How to Enable TPM 2.0 for Windows 11

To enable TPM 2.0, restart your PC into its UEFI firmware settings, find the TPM option (called Intel PTT on Intel systems and AMD fTPM on AMD systems), switch it on, then save and restart. On most PCs from the last five years the chip is already there and only switched off, so enabling it takes about five minutes and does not touch your files.

What Is TPM 2.0 and Why Does Windows 11 Need It?

TPM 2.0 (Trusted Platform Module, version 2.0) is a small security processor that stores encryption keys and checks that your PC has started up without being tampered with. Windows 11 lists it as a minimum requirement alongside UEFI firmware and Secure Boot capability.

The reason is cause and effect. Features such as BitLocker drive encryption, Windows Hello sign-in and device encryption keep their secret keys inside the TPM rather than on the drive. Because the keys never leave the chip, someone who removes your SSD cannot simply read them off the disk. Microsoft made TPM 2.0 mandatory so that every Windows 11 PC has that protection available.

The TPM can be a separate chip on the motherboard (a discrete TPM) or built into the processor itself (a firmware TPM). Most modern desktops and laptops use the firmware version, which is why the setting lives in your UEFI menu under a processor brand name.

How Do I Check If TPM 2.0 Is Enabled?

You can check if TPM 2.0 is enabled in under a minute with the TPM Management tool built into Windows.

1. Press Windows key + R to open the Run box.
2. Type tpm.msc and press Enter.
3. Under TPM Manufacturer Information, check that Specification Version reads 2.0.
4. If you see Compatible TPM cannot be found, the TPM is either switched off in firmware or not present.

You can also open the Windows Security app, select Device security, then Security processor details. If the Security processor section is missing altogether, Windows cannot see a usable TPM. Microsoft's Enable TPM 2.0 on your PC guide describes the same two checks.

How to Enable TPM 2.0 on Your PC

You enable TPM 2.0 in your PC's UEFI settings, not inside Windows. Before you start, save your work, and if BitLocker or device encryption is already on, make sure you have your recovery key saved somewhere other than the PC.

1. On Windows 11, open Settings → System → Recovery. On Windows 10, open Settings → Update & Security → Recovery.
2. Next to Advanced startup, select Restart now.
3. On the blue menu, choose Troubleshoot → Advanced options → UEFI Firmware Settings, then select Restart.
4. In the firmware menu, open the Advanced, Security or Trusted Computing section. The exact name depends on your motherboard maker.
5. Find the TPM setting using the names in the table below and set it to Enabled.
6. Save and exit, usually with F10 or a Save & Exit menu option. The PC restarts into Windows.
7. Run tpm.msc again to confirm the specification version shows 2.0.

If UEFI Firmware Settings is missing from the Advanced options menu, your PC is probably booting in legacy BIOS mode. In that case, restart and press the firmware key shown on the startup screen (commonly Del, F2 or F10; your manufacturer's manual will confirm which).

What Is the TPM Setting Called in My BIOS?

The TPM setting has a different name depending on the processor and motherboard maker, which is the main reason people cannot find it.

Microsoft notes that motherboards sold to people building their own PCs often ship with TPM switched off by default, even though the option is usually there to switch on. If your board offers a choice between a firmware TPM and a discrete TPM header, pick the firmware option unless you have installed a physical TPM module.

Do I Need Secure Boot and UEFI as Well?

Yes. Windows 11 needs UEFI firmware that is Secure Boot capable as well as TPM 2.0, so enabling TPM alone may not be enough. The full list is in our Windows 11 requirements checklist.

The link between them matters. Secure Boot only works when the PC boots in UEFI mode, and UEFI mode needs the system drive to use the GPT partition style rather than the older MBR style. If your PC was set up years ago in legacy BIOS mode, switching straight to UEFI without converting the disk leaves Windows unable to start.

Microsoft provides a tool called MBR2GPT for this conversion. Its MBR2GPT documentation explains that the conversion keeps your data but cannot be undone, that the firmware must be switched to UEFI afterwards, and that BitLocker should be suspended first. Back up before you try it, or ask someone comfortable with firmware settings to help.

Does Call of Duty Need TPM 2.0 Enabled?

Yes. Activision's support pages state that Call of Duty: Black Ops 7, Call of Duty: Warzone and Modern Warfare 4 on PC require both TPM 2.0 and Secure Boot, and some modes are restricted without them. The steps above are the same ones gamers follow to meet that requirement.

If the game still reports a problem after you have enabled TPM, confirm that Secure Boot shows as On in System Information (search for msinfo32) and that you restarted fully after saving your firmware changes.

A Common Mistake We See

The most common mistake is clearing the TPM instead of enabling it. Some firmware menus place Clear TPM or Reset TPM right next to the enable switch. Clearing the TPM deletes the keys stored in it, which can lock you out of BitLocker-encrypted drives and remove your Windows Hello PIN. Microsoft's own guidance is to clear the TPM only from within Windows, and only when you have a backup and recovery method in place.

The second mistake is buying a new PC because a compatibility check failed, when the TPM was simply switched off. Check the firmware first. Once TPM 2.0 is on and Windows 11 is installed, you need an activated licence; our support team can help if activation does not complete after the upgrade.

Frequently Asked Questions

Is enabling TPM 2.0 safe?

Yes. Enabling TPM 2.0 turns on a security feature that is already built into your hardware and does not change or delete your files. The only risky option nearby is clearing or resetting the TPM, which removes stored keys. Read each menu option carefully and change only the enable setting.

How do I know if TPM 2.0 is enabled on my PC?

Press Windows key + R, type tpm.msc and press Enter. If the window shows TPM information with a Specification Version of 2.0, TPM 2.0 is enabled. If it says Compatible TPM cannot be found, the TPM is switched off in your firmware or your PC does not have one.

What if my PC only has TPM 1.2?

Windows 11 needs TPM 2.0, so a TPM 1.2 chip does not meet the requirement. Some older systems received firmware updates that switch the chip to 2.0, so check your PC or motherboard maker's support page. If no update exists, the PC does not officially support Windows 11.

Can I enable TPM 2.0 without going into the BIOS?

Not in most cases. TPM is a hardware setting controlled by your UEFI firmware, so Windows cannot switch it on by itself. Some manufacturers provide tools that change firmware settings from Windows, but the reliable method is the Advanced startup route into UEFI Firmware Settings described above.

Will enabling TPM 2.0 slow down my PC?

For everyday use and gaming, no noticeable slowdown is expected. The TPM works only when Windows needs to store or check a key, such as during sign-in or encryption. Some earlier AMD platforms had reports of brief stutters linked to fTPM, which AMD addressed through motherboard firmware updates.

Does enabling TPM activate Windows 11?

No. TPM 2.0 is a hardware requirement for installing Windows 11, but activation is a separate step that needs a valid licence. A PC upgraded from an activated Windows 10 installation usually activates automatically; a new build or clean install needs a Windows 11 product key.

Conclusion

To enable TPM 2.0, restart into UEFI Firmware Settings, switch on Intel PTT, AMD fTPM or the Security Device option, then save and confirm with tpm.msc. Check Secure Boot and UEFI mode at the same time so your PC meets every Windows 11 requirement. If you are moving off Windows 10, which our Windows 10 end of life guide explains, you can find a genuine licence in our Windows 11 collection, including Windows 11 Pro and Windows 11 Home.

Useful Links