Although your device may include a trusted platform module (TPM) chip, it doesn’t necessarily mean that it’s enabled by default. If it’s not, you may need to enable it manually to use features like BitLocker on Windows 10 or perform an in-place upgrade or fresh install of Windows 11.
A trusted platform module is a tamper-resistant silicon designed to generate, store, and protect encryption keys. It usually comes embedded on the motherboard, but you may also be able to get a module that you can then integrate into the system.
You wouldn’t typically think about TPM on home devices since this was more a feature designed for businesses. However, Windows 11 is expected to start rolling out to devices sometime towards the end of the year, and Microsoft is now making the trusted platform module a prerequisite to install the OS.
If you plan to install Windows 11, and the Windows PC Health Check app is telling you that your hardware isn’t compatible, even when you know everything else meets the requirements, or you want to take advantage of advanced security features on Windows 10, you can quickly enable the security module from the Unified Extensible Firmware Interface (UEFI) settings.
In this Windows 10 guide, you will learn the steps to enable TPM on your computer so you can install Windows 11 when it becomes available.
How to enable TPM via Windows 10
To enable the trusted platform module (TPM) on your computer through the Windows 10 settings, use these steps:
Warning: Changing the incorrect firmware settings can prevent your device from starting correctly. You should access the motherboard settings only when you have a good reason. It’s assumed that you know what you’re doing.
- Open Settings.
- Click on Update & Security.
- Click on Recovery.
-
Under the “Advanced startup” section, click the Restart now button.
Source: Windows Central -
Click on Troubleshoot.
Source: Windows Central -
Click on Advanced options.
Source: Windows Central -
Click the UEFI Firmware settings option.
Source: Windows CentralQuick tip: If you have a legacy BIOS, the option will not be available.
-
Click the Restart button.
Source: Windows Central -
Open the security settings page.
Quick note: The UEFI settings are usually different per manufacturer and even per computer model. As a result, you may need to check your manufacturer support website for more specific details to find the security settings.
-
Select the Trusted Platform Module (TPM) option and press Enter.
Source: Windows Central -
Select the Enabled option and press Enter.
Source: Windows Central - Exit the UEFI settings.
- Confirm the changes to restart the computer.
Once you complete the steps, the security module will enable to allow you to configure and use features like BitLocker or pass the compatibility check to install Windows 11.
How to enable TPM via boot sequence
If you don’t have access to the Windows 10 desktop, or this is a new computer, you can access the UEFI settings to enable a trusted platform module during the startup process.
To access the firmware settings to enable the TPM chip on your computer during the boot process, use these steps:
- Press the Power button.
- See the screen splash to identify the key you must press to enter the firmware (if applicable).
- Press the required key repeatedly until you enter the setup mode. Typically, you need to press the Esc, Delete, or one of the Function keys (F1, F2, F10, etc.).
- Open the security settings page.
-
Select the Trusted Platform Module (TPM) option and press Enter.
Source: Windows Central -
Select the Enabled option and press Enter.
Source: Windows Central - Exit the UEFI settings.
- Confirm the changes to restart the computer.
After you complete the steps, the trusted platform module will enable on the computer.
If you don’t see the information on the screen or the computer boots too fast, restart the device again, and as soon as the boot starts press the required key multiple times quickly.
In the case you are unable to access the firmware using the keyboard, you may need to check your manufacturer documentation to determine the key you need to press during boot. Here are some computer brands and their respective keys to access the motherboard firmware:
- Dell: F2 or F12.
- HP: Esc or F10.
- Acer: F2 or Delete.
- ASUS: F2 or Delete.
- Lenovo: F1 or F2.
- MSI: Delete.
- Toshiba: F2.
- Samsung: F2.
- Surface: Press and hold volume up button.
More Windows 10 resources
For more helpful articles, coverage, and answers to common questions about Windows 10, visit the following resources:
Fret not, you can sideload Android APKs directly onto Windows 11
Windows 11 brings a significant new feature: the ability to run Android apps directly within the OS. While users can get Android apps through the Amazon store, it has now been confirmed that, yes, you can also just sideload your favorite Android APK too 🙌
TPM, Windows 11, and what it means for getting that upgrade this fall
Windows 11 doesn’t have too many strict hardware requirements to run well, but Microsoft has thrown down the gauntlet on security. A Trusted Platform Module (TPM) is required, and what that means is causing a lot of confusion for some users. Here is what we know so far.
