How to Enable TPM in Windows 10 & Check Readiness

This guide walks you through enabling TPM (Trusted Platform Module) on a Windows 10 PC and verifying that it is active. TPM is a security chip that provides hardware-level encryption and is required for features like BitLocker and Windows Hello. You’ll learn how to check if your system has TPM, enable it in the BIOS/UEFI, and confirm it’s ready in Windows.

What You’ll Need

Administrator access to your Windows 10 PC.
Access to your computer’s BIOS/UEFI firmware settings (usually by pressing a key during startup, like F2, Del, or Esc).
Your motherboard or PC manual (or the manufacturer’s website) to know the exact TPM menu name.

Step-by-Step

Check if TPM is already enabled in Windows: Press Win + R, type tpm.msc, and press Enter. The TPM Management window opens. If it says “Compatible TPM cannot be found,” TPM is either disabled or not present. If it shows “The TPM is ready for use,” you’re done.
Check TPM status via Device Manager: Press Win + X and select Device Manager. Expand Security devices. If you see a device named “Trusted Platform Module 2.0” (or similar), TPM is present but may still be disabled in firmware.
Restart and enter BIOS/UEFI: Restart your PC. During boot, press the key displayed on screen (often F2, Del, F10, or Esc) to enter the firmware setup. If you’re unsure, check your manufacturer’s website.
Locate the TPM setting: In the BIOS/UEFI, look for a tab or section named Security, Advanced, or Trusted Computing. The exact wording varies: it might be “Intel Platform Trust Technology (PTT)” on Intel systems, “AMD CPU fTPM” on AMD systems, or simply “TPM Device” or “Security Chip.”
Enable TPM: Select the TPM option and change its status to Enabled. If you see options like “Firmware TPM” or “Discrete TPM,” choose the one that matches your hardware (usually the firmware option).
Save and exit: Press the key to save changes (usually F10) and confirm. The PC will restart.
Verify in Windows: After booting back into Windows, press Win + R, type tpm.msc, and press Enter. The window should now show “The TPM is ready for use.” You can also check the status in the Device Manager under Security devices.

Common Mistakes

Enabling the wrong TPM type: Choosing “Discrete TPM” when your system only has firmware TPM can cause errors. Use the firmware option (Intel PTT or AMD fTPM) unless you have a dedicated TPM module installed.
Not saving changes: Exiting the BIOS without saving will leave TPM disabled. Always use the “Save and Exit” option.
Clearing TPM keys unnecessarily: If you see an option to “Clear TPM” or “Reset TPM,” avoid it unless you intend to wipe encryption keys. This can cause BitLocker to ask for recovery keys.
Assuming TPM is absent: Many newer PCs have TPM but it’s disabled by default. Always check the BIOS before concluding your hardware lacks it.

Tips

If you’re enabling TPM for Windows 11 upgrade, ensure you enable TPM 2.0 specifically. In BIOS, look for the version or choose the latest available.
After enabling TPM, you may need to restart twice for the firmware to fully initialize.
If your BIOS has a search function (often F9), use it to quickly find “TPM” or “PTT.”
Keep your BitLocker recovery key safe. If you use BitLocker, enabling TPM may prompt you to back up the recovery key.

Troubleshooting

TPM is enabled in BIOS but Windows still says “Compatible TPM cannot be found”:

Re-enter BIOS and ensure the TPM is set to Enabled, not just “Firmware” or “Discrete.” Some systems require both the TPM device and the interface to be enabled.
Update your BIOS/UEFI to the latest version from the manufacturer’s website. Older firmware may not properly expose TPM to Windows.
Check if your CPU/motherboard actually supports TPM. Intel PTT requires a compatible chipset and CPU; AMD fTPM requires a Ryzen or later processor. Consult your manual.

TPM is ready in tpm.msc but Windows Hello or BitLocker still fails:

Run tpm.msc and look for errors in the “Status” section. If it shows “TPM is ready for use, but the owner authorization is not set,” you may need to initialize it. Right-click the TPM and choose “Prepare TPM.”
In Device Manager, uninstall the TPM driver and scan for hardware changes to reinstall it.

BIOS doesn’t have any TPM option:

Some consumer PCs hide TPM settings under a different name. Look for “Security Chip,” “Trusted Computing,” “Intel PTT,” or “AMD fTPM.”
If truly absent, your motherboard may not have TPM support. Check the manufacturer’s specifications. Some systems require a physical TPM module that plugs into the motherboard.

Frequently Asked Questions

What does TPM do in Windows 10?

TPM provides hardware-based security for encryption keys, credentials, and other sensitive data. It’s used by BitLocker, Windows Hello, and Windows Defender System Guard.

How do I know if my PC has TPM 2.0?

Open tpm.msc. If the TPM is ready, the “TPM Manufacturer Information” section shows the specification version (e.g., 2.0). In Device Manager, the device name may also include “2.0.”

Is it safe to enable TPM?

Yes. Enabling TPM is safe and recommended. It does not affect performance and adds security. You may need to reconfigure BitLocker after enabling it.

Will enabling TPM erase my data?

No, enabling TPM itself doesn’t erase data. However, if you clear TPM keys (which is a separate step), it can cause BitLocker to require a recovery key. Always back up important data before making firmware changes.

Can I enable TPM on a desktop PC without a TPM module?

If your CPU and motherboard support firmware TPM (Intel PTT or AMD fTPM), you can enable it in BIOS without extra hardware. Otherwise, you may need to install a discrete TPM module, which is rare for consumer desktops.

Why is TPM disabled by default?

Manufacturers often disable TPM to avoid potential compatibility issues with older operating systems or to simplify support. Enabling it is a simple BIOS change.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →