How To Enable TPM | BIOS Setup Walkthrough

TPM 2.0 is enabled by entering your PC’s BIOS/UEFI and turning on Intel PTT or AMD fTPM.

One setting keeps thousands of perfectly good PCs from running Windows 11: TPM 2.0. The fix is a single toggle buried in your motherboard’s firmware menu, but finding it depends on your CPU brand and BIOS layout. Here is exactly how to check your current status, find the right setting for your hardware, and confirm TPM 2.0 is active — no guesswork required.

Why TPM 2.0 Matters

Trusted Platform Module 2.0 is a mandatory security requirement for Windows 11. Without it enabled, the operating system will not install or upgrade, no matter how fast your SSD or CPU is. TPM 2.0 also powers BitLocker drive encryption, Windows Hello biometric logins, and anti-cheat systems in games like Valorant and Destiny 2.

Almost every PC built after 2016 includes TPM 2.0 capability, but it ships disabled in the BIOS by default on many retail motherboards. Enabling it is a one-time change that takes about five minutes.

Step 1: Check If TPM Is Currently Enabled

Before you restart and dig through BIOS menus, check whether TPM is already working. This takes ten seconds.

Press Windows + R to open the Run dialog.
Type tpm.msc and press Enter.

A window labeled TPM Management opens. Look at the Status field.

Success: “The TPM is ready for use” and the Specification Version reads 2.0. You are done — TPM is already enabled.
Not ready: “Compatible TPM cannot be found.” This means it is disabled, not that the chip is missing. Proceed to Step 2.

Step 2: Access Your BIOS / UEFI Firmware

There are two ways to enter the BIOS. Method A is faster; Method B is easier if you have a fast boot timer or a USB keyboard that takes a moment to initialize.

Method A: The BIOS Key (Direct Boot)

Restart your PC.
Immediately start tapping the correct key as soon as the screen lights up. The correct key varies by manufacturer.

Check the table below for the most common keys per brand. Pressing the wrong key is the #1 reason people get stuck here.

Motherboard / PC Brand	Common BIOS Key	Where TPM Lives After Entry
Asus	F2 or Delete	Advanced > PCH-FW Configuration > TPM Device Selection
Dell	F2	Security > TPM 2.0 Security > TPM On
HP	F10 or Esc	Security > TPM Embedded Security > TPM 2.0 > Enable
MSI	Delete or F2	Settings > Security > Trusted Computing > Security Device Support > Enable
Gigabyte	F2 or Delete	Settings > Miscellaneous > Trusted Computing > Security Device Support > Enable
ASRock	F2 or Delete	Advanced > CPU Configuration > AMD fTPM
Lenovo	F1 or F2	Security > Security Chip > TPM 2.0 > Enabled
Acer	F2 or Delete	Advanced > TPM > Enable

Method B: Windows Recovery Environment (WinRE)

If the BIOS key window passes too quickly, force the entry from inside Windows:

Open Settings > Update & Security > Recovery.
Under Advanced startup, click Restart now.
Select Troubleshoot > Advanced options > UEFI Firmware Settings > Restart.

This boots your motherboard directly into the BIOS interface, bypassing the timing issue entirely. Use this method if your system uses GPT/UEFI — which it should if it shipped with Windows 8 or later.

Step 3: Enable TPM 2.0 In The BIOS

Once inside the BIOS, navigate using the arrow keys. The setting you need is not always labeled “TPM.” The industry standardized on two different names depending on your CPU brand.

Intel systems: Look for Intel PTT (Platform Trust Technology). It is usually in Advanced > PCH-FW Configuration. Set TPM Device Selection to Intel PTT.
AMD systems: Look for AMD fTPM (Firmware TPM). It lives in Advanced > CPU Configuration or AMD CBS. Set it to Enabled.

Common pitfall: Searching for “TPM” when the BIOS menu lists “PTT” or “fTPM.” If you have an Intel CPU and cannot find TPM, look specifically for Intel PTT. If you have an AMD CPU, look for AMD fTPM. Using the wrong one will not enable the module.

Once you find the correct toggle, set it to Enabled or On. Press F10 to Save and Exit. The system will reboot.

Official documentation from Microsoft’s TPM enablement guide confirms these exact steps and paths.

Step 4: Verify Your Work

When Windows loads, open the Run dialog (Windows + R) and type tpm.msc again.

Status: “The TPM is ready for use.”
Specification Version: 2.0.

If the specification reads 1.2, the setting did not take — repeat Steps 2 and 3, making sure you saved with F10. If the TPM is still not found, a BIOS update may be required. Check your motherboard manufacturer’s support page for the latest firmware, as some early 2016–2017 boards added TPM support only via later updates.

What To Do If The Setting Is Missing

Some older BIOS versions do not expose the TPM toggle. This is not a dead end. The table below covers the most common roadblocks and their actual fixes.

Problem	Likely Cause	Fix
Cannot find TPM, PTT, or fTPM	BIOS is outdated	Update the BIOS from the motherboard vendor’s support page. This is safe if done with stable power.
TPM is enabled but Windows 11 check still fails	Secure Boot is off, or CSM is on	Enable Secure Boot and disable CSM in the BIOS. Reboot and run the PC Health Check tool.
System boots to black screen after enabling fTPM	Memory retraining (common on AMD platforms)	Wait 5–10 minutes. The motherboard will re-train the RAM and boot normally. Do not force-power it off.
“TPM is off” in tpm.msc but setting is enabled	Setting was not saved	Re-enter BIOS, confirm the toggle is Enabled, and press F10 to save before exiting.
Missing option on a business laptop (Dell/HP/Lenovo)	IT management policy or TPM was cleared	Check if “Clear TPM” is available in Security settings. Clearing it re-enables the hardware.

You’re Ready For Windows 11

With TPM 2.0 enabled, download Microsoft’s PC Health Check tool to confirm full Windows 11 compatibility. The single biggest requirement is now handled, and your system will also have better out-of-box security for BitLocker and Windows Hello. One BIOS toggle, zero new hardware needed.

References & Sources

Microsoft. “Enable TPM 2.0 on your PC” Official documentation on TPM requirements and verification steps.