TPM.msc Explained: How to Check and Manage Your TPM

tpm.msc is the built-in Windows console that shows whether your PC has a Trusted Platform Module (TPM), whether it is ready for use, and which specification version it runs. Press Windows + R, type tpm.msc and press Enter. If the window says "The TPM is ready for use" and the Specification Version reads 2.0, your PC meets the TPM part of the Windows 11 requirements.

What Is tpm.msc?

tpm.msc is the file name of the TPM Management console, a small Microsoft Management Console (MMC) snap-in that ships with Windows 10 and Windows 11. It reads the status of the TPM chip or firmware TPM on your motherboard and lets an administrator perform a few management actions.

A TPM is a tamper-resistant security processor. It stores encryption keys, measures the boot process and proves to Windows (and to some apps and games) that the PC has not been altered before Windows loaded. It can be a separate chip, or "firmware TPM" built into the processor: Intel calls this PTT (Platform Trust Technology) and AMD calls it fTPM.

You rarely need tpm.msc in daily use. Windows automatically initialises and takes ownership of the TPM, so there is no password to create. The console matters when you are checking Windows 11 compatibility, troubleshooting BitLocker or Windows Hello, or meeting an anti-cheat requirement.

How Do You Open tpm.msc?

The quickest way to open tpm.msc is the Run dialog, and it takes a few seconds.

1. Press Windows + R to open Run.
2. Type tpm.msc and press Enter.
3. Approve the User Account Control prompt if one appears. You need an administrator account.
4. Read the Status and TPM Manufacturer Information panels in the middle of the window.

You can also type tpm.msc into the Start menu search box, or into an administrator Command Prompt or PowerShell window. If you prefer the Settings route, open Windows Security → Device security → Security processor details, which shows the same version information.

What Does the TPM Management Console Show?

The console shows three things that matter: whether a TPM exists, whether Windows can use it, and which version it is.

The Manufacturer Name line tells you whether the TPM is a firmware TPM (for example INTC for Intel or AMD for AMD) or a discrete chip from a vendor such as Infineon. The Manufacturer Version is the TPM firmware version, which occasionally matters when a vendor or game publisher asks you to update it.

Why Does tpm.msc Say "Compatible TPM Cannot Be Found"?

This message usually means the TPM is turned off in your UEFI firmware, not that your PC lacks one. Many desktop motherboards include a firmware TPM but ship with it disabled.

The cause and effect is simple: if the firmware hides the TPM, Windows cannot see it, so tpm.msc reports nothing, the Windows 11 compatibility check fails and features such as BitLocker cannot use TPM protection. Turning the option on in the firmware usually fixes all three at once. Our step-by-step guide on how to enable TPM 2.0 for Windows 11 shows where Intel PTT and AMD fTPM sit on common motherboard brands.

If you see a different TPM message inside an app rather than in tpm.msc, such as Outlook or Teams reporting that your device's TPM has malfunctioned, that is a separate problem covered in our Device TPM problem fix guide.

How Do You Check TPM Status Without tpm.msc?

You can confirm TPM status from PowerShell or Windows Security if tpm.msc will not open.

1. Right-click Start and choose Terminal (Admin) or Windows PowerShell (Admin).
2. Type Get-Tpm and press Enter.
3. Check that TpmPresent and TpmReady both read True.
4. For the version, open Windows Security → Device security → Security processor details and read Specification version.

TPM is only one of the checks. Windows 11 also needs UEFI firmware with Secure Boot capability, so it is worth running through how to check if Secure Boot is enabled while you are looking at security settings.

Should You Clear the TPM in tpm.msc?

Clear the TPM only when you have a specific reason, such as preparing a PC for a new owner or following a support instruction, because clearing it deletes every key the TPM holds.

Microsoft's TPM troubleshooting guidance warns that clearing the TPM can cause data loss: you lose all keys created by the TPM and the data they protect, such as a Windows Hello sign-in PIN or a virtual smart card. If the drive is protected by BitLocker or device encryption, Windows will ask for the recovery key at next start, so you must have that key saved before you begin. Microsoft also advises clearing the TPM from within Windows rather than directly in the UEFI menu, and not on a work or school PC unless your IT administrator tells you to.

If you do need to clear it, follow these steps:

1. Back up your files and confirm you have your BitLocker recovery key (check your Microsoft account or wherever you saved it).
2. Open Windows Security → Device security → Security processor details.
3. Select Security processor troubleshooting.
4. Select Clear TPM and confirm.
5. Restart, and press the confirmation key if the firmware asks for one.
6. Let Windows start; it prepares the TPM again automatically. Set up your Windows Hello PIN again afterwards.

Readers deciding whether they need full drive encryption may find our comparison of BitLocker on Windows 11 Home vs Pro useful, since the TPM is what lets BitLocker unlock automatically.

A Common Mistake We See

A common mistake is assuming an older PC cannot run Windows 11 because the PC Health Check app or tpm.msc reports no TPM. On many desktops the firmware TPM is simply switched off. Enabling it in the UEFI settings takes a couple of minutes and often turns an "incompatible" PC into a supported one.

The reverse also happens: someone clears the TPM to "fix" an error without saving their BitLocker recovery key, and then cannot get past the recovery screen. Read the status first, change one setting at a time, and keep the recovery key somewhere you can reach from another device.

Frequently Asked Questions

Is tpm.msc available on Windows 11 Home?

Yes. tpm.msc is included in every edition of Windows 10 and Windows 11, including Home. You need to be signed in with an administrator account to open it, and the information it shows is the same whether you run Home, Pro or another edition.

How do I know if my TPM is version 2.0?

Open tpm.msc and look under TPM Manufacturer Information for Specification Version. It should read 2.0. You can also check Windows Security, under Device security and Security processor details. If it reads 1.2, your PC does not meet the TPM requirement for Windows 11.

Does tpm.msc let me turn TPM on?

Usually not. On modern PCs the TPM is enabled or disabled in the UEFI firmware, not in Windows. tpm.msc mainly reports status and offers actions such as clearing the TPM. To switch a disabled firmware TPM on, restart into the firmware settings and enable Intel PTT or AMD fTPM.

Will clearing the TPM delete my files?

Clearing the TPM does not erase files on your drive, but it deletes keys stored in the TPM. If your drive is encrypted, you will need the BitLocker recovery key to unlock it afterwards. Without that key, your files can become inaccessible, so save it before clearing anything.

Why does tpm.msc open but show nothing useful?

If tpm.msc shows "Compatible TPM cannot be found", the firmware TPM is most likely disabled. If it shows "Cannot load management console", Microsoft links that to a TPM disabled or cleared in the firmware. Re-enable the TPM in firmware settings, restart, and open tpm.msc again.

Do games use the TPM?

Some do. Several anti-cheat systems now check TPM 2.0 and Secure Boot before allowing online play, so gamers increasingly use tpm.msc to confirm their setup. The check reads the same TPM status that Windows uses for its own security features.

Conclusion

tpm.msc is the fastest way to confirm whether your PC has a working TPM 2.0, and most problems it reveals are fixed in the firmware rather than in Windows. Once your TPM reads "ready for use" at version 2.0, you are ready for a genuine licence from our Windows 11 collection, such as a Windows 11 Pro product key if you want BitLocker and the other Pro tools.

Useful Links