sodcalculator

10 Tech How-To

TPM Malfunction Error on Windows 10: Fixes

Guide 10-5769 · Updated · Step by step

If you see a “Trusted Platform Module malfunction� error on Windows 10, it usually means the TPM chip is not responding or its driver is corrupted, and the fix is to update the TPM driver, clear the TPM, or reset the BIOS settings. This article explains what the error means, what causes it, and provides step-by-step solutions you can try at home before considering hardware replacement.

What Is the Trusted Platform Module (TPM)?

The Trusted Platform Module is a dedicated microcontroller on your computer’s motherboard that handles hardware-level security. It stores encryption keys, passwords, and digital certificates in a tamper-resistant way. Windows uses the TPM for features like BitLocker drive encryption, Windows Hello, and Secure Boot. When the TPM malfunctions, these security features may stop working, and you might see error messages during boot or in the Windows Security app.

Most modern desktops and laptops have a TPM chip soldered to the motherboard, but some systems emulate it in firmware (Intel PTT or AMD fTPM). The error “Trusted Platform Module malfunction� can appear in the system tray, in Device Manager, or as a blue screen message. It is not a common error, but it can be alarming because it suggests a hardware problem.

Common Causes of TPM Malfunction on Windows 10

  • Corrupted TPM drivers – Windows updates or third-party software can break the TPM driver, causing communication errors.
  • BIOS/UEFI settings – The TPM may be disabled in the firmware, or the firmware itself may have a bug.
  • Power surges or improper shutdowns – Sudden power loss can corrupt TPM state.
  • Motherboard battery issues – A dying CMOS battery can cause the TPM to lose its state.
  • Hardware failure – The TPM chip itself can fail, though this is rare.

If you recently changed BIOS settings, updated firmware, or installed a new operating system, those are likely triggers. The error can also appear after a Windows 10 feature update, especially if the update changed TPM-related policies.

How to Fix the TPM Malfunction Error

Before you start, back up any BitLocker recovery keys and important data. Clearing the TPM will erase keys that are tied to encryption and Windows Hello. You can find your BitLocker key in your Microsoft account or by following the recovery key prompt.

  1. Restart your computer – A simple reboot can clear temporary glitches. If the error persists, proceed.
  2. Update the TPM driver – Open Device Manager (right-click Start > Device Manager), expand “Security devices,� right-click “Trusted Platform Module 2.0,� and select “Update driver.� Choose “Search automatically for updated driver software.� If Windows finds nothing, go to your motherboard or PC manufacturer’s website and download the latest TPM driver.
  3. Clear the TPM using Windows Security – Go to Windows Security > Device security > Security processor details. Click “Security processor troubleshooting� and then “Clear TPM.� You will need to restart. This resets the TPM to factory state, which usually fixes software-related issues.
  4. Reset BIOS/UEFI settings – Restart your PC and press the key to enter BIOS (often Del, F2, or F10). Look for a “Load Defaults� or “Reset to Factory� option. Save and exit. This can re-enable the TPM if it was disabled or misconfigured.
  5. Update BIOS/UEFI firmware – Check your motherboard or PC manufacturer’s support page for a newer BIOS version. Flashing a BIOS update can fix bugs that affect TPM functionality.
  6. Replace the CMOS battery – If your PC is older and the date/time resets often, a weak battery could be the cause. Replacing it is cheap and easy.
  7. Run Windows Troubleshooter – Go to Settings > Update & Security > Troubleshoot > Additional troubleshooters > Hardware and Devices. Run it and follow the prompts.

If none of these work, the TPM chip may be physically damaged. In that case, you might need to replace the motherboard or disable TPM in BIOS and use software-based encryption instead.

How to Check if Your TPM is Working

After trying the fixes, verify that the TPM is functioning. Press Windows Key + R, type tpm.msc, and press Enter. The TPM Management console will show the status. It should say “The TPM is ready for use.� If it says “Compatibility mode� or “Off,� you may need to enable it in BIOS.

You can also check Device Manager under “Security devices.� If there is a yellow exclamation mark next to “Trusted Platform Module 2.0,� the driver is not working correctly. Right-click and uninstall it, then restart – Windows will reinstall the driver automatically.

What to Do If You Use BitLocker or Windows Hello

Clearing the TPM will break BitLocker and Windows Hello. If you use BitLocker, you must have your recovery key ready. After clearing the TPM, you will need to re-enable BitLocker and re-set up Windows Hello (PIN, fingerprint, etc.). If you don’t have the recovery key, do not clear the TPM – you could lose access to your encrypted data permanently.

If you are not using these features, clearing the TPM is a safe troubleshooting step. It does not delete personal files, but it does remove all keys stored in the TPM.

TPM Malfunction vs. TPM Not Detected

These are two different issues. “TPM malfunction� means Windows sees the TPM but cannot communicate with it properly. “TPM not detected� means the TPM is not visible at all, which usually indicates it is disabled in BIOS or the hardware is absent. For “not detected,� you need to enter BIOS and enable TPM (often under “Security� or “Trusted Computing�). For “malfunction,� the steps above apply.

When to Consider Hardware Replacement

If you have tried all software fixes and the error persists, the TPM chip may be failing. Unfortunately, TPM chips are usually soldered to the motherboard, so replacing just the chip is not practical. You would need to replace the entire motherboard, which can be expensive. Before doing that, consider whether you actually need TPM. If you don’t use BitLocker or Windows Hello, you can disable TPM in BIOS and use the computer normally. However, some future Windows features may require TPM 2.0, so it is better to fix it if possible.

Frequently Asked Questions

Will clearing the TPM delete my files?

No, clearing the TPM does not delete personal files. It only removes the cryptographic keys stored in the TPM. However, if you use BitLocker, you will need your recovery key to access the drive after clearing.

Can I fix the TPM malfunction without entering BIOS?

Yes, you can try updating the driver or clearing the TPM through Windows Security. If those don’t work, you will need to enter BIOS to reset settings or update firmware.

Why does the TPM malfunction error appear after a Windows update?

Windows updates can sometimes change TPM-related settings or install incompatible drivers. This is usually fixed by updating the TPM driver from the manufacturer or clearing the TPM.

Is it safe to disable TPM in BIOS?

Yes, disabling TPM is safe, but you will lose features that rely on it, such as BitLocker and Windows Hello. If you don’t use those, you can disable it to bypass the error.

Does TPM malfunction affect gaming performance?

No, TPM does not affect gaming performance. It only handles security functions. The error is annoying but shouldn’t cause frame drops or stuttering.

Related

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →