1. Self-Help Home
  2. Products
  3. How to Enable TPM 2.0 in BIOS
Searching...

How to Enable TPM 2.0 in BIOS

Trusted Platform Module (TPM) 2.0 is a security chip — or a firmware feature built into modern CPUs — that Microsoft requires for Windows 11. On most PCs, TPM 2.0 is supported but disabled by default in BIOS. The steps below walk you through enabling it so your system is ready for Windows 11.

How to Enable TPM 2.0 in BIOS

1. Restart your PC.
Save any open work first, then restart so you can interrupt the boot process and enter BIOS/UEFI setup.

2. Press the BIOS key during boot.
Hold down F2 (or Fn + F2 on laptops without dedicated function keys) as the PC powers on to open the BIOS menu. Some systems use Del, F1, F10, or Esc — check your motherboard or laptop manual if F2 doesn’t work.

3. Navigate to the Security tab.
Use the arrow keys to move to the Security tab. Depending on your BIOS, the TPM setting may also live under Advanced, Trusted Computing, or Miscellaneous.

4. Find the TPM option.
Look for a setting labeled TPM, Intel Platform Trust Technology (PTT), or AMD CPU fTPM. The exact name depends on your CPU and motherboard manufacturer.

5. Toggle the setting to Enabled.
Highlight the option and switch it to Enabled.

6. Save and exit.
Press F10 to save your changes and exit BIOS. Your PC will restart with TPM 2.0 enabled and ready for Windows 11.

Manufacturer-Specific Guides

ASUS

ASUS publishes step-by-step instructions for enabling TPM/PTT on their motherboards and laptops.

MSI

MSI’s official walkthrough shows how to locate and enable TPM 2.0 on their motherboards.

Note: Once you save and exit BIOS, TPM 2.0 should be active on your system. You can verify this in Windows by pressing Windows + R, typing tpm.msc, and pressing Enter — the management window will show whether a TPM is present and report its specification version.

Frequently Asked Questions

What is TPM 2.0 and why does Windows 11 require it?
TPM 2.0 (Trusted Platform Module) is a hardware-based security feature that stores cryptographic keys and helps verify the integrity of your system. Windows 11 requires it to enable features like BitLocker drive encryption, Windows Hello, and Secure Boot, which together help protect your PC against firmware-level and tampering attacks.
Does my PC already have TPM 2.0?
Most PCs and laptops built within roughly the last six to seven years include TPM 2.0 either as a discrete chip or as firmware-based TPM (Intel PTT / AMD fTPM). You can check by pressing Windows + R, typing tpm.msc, and pressing Enter — if a TPM is present, the management console will show its specification version.
What if I don’t see a TPM option in my BIOS?
Check under the Advanced, Trusted Computing, or Miscellaneous sections — the setting isn’t always under Security. On Intel systems look for PTT; on AMD systems look for fTPM. If your BIOS is out of date, a firmware update from your motherboard or PC manufacturer may add or expose the option.
Will enabling TPM 2.0 affect my data or installed programs?
Enabling TPM by itself does not erase data or affect installed programs. However, certain features that rely on TPM (such as BitLocker) will then become available, and changing TPM-related settings later can affect those features. If BitLocker is already in use, suspend it before changing TPM settings to avoid being prompted for a recovery key.
What’s the difference between Intel PTT and AMD fTPM?
Both are firmware-based implementations of TPM 2.0 built into the CPU rather than a separate physical chip. Intel calls theirs Platform Trust Technology (PTT) and AMD calls theirs fTPM. From Windows’s perspective they both satisfy the TPM 2.0 requirement.
How do I confirm TPM 2.0 is enabled after rebooting?
In Windows, press Windows + R, type tpm.msc, and press Enter. The TPM Management console will show whether a TPM is present, its manufacturer, and its specification version — you should see 2.0 listed.

Learn More About Windows 11

Updated on May 11, 2026
Tagged:

Was this article helpful?

Yes No

Related Articles