To determine whether Secure Boot is enabled on the computer, use these steps: Check if Secure Boot is present for Windows 11 However, you want to consult the motherboard’s manufacturer’s website to confirm that the support exists.Īfter you complete the steps, the Windows 11 check should pass, allowing you to upgrade the computer to the new OS. If the computer does not have a TPM option and this is a custom build, you may be able to purchase a module to add the support. If the motherboard doesn’t have a TPM chip and you are running an AMD processor, the module it’s may be built into the processor, and the option will appear as “fTPM” (firmware-based TPM 2.0) or “AMD fTPM switch.” If the device is an Intel-based system, TPM 2.0 will be available as Platform Trust Technology (PTT). Select the TPM 2.0 option and choose the Enabled option. Under the “Advanced startup” section, click the Restart now button.Ĭlick the “UEFI Firmware settings” option.Ĭlick the advanced, security, or boot settings page, depending on the motherboard. To enable TPM 2.0 in the BIOS to fix the Windows 11 installation, use these steps: Otherwise, if it reads “Compatible TPM cannot be found,” the chip is disabled on the UEFI, or the device doesn’t have a compatible Trusted Platform Module.

If the computer includes a TPM chip, you’ll see the hardware information and its status. In the “Status” and “TPM Manufacturer Information” sections, confirm TPM is present and version. Search for tpm.msc and click the top result to open the “Trusted Platform Module (TPM) Management” tool.

To determine if TPM is enabled for Windows 11, use these steps: Enable Secure Boot in BIOS for Windows 11Ĭheck if TPM 2.0 is present for Windows 11.Check if Secure Boot is present for Windows 11.

Check if TPM 2.0 is present for Windows 11.

(See also the steps to enable these two security features on VMware Workstation and Hyper-V to run the new OS on a virtual machine.) This guide will teach you the steps to check and enable TPM 2.0 and Secure Boot to install Windows 11. On the other hand, Secure Boot is a module that ensures that the device boots only using the software that the manufacturer trusts. TPM is a piece of hardware, usually (but not always) integrated into the motherboard, which offers a secure environment to store and protect the encryption keys when encrypting the hard drive using features like BitLocker. According to Microsoft, TPM 2.0 and Secure Boot are needed to provide a better security environment and prevent (or at least minimize) sophisticated attacks, common malware, ransomware, and other threats. On Windows 11, one of the most significant changes is the requirement for Trusted Platform Module (TPM) version 2.0 and Secure Boot. If you plan to upgrade to Windows 11, you must first check and enable TPM 2.0 and Secure Boot in the BIOS (UEFI) of your computer’s motherboard (from Asus, Dell, MSI, GigaByte, etc.) as part of the preparation.

Insyde flash firmware tool dell