How To Enable TPM 2.0 On PC | A Step-By-Step BIOS Guide

Enabling TPM 2.0 requires entering your PC’s BIOS/UEFI and toggling the setting, often labeled Intel PTT or AMD fTPM.

Knowing how to enable TPM 2.0 on a PC is the deciding factor between running Windows 11 smoothly or hitting a hardware compatibility wall. The Trusted Platform Module acts as a hardware-level vault for encryption keys, and while Windows 11 makes it mandatory, many motherboards ship with it switched off. This guide walks you through every step: checking your current status, entering the BIOS, flipping the right switch for your specific motherboard, and dodging the common mistakes that keep the feature grayed out.

Is TPM 2.0 Already Enabled On Your PC?

Before rebooting into your BIOS, check the current state of your Trusted Platform Module through Windows itself. This saves time and confirms whether the hardware is even detected.

• Press Win + R, type tpm.msc, and hit Enter.
• Look at the Specification Version field. If it reads “2.0,” TPM is already active and no BIOS changes are needed.
• If you see “1.2,” your system has TPM but may need a firmware upgrade. If the utility reports “Compatible TPM cannot be found,” proceed to the BIOS steps below.

How To Enter Your BIOS Or UEFI Firmware Settings

TPM is managed by your motherboard’s firmware, not by Windows. You must access the BIOS/UEFI setup screen to change it. The method varies slightly by manufacturer, but the startup trigger is consistent.

• Open Settings > Update & Security > Recovery.
• Under Advanced startup, click Restart now.
• Select Troubleshoot > Advanced options > UEFI Firmware Settings > Restart.

Alternatively, restart your PC and press the appropriate key repeatedly as the system powers on. Common keys include F2 (most common for Dell, ASUS, Gigabyte), Del (MSI, ASRock, ASUS), F10 (HP), or Esc (HP, some Lenovo).

Enabling TPM 2.0 In BIOS: Intel PTT And AMD fTPM

Once inside the BIOS, the exact menu label depends on your motherboard brand and CPU. Intel systems use Platform Trust Technology (PTT), while AMD systems use firmware TPM (fTPM). Look in the Security, Advanced, or Trusted Computing sections. The table below maps the most common locations.

Set the appropriate option to Enabled or Active. On older systems that show a TPM 1.2 option, check the BIOS for a Firmware Update utility to upgrade it to 2.0. Microsoft’s official TPM enablement guide provides a full walkthrough of the general process.

Disable CSM (Compatibility Support Module)

TPM 2.0 and Secure Boot require the system to run in native UEFI mode. If the Compatibility Support Module is enabled, the TPM settings may remain hidden or fail to activate.

• In your BIOS, find the Boot section.
• Set CSM or Legacy Boot to Disabled.
• Set Boot Mode to UEFI (not Legacy or CSM).
• Enable Secure Boot if available. Some boards require Secure Boot to be active before TPM 2.0 will fully engage.

If you disable CSM and the system fails to boot into Windows, re-enable it and check whether your Windows installation drive uses a GPT partition table (required for UEFI mode). You can convert an MBR disk to GPT using the mbr2gpt.exe tool built into Windows 10 and 11.

Save, Exit, And Verify TPM 2.0

After changing the settings, press F10 (or select Save & Exit from the menu) to apply the changes and restart. Once Windows loads, run the tpm.msc check again. The Specification Version field should now read “2.0,” and the Status should show “The TPM is ready for use.”

Common TPM 2.0 Enablement Mistakes

Several specific pitfalls can block a successful TPM 2.0 activation, even when you follow the correct menu paths.

• Looking for “TPM” on an Intel system: Intel boards rarely label the setting “TPM”. If your BIOS has a Security or Trusted Computing section, look for Intel PTT or Platform Trust Technology instead.
• CSM remains enabled: Leaving Legacy boot mode on is the single most common reason TPM 2.0 stays hidden or refuses to activate. Disable CSM first, then check for the TPM options.
• Skipping the BIOS firmware update: Older motherboards with compatible CPUs may require a BIOS update before the TPM 2.0 option appears. Check your motherboard manufacturer’s support page for the latest firmware.
• Pressing the wrong key at boot: Spamming the wrong key sends you into a one-time boot menu rather than the firmware settings. The correct key is usually F2 or Del, but check your board’s manual if the standard keys don’t work.

TPM 2.0 Enablement Checklist

Use this checklist to confirm each step before attempting a Windows 11 upgrade.

• CPU check: Intel 8th Gen or newer, or AMD Ryzen 2000 or newer. Older CPUs cannot support firmware TPM 2.0.
• tpm.msc check: Run the utility first. If TPM 2.0 is already present, you are done.
• BIOS mode: Enter firmware settings and disable CSM/Legacy boot. Set boot mode to UEFI.
• Enable TPM: Set Intel PTT or AMD fTPM to Enabled in the Security or Trusted Computing menu.
• Enable Secure Boot: Turn on Secure Boot in the Boot or Security tab.
• Save and verify: Exit the BIOS, boot into Windows, and run tpm.msc to confirm the Specification Version is 2.0.

Enabling TPM 2.0 is a one-time procedure. Once active, it runs silently in the background protecting your system’s encryption keys and credentials without any ongoing maintenance.