TPM 2.0 turns on in UEFI firmware; verify it with tpm.msc, enable Intel PTT or AMD fTPM, then save and reboot.
A Windows 11 upgrade can fail on a capable PC because TPM is disabled in firmware, so learning how to enable TPM 2.0 on Windows 11 usually means checking Windows first, then switching on Intel PTT or AMD fTPM in UEFI. The setting is often already built into the CPU or motherboard; it may just be off.
TPM 2.0 is not a normal Windows toggle. Windows can confirm the TPM version, but the on/off switch lives before Windows loads, inside the UEFI screen many PCs still call BIOS.
How Do You Check TPM Before Rebooting?
Windows Security and tpm.msc can tell you whether TPM is already on before you enter firmware. Checking first saves a reboot if your PC already reports TPM 2.0.
- Press Windows + R.
- Type
tpm.msc, then select OK. - Look for Status and Specification Version.
When TPM is ready, Status says the TPM is ready for use and Specification Version says 2.0. A message that a compatible TPM cannot be found can mean the PC has no TPM, but on many modern desktops it often means Intel PTT or AMD fTPM is disabled.
Enter UEFI From Windows 11
Windows 11 can reboot straight into the firmware menu without guessing the startup shortcut. The UEFI path is the least messy option when Windows still boots.
- Open Settings.
- Select System > Recovery.
- Under Advanced startup, select Restart now.
- After the blue recovery screen appears, select Troubleshoot > Advanced options > UEFI Firmware Settings > Restart.
The PC restarts into a firmware screen instead of the Windows sign-in screen. If Windows does not show UEFI Firmware Settings, restart the PC and press the maker’s setup shortcut as soon as the logo appears; common shortcuts include Delete, F2, F10, and Esc.
Enable TPM 2.0 For Windows 11: Firmware Names To Find
TPM 2.0 may appear under several names, and the label depends on the motherboard and processor brand. Intel systems usually call it Intel PTT, while AMD systems usually call it AMD fTPM.
Firmware screens often place TPM settings under areas named Advanced, Security, or Trusted Computing. Scan those areas for the labels below before deciding your PC has no TPM 2.0.
| Firmware Label | Likely Location | Set It To |
|---|---|---|
| Intel PTT | Security or Advanced | Enabled |
| Intel Platform Trust Technology | Security or CPU settings | Enabled |
| AMD fTPM switch | Advanced or AMD CPU settings | Enabled |
| AMD PSP fTPM | Trusted Computing | Enabled |
| Security Device Support | Security | Enabled |
| TPM State | Trusted Computing | Enabled |
| Security Device | Advanced or Security | Enabled |
Microsoft’s TPM 2.0 setup page lists the same family of UEFI labels, which is why checking Intel PTT and AMD fTPM matters before ruling out the PC.
Save The Firmware Change And Verify Windows
The firmware change does not count until you save it and reboot. Most firmware screens use Save & Exit, Exit Saving Changes, or the F10 shortcut.
After Windows loads again, run tpm.msc one more time. TPM is enabled when the console says the TPM is ready for use and the specification version reads 2.0. Windows Security should also show a Security processor area under Device security.
Do not choose Clear TPM while trying to enable TPM for an upgrade. Clearing TPM is a separate troubleshooting action, and it can remove security data tied to Windows Hello, BitLocker, or work-managed sign-in.
What If TPM Still Does Not Show?
A missing TPM after the firmware change usually means the wrong firmware label was changed, the firmware needs an update, or the PC lacks TPM 2.0. A TPM 1.2 chip cannot become TPM 2.0 through a Windows setting.
Desktop builders should check the exact motherboard model page. Laptop owners should check the maker’s firmware downloads, since some devices need a firmware update before Windows reports TPM correctly.
| Result After Reboot | Likely Cause | Next Move |
|---|---|---|
tpm.msc says TPM is ready, version 2.0 |
TPM is enabled | Run the Windows 11 check again |
| Compatible TPM cannot be found | PTT or fTPM is still off | Return to Security or Trusted Computing |
| Specification Version shows 1.2 | Old TPM chip | Use newer hardware for Windows 11 |
| No UEFI option in recovery | Legacy boot setup | Use the startup setup shortcut, then check boot mode |
| TPM setting is grayed out | Locked firmware or old BIOS | Update firmware or contact the PC maker |
| Windows check still fails | Old cached result or another requirement | Restart, then check CPU, RAM, and Secure Boot |
TPM Moves Worth Trying Before You Quit
TPM 2.0 problems are usually won by checking names, not by changing random firmware items. Work through the shortest list that can change the result.
- Search the firmware screen for Intel PTT on Intel PCs.
- Search for AMD fTPM or AMD PSP fTPM on AMD PCs.
- Check Security, Advanced, and Trusted Computing before leaving UEFI.
- Save changes with Save & Exit or F10, then verify with
tpm.msc. - Avoid Clear TPM unless a trusted repair page tells you to use it for a specific TPM error.
If tpm.msc reports TPM 2.0 after the reboot, the firmware side is finished. The Windows 11 upgrade can still fail for Secure Boot, CPU, RAM, or storage, but TPM is no longer the blocker.
References & Sources
- Microsoft.“Enable TPM 2.0 On Your PC.”Confirms TPM 2.0 verification steps, UEFI access, and common firmware labels for Intel PTT and AMD fTPM.