Fix Windows 11 TPM 2.0 Installation Errors

If Windows 11 Setup says your PC needs TPM 2.0, first check whether firmware TPM is merely disabled; many computers have a compatible TPM that can be turned on in UEFI settings. If the hardware truly lacks a supported TPM, use a supported Windows 11 device or ask the computer maker about compatible options rather than relying on an installation bypass.

What the TPM 2.0 requirement means

A TPM, or Trusted Platform Module, is a security component that can protect cryptographic keys and support Windows security features. It may be a separate chip, or it may be provided through firmware by the processor and system firmware. Windows 11 requires TPM 2.0 as part of its published minimum system requirements, alongside other requirements such as a compatible processor, UEFI firmware with Secure Boot capability, memory, and storage.

Seeing a TPM error does not by itself prove that the computer has no TPM. Setup may report the requirement as unmet because the feature is disabled, the system is configured to boot in a legacy mode, or the machine does not meet another requirement that appears in the same compatibility check. Check the precise message and confirm the system’s capabilities before changing firmware settings.

Check TPM status in Windows

If you can still start the current Windows installation, use its built-in tools to see what is available:

Press Windows key + R, enter tpm.msc, and press Enter. The TPM Management window reports whether a compatible TPM is ready for use and, when available, its specification version.
Open Settings > Privacy & security > Windows Security > Device security. Look for the Security processor section. The exact presentation can vary by device and Windows build.
To check Secure Boot status, press Windows key + R, enter msinfo32, and inspect BIOS Mode and Secure Boot State in System Information. A system in legacy BIOS mode may need a different boot configuration before Secure Boot can be enabled.

If tpm.msc says that a compatible TPM cannot be found, check the computer manufacturer’s documentation or support information. Windows may not detect a firmware TPM that has not been enabled in UEFI.

Enable firmware TPM in UEFI

Firmware menus differ between computers, so there is no single menu path or setting name that applies to every model. Save your work, connect a laptop to power, and consult the manufacturer’s instructions for entering UEFI and changing security settings. Common names for firmware TPM include Intel PTT and AMD fTPM; other systems may use wording such as Security Device or TPM Device Selection.

Open UEFI settings. From Windows, a common route is Settings > System > Recovery > Advanced startup > Restart now, then choose the option for UEFI Firmware Settings if it is available. You can also use the startup key specified by the computer maker.
Find the security, trusted computing, or platform security section. Enable the existing firmware TPM option if the manufacturer confirms it is the correct setting.
Save changes and restart. Return to Windows and check tpm.msc again to verify that the TPM is detected and reports version 2.0.

Do not select an option to clear, erase, or reset the TPM as a troubleshooting shortcut. Clearing it can affect keys used by Windows features and may make protected data inaccessible unless recovery information is available. If an unfamiliar prompt appears, stop and consult the device maker’s instructions.

Check Secure Boot and other requirements

TPM 2.0 and Secure Boot are related security requirements, but they are not the same feature. TPM provides security functions involving keys and measurements; Secure Boot checks trusted software during startup. Turning on one does not automatically enable the other.

Windows 11 requires a PC with UEFI firmware and Secure Boot capability. If System Information says Secure Boot is off, first find out whether the firmware is in UEFI or legacy mode. Changing a system disk from legacy boot to UEFI can require preparation; switching firmware modes without checking the existing installation can leave Windows unable to boot. Follow the manufacturer’s supported conversion guidance or get help from a qualified technician rather than changing settings at random.

Also review the full compatibility result. A PC can have TPM 2.0 and still be ineligible because of its processor or another minimum requirement. Use Microsoft’s current Windows 11 requirements and compatibility guidance, and the computer maker’s model-specific documentation, to identify the actual blocker.

If Setup still says TPM is missing

After enabling firmware TPM, restart fully and check the TPM status in Windows again. If the tool still cannot find it, use this sequence:

Confirm that the setting you enabled is the firmware TPM option supported by that exact computer model, not a similarly named unrelated option.
Check for UEFI or firmware updates from the computer maker. Read the model-specific instructions and precautions before updating; do not interrupt an update.
Run Windows Update and restart, then rerun the compatibility check or Windows Setup.
Check whether the error actually names a different requirement, such as processor compatibility or Secure Boot configuration.
Contact the manufacturer if the firmware has no TPM option, the option is unavailable, or the TPM reports an error.

On a computer that cannot run Windows, check its documentation for a supported firmware TPM or hardware TPM option before considering hardware changes. Not every computer supports adding a separate TPM module, and a module must match the system board and firmware. Do not buy a generic module based only on its connector or appearance.

Why bypassing the check is a poor fix

Online instructions may describe ways to bypass Windows 11’s hardware checks. Such methods do not make unsupported hardware compliant, and Microsoft warns that installing Windows 11 on a device that does not meet minimum requirements is not recommended. The device may have compatibility problems, and Microsoft does not guarantee that it will receive updates, including security updates.

A bypass also does not add TPM protections or resolve an unrelated firmware or boot issue. For a computer that fails the requirement, the dependable choices are to enable a supported TPM, use hardware that meets requirements, or remain on an operating system that is still supported and suitable for the device. Check Microsoft’s current lifecycle information when deciding what to do with an older PC.

Frequently Asked Questions

How do I know whether my PC has TPM 2.0?
Run tpm.msc in Windows and check the status and specification version. If no TPM is detected, check UEFI settings and the computer maker’s documentation before concluding that the PC lacks one.

What are Intel PTT and AMD fTPM?
They are common names for firmware-based TPM implementations on systems using those processor platforms. The exact availability and wording depend on the computer and its firmware.

Does TPM 2.0 mean Secure Boot is enabled?
No. They are separate features. Check TPM status with tpm.msc and Secure Boot status in System Information.

Will enabling TPM erase my files?
Enabling an existing TPM is different from clearing it and normally does not erase personal files. Do not clear or reset the TPM without understanding the effect on encryption and having any needed recovery information.

Can I install Windows 11 without TPM 2.0?
Some unofficial methods bypass the check, but they leave the PC unsupported by the minimum requirements and may lead to compatibility or update problems. The safer course is supported hardware or a supported operating system.

What if my UEFI has no TPM setting?
Check the manual and support information for the exact model, since the feature may be named differently or unavailable. If the manufacturer confirms there is no supported TPM 2.0 option, the PC may not meet Windows 11 requirements.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →