lives. The boot-key method works on every PC: restart and immediately press Del, F2, or F10 depending on your motherboard. The exact key flashes briefly on screen during the splash logo. If the window passes too fast, the Windows settings route handles it.

Go to Settings > Update & Security > Recovery. Under Advanced startup, click Restart now. When the blue menu appears, select Troubleshoot > Advanced options > UEFI Firmware Settings > Restart. The PC boots directly into the BIOS interface regardless of which key you would have pressed. Either method works reliably.

Where To Find The TPM Setting In Your BIOS

Once inside the BIOS, the TPM menu usually sits under a label like Trusted Computing, Security, or PCH-FW Configuration. The exact navigation depends on your motherboard brand and firmware version. The table below lists the most common routes for major manufacturers. After changing the setting, press F10 to save and exit or select Save Changes and Exit from the main menu.

Motherboard / PC Brand BIOS Menu Path Setting To Enable
MSI Settings > Security > Trusted Computing Security Device Support → Enabled
ASUS (Intel CPU) Advanced > PCH-FW Configuration TPM Device Selection → Firmware TPM
ASUS (AMD CPU) Advanced > AMD fTPM Configuration TPM Device Selection → Firmware TPM
Dell Latitude / OptiPlex / Precision Security > TPM 2.0 Security TPM On → Apply and Exit
Dell Alienware Security Firmware TPM → Enabled
Dell Inspiron Security Intel Platform Trust Technology → On
HP / Lenovo / Generic Security > Trusted Computing or TPM TPM Device → Enabled

The PC should reboot with TPM active. If Windows still flags the module as missing, move on to the verification steps below.

Verifying TPM Is Active In Windows

The quickest confirmation runs through Windows Security. Open Windows Security > Device Security. If a Security processor section appears with details about the manufacturer and version numbers, TPM is enabled and recognized by the operating system.

For the exact version, press Win + R, type tpm.msc, and press Enter. The TPM Management Console opens and displays the Specification Version in the lower pane. Windows 11 requires version 2.0. If the console reports “Compatible TPM cannot be found,” the module is still disabled or the hardware does not support it. Microsoft’s official enablement guide covers the same checks and includes screenshots for each step.

If TPM appears but the Windows 11 readiness check still fails, confirm that Secure Boot is also enabled in the BIOS under Boot or Security menus. Windows 11 requires both TPM 2.0 and Secure Boot before it will install.

Common TPM Enablement Mistakes And How To Fix Them

Three errors account for most TPM troubleshooting threads. Knowing them ahead of time saves a reboot cycle.

Enabling TPM 1.2 instead of 2.0. Some older BIOS revisions offer a legacy TPM mode that defaults to version 1.2. The tpm.msc check is the only reliable way to confirm the version. If it reads 1.2, return to the BIOS and look for a separate Firmware TPM or TPM 2.0 option rather than a generic “TPM” toggle.

Exiting without saving. Pressing the power button or selecting “Exit without saving” resets every change you made. Always press F10 or choose Save and Exit before the system leaves the BIOS screen.

Missing hardware support. PCs built before 2016 may lack TPM 2.0 entirely. If the BIOS has no firmware TPM, PTT, or fTPM option despite a thorough search, the CPU does not include it. A physical TPM header module costs $15 to $30 on some boards, but many older motherboards lack the required pin header as well.

Check How To Perform It What A Pass Looks Like
Windows Security Open Windows Security > Device Security “Security processor” section shows manufacturer and version
TPM Management Console Win + R, type tpm.msc, hit Enter Specification Version reads 2.0
Device Manager Expand Security Devices, right-click Trusted Platform Module > Properties “This device is working properly”
Windows 11 PC Health Check Run the PC Health Check app from Microsoft “This PC can run Windows 11” with all checks green
BIOS Double-Check Re-enter BIOS and locate the TPM setting Setting shows “Enabled” or “On” after reboot
BitLocker Key Backup Sign into your Microsoft account and check recovery keys Recovery key saved before TPM modification

One safety note: if BitLocker drive encryption was active before you enabled TPM, the system may ask for a recovery key on the first boot. Save that key to your Microsoft account or a USB drive before you enter the BIOS. Losing it means permanent data lockout.

TPM Enablement: Three Moves Inside The BIOS

The entire process comes down to three actions. Enter the BIOS via the boot key or Windows recovery menu. Find the TPM setting under Security, Advanced, or Trusted Computing. Flip it to Enabled, press F10 to save, and reboot. Then open tpm.msc to confirm version 2.0. Once TPM is active, Windows 11 setup, modern anti-cheat games, and BitLocker encryption can all use it without any further configuration.

References & Sources