How to Clear the TPM Chip in Windows 11

Clearing the Trusted Platform Module (TPM) in Windows 11 resets the security processor to its factory state, removing all generated keys and associated data. This is useful when selling or recycling a PC, troubleshooting BitLocker or Windows Hello issues, or preparing for a clean OS reinstall. Before proceeding, ensure you have backups of any BitLocker recovery keys and that you understand the impact on encryption and sign-in features.

What You’ll Need

• Administrator access to the Windows 11 PC
• BitLocker recovery key (if BitLocker is enabled) – store it safely elsewhere
• Backup of any data protected by TPM-based encryption (e.g., virtual smart cards, some password managers)
• Access to the UEFI/BIOS setup (for clearing via firmware)

Step-by-Step

1. Save your BitLocker recovery key. If BitLocker is on, open the BitLocker management console (search “Manage BitLocker”) and click “Back up your recovery key”. Save it to a file or print it. Without this key, you may lose access to encrypted drives after clearing the TPM.
2. Disable auto BitLocker protection (if applicable). In some cases, BitLocker may automatically suspend protection when the TPM is cleared. To be safe, open an elevated Command Prompt (right-click Start > Terminal (Admin)) and run: manage-bde -protectors -disable C: (replace C: with your system drive). This suspends BitLocker temporarily.
3. Open Windows Security. Click the Start button, type “Windows Security”, and open the app.
4. Go to Device security. In the left sidebar, select “Device security”.
5. Click “Security processor details”. Under the “Security processor” section, you’ll see a link to “Security processor details”. Click it.
6. Click “Security processor troubleshooting”. This link is at the bottom of the details page.
7. Click “Clear TPM”. You’ll see a button labeled “Clear TPM”. Click it.
8. Confirm and restart. Windows will ask for confirmation. Click “Clear and restart”. Your PC will restart automatically. During restart, you may be prompted to press a key to confirm the TPM clear (this is a firmware-level prompt, often requiring you to press F12 or similar). Follow the on-screen instructions.
9. Re-enable BitLocker (if you disabled it). After Windows restarts, open an elevated Command Prompt and run: manage-bde -protectors -enable C: to resume BitLocker protection.

Alternative method via UEFI/BIOS: If Windows won’t boot or you prefer firmware-level clearing, restart your PC and enter the UEFI/BIOS (usually by pressing Del, F2, or F10 during startup). Look for a “Security” or “Trusted Computing” section, find “Clear TPM” or “Reset TPM”, and follow the prompts. Save changes and exit.

Common Mistakes

• Not saving BitLocker recovery key. This is the most critical error. Without it, clearing the TPM can permanently lock you out of encrypted drives.
• Clearing TPM while BitLocker is active. Even though Windows may suspend BitLocker automatically, it’s safer to disable it manually before clearing.
• Ignoring the firmware prompt. Some systems require you to press a key during restart to confirm the clear. If you miss it, the TPM may not clear.
• Clearing TPM on a device with Windows Hello. You’ll lose all saved fingerprints, face recognition, and PINs. You’ll need to set them up again.
• Not checking if TPM is in use by other apps. Some applications (like certain password managers or virtual smart cards) rely on TPM. Clearing it may require reconfiguration.

Tips

• Back up everything important. Even though clearing TPM doesn’t delete files, it can affect encryption keys. A full backup is always a good idea.
• Use the Windows method first. The Windows Security app method is safer and more straightforward than BIOS clearing.
• Know your TPM version. Windows 11 requires TPM 2.0. Clearing it doesn’t change the version, but it resets all keys.
• After clearing, re-enroll Windows Hello. Go to Settings > Accounts > Sign-in options and set up your PIN, fingerprint, or face again.
• Test BitLocker recovery. If you have BitLocker, after clearing TPM, test that your recovery key works by temporarily suspending and resuming protection.

Troubleshooting

• TPM not found after clearing. If Windows doesn’t detect the TPM after restart, go to Device Manager and check under “Security devices”. If it’s missing, enter BIOS and ensure TPM is enabled (it may have been disabled during the clear).
• BitLocker asks for recovery key after restart. This is normal. Enter your recovery key. If you don’t have it, you may need to use a different method (like a recovery USB).
• Windows Hello not working. After clearing, you’ll need to re-set up PIN, fingerprint, etc. Go to Settings > Accounts > Sign-in options and click “Add” for each.
• Clear TPM button is greyed out. This can happen if you’re not an administrator, or if your TPM is not initialized. Run Windows Security as administrator, or initialize TPM in the TPM Management console (tpm.msc).
• System boots to a black screen after clearing. Some systems require you to press a key (like F1) during boot to confirm the TPM clear. If you see a prompt, follow it. If not, try entering BIOS and look for “TPM state” – it may be set to “Disabled” or “Deactivated”. Re-enable it.
• If all else fails, reset the TPM from BIOS. Enter UEFI/BIOS, find the TPM settings, and choose “Reset” or “Clear”. Save and exit. This often resolves issues where the Windows method fails.

Frequently Asked Questions

Q: Will clearing the TPM delete my files?
A: No, clearing the TPM does not delete personal files. It only removes cryptographic keys stored in the TPM. However, if those keys protect encrypted data (like BitLocker), you may need the recovery key to access it.

Q: Do I need to clear the TPM before selling my PC?
A: Yes, it’s a good practice. It ensures that the new owner cannot use any TPM-based security features tied to your account. Also, perform a full factory reset of Windows.

Q: How long does it take to clear the TPM?
A: The process takes about 30 seconds to a minute, including the restart. The actual clear is instantaneous; the restart takes the most time.

Q: Will clearing the TPM affect my Windows license?
A: No, your Windows license is tied to your Microsoft account or hardware ID, not the TPM. Clearing the TPM won’t deactivate Windows.

Q: Can I clear the TPM without restarting?
A: No, the system must restart to complete the clear. The TPM is a hardware component that requires a reboot to reset.

Q: What is the difference between clearing the TPM and disabling it?
A: Clearing resets the TPM to factory state, removing all keys. Disabling turns off the TPM without wiping keys. Disabling is not recommended as it can cause issues with Windows features.

Related

• Fix Windows 11 Troubleshooter Not Working
• Outlook Keeps Crashing on Windows? Fixes That Work
• macOS Airplane Mode: How to Turn It On