How to install TPM 2.0 module on Windows PC for Windows 11

How to install TPM 2.0 module on Windows PC for Windows 11 (Simple Guide): To enable TPM 2.0 for Windows 11 in your BIOS settings, begin by opening the Settings menu, then proceed to Update & Security. Navigate to Recovery and under ‘Advanced startup,’ initiate a restart by clicking ‘Restart now.’ Upon reboot, access Troubleshoot, followed by Advanced options. Choose ‘UEFI Firmware settings’ and restart again. From there, depending on your motherboard, locate either the advanced, security, or boot settings page. Find the TPM 2.0 option and select ‘Enabled’ to complete the process.

If your intention is to switch to Windows 11, the initial step involves verifying and activating TPM 2.0 and Secure Boot within your computer’s motherboard BIOS (UEFI).

This is a necessary part of the setup process, regardless of whether your computer’s motherboard is manufactured by Asus, Dell, MSI, GigaByte, or any other brand.

This guide will teach you the steps to check and enable TPM 2.0 and Secure Boot to install Windows 11.

What Is TPM 2.0 for Windows?

TPM, short for Trusted Platform Module, is a hardware component designed to facilitate secure boot processes and verify the integrity of a system. Additionally, the Windows operating system employs TPM for tasks such as encrypting files, securing disks, and supporting BitLocker encryption.

In contrast, Secure Boot serves as a safeguard mechanism to ensure that a device exclusively boots using software that has garnered the manufacturer’s approval.

The more recent iteration, TPM 2.0, made its debut in 2019, signifying an advancement over its predecessor, TPM 1.2, which first emerged in 2011. The majority of contemporary premium and enterprise-grade laptops and PCs introduced post-2016 come equipped with TPM 2.0. If you find yourself uncertain regarding the TPM version on your system, there exists a straightforward method to ascertain it on both Windows 10 and Windows 7 platforms.

Read our laptop guide on how to Check Your Laptop Storage Disk Type in Windows: HDD or SSD.

How to check if TPM is enabled on your laptop

To check if Windows 11 has TPM enabled, follow these steps:

1. Begin by clicking on the Start menu.
2. Search for “tpm.msc” and select the primary result. This action will open the “Trusted Platform Module (TPM) Management” tool.
3. In the sections labelled “Status” and “TPM Manufacturer Information,” validate the presence and version of TPM.

If your computer is equipped with a TPM chip, you’ll find the hardware details and its current status displayed. Alternatively, if the message “Compatible TPM cannot be found” appears, this indicates that either the chip is deactivated in UEFI settings or your device lacks a compatible Trusted Platform Module.

How to enable TPM 2.0 on your laptop

If you wish to activate TPM, these configurations are managed through the UEFI BIOS (PC firmware) and differ based on your device. You can access these configurations by following these steps: Go to Settings > Update & Security > Recovery > Restart now.

Afterwards, on the subsequent screen, choose Troubleshoot > Advanced options > UEFI Firmware Settings > Restart to apply the modifications. These adjustments are occasionally found within a submenu in the UEFI BIOS under categories such as Advanced, Security, or Trusted Computing.

The option to enable TPM might be referred to as Security Device, Security Device Support, TPM State, AMD fTPM switch, AMD PSP fTPM, Intel PTT, or Intel Platform Trust Technology.

If you’re uncertain about adjusting the TPM settings, we recommend reviewing your PC manufacturer’s support details or reaching out to their support team. Below, you’ll find links to information from several PC manufacturers to help you begin:

• Asus
• Dell
• HP
• Lenovo
• Microsoft Surface

How to bypass Windows 11 TPM and Secure Boot requirements

Once you complete the steps below, you can continue with the Windows 11 installation on a device without TPM 2.0 or Secure Boot, and the OS should install normally.

To work around the TPM 2.0 and Secure Boot prerequisites during the installation process of Windows 11, follow these steps:

1. Initiate your PC using the Windows 11 USB flash drive.
2. Within the setup screen, simultaneously press the Shift key and F10 to trigger the Command Prompt.
3. In the Command Prompt, input the following command and press Enter: regedit
4. Navigate through the Registry to the subsequent path: HKEY_LOCAL_MACHINE\SYSTEM\Setup
5. Right-click on the “Setup” folder (key), then select “New” and pick the DWORD (32-bit) Value option.
6. Name the new key BypassTPMCheck and press Enter to counter the Windows 11 TPM 2.0 requirement.
7. Double-click the BypassTPMCheck key, and modify the value from 0 to 1.
8. Click the OK button to confirm the changes.
9. Once again, right-click on the “Setup” folder (key), choose “New,” and select the DWORD (32-bit) Value option.
10. Name this new key BypassSecureBootCheck and press Enter to address the Windows 11 Secure Boot requirement.
11. Double-click the BypassSecureBootCheck key, and alter the value from 0 to 1.
12. Click the OK button to apply the changes.
13. Finally, click the Close (X) button to exit the Registry.
14. Close the Command Prompt by clicking the Close (X) button.

Please note that bypassing these requirements may have implications for the security and performance of your Windows 11 installation. It’s recommended to ensure compatibility and consider the potential consequences before proceeding.