Skip to main content

How to enable the Trusted Platform Module (TPM) on your PC if it's supported

Enable TPM on your PC
Enable TPM on your PC (Image credit: Windows Central)

Although your device may include a Trusted Platform Module (TPM) chip, it doesn't necessarily mean that it's enabled by default. If it's not, you may need to enable it manually to use features like BitLocker on Windows 10 or perform an in-place upgrade or fresh install of Windows 11.

A Trusted Platform Module is a tamper-resistant silicon designed to generate, store, and protect encryption keys. It usually comes embedded on the motherboard, but you may also be able to get a module that you can then integrate into the system.

You wouldn't typically think about TPM on home devices since this was more a feature designed for businesses. However, Windows 11 is expected to start rolling out to devices sometime towards the end of the year, and Microsoft is now making the trusted platform module a prerequisite to install the OS.

If you plan to install Windows 11, and the Windows PC Health Check app is telling you that your hardware isn't compatible, even when you know everything else meets the requirements, or you want to take advantage of advanced security features on Windows 10, you can quickly enable the security module from the Unified Extensible Firmware Interface (UEFI) settings.

In this Windows 10 guide, you will learn the steps to enable TPM on your computer so you can install Windows 11 when it becomes available.

How to enable TPM via Windows 10

To enable the Trusted Platform Module (TPM) on your computer through the Windows 10 settings, use these steps:

Warning: Changing the incorrect firmware settings can prevent your device from starting correctly. You should access the motherboard settings only when you have a good reason. It's assumed that you know what you're doing.

  1. Open Settings.
  2. Click on Update & Security.
  3. Click on Recovery.
  4. Under the "Advanced startup" section, click the Restart now button.

Source: Windows Central (Image credit: Source: Windows Central)
  1. Click on Troubleshoot.

Source: Windows Central (Image credit: Source: Windows Central)
  1. Click on Advanced options.

Source: Windows Central (Image credit: Source: Windows Central)
  1. Click the UEFI Firmware settings option.Quick tip: If you have a legacy BIOS, the option will not be available.

Source: Windows Central (Image credit: Source: Windows Central)
  1. Click the Restart button.

Source: Windows Central (Image credit: Source: Windows Central)
  1. Open the security settings page.Quick note: The UEFI settings are usually different per manufacturer and even per computer model. As a result, you may need to check your manufacturer support website for more specific details to find the security settings.
  2. Select the Trusted Platform Module (TPM) option and press Enter.

Source: Windows Central (Image credit: Source: Windows Central)
  1. Select the Enabled option and press Enter.

Source: Windows Central (Image credit: Source: Windows Central)
  1. Exit the UEFI settings.
  2. Confirm the changes to restart the computer.

Once you complete the steps, the security module will enable to allow you to configure and use features like BitLocker or pass the compatibility check to install Windows 11.

How to enable TPM via boot sequence

If you don't have access to the Windows 10 desktop, or this is a new computer, you can access the UEFI settings to enable a trusted platform module during the startup process.

To access the firmware settings to enable the TPM chip on your computer during the boot process, use these steps:

  1. Press the Power button.
  2. See the screen splash to identify the key you must press to enter the firmware (if applicable).
  3. Press the required key repeatedly until you enter the setup mode. Typically, you need to press the Esc, Delete, or one of the Function keys (F1, F2, F10, etc.).
  4. Open the security settings page.
  5. Select the Trusted Platform Module (TPM) option and press Enter.

Source: Windows Central (Image credit: Source: Windows Central)
  1. Select the Enabled option and press Enter.

Source: Windows Central (Image credit: Source: Windows Central)
  1. Exit the UEFI settings.
  2. Confirm the changes to restart the computer.

After you complete the steps, the Trusted Platform Module will be enabled on the computer.

If you don't see the information on the screen or the computer boots too fast, restart the device again, and as soon as the boot starts press the required key multiple times quickly.

In the case you are unable to access the firmware using the keyboard, you may need to check your manufacturer documentation to determine the key you need to press during boot. Here are some computer brands and their respective keys to access the motherboard firmware:

  • Dell: F2 or F12.
  • HP: Esc or F10.
  • Acer: F2 or Delete.
  • ASUS: F2 or Delete.
  • Lenovo: F1 or F2.
  • MSI: Delete.
  • Toshiba: F2.
  • Samsung: F2.
  • Surface: Press and hold volume up button.

More Windows 10 resources

For more helpful articles, coverage, and answers to common questions about Windows 10, visit the following resources:

Mauro Huculak is technical writer for WindowsCentral.com. His primary focus is to write comprehensive how-tos to help users get the most out of Windows 10 and its many related technologies. He has an IT background with professional certifications from Microsoft, Cisco, and CompTIA, and he's a recognized member of the Microsoft MVP community.

2 Comments
  • Thanks for the handy article Mauro. Two points if I may: 1) To add to this handy guide, Point 9 : Additional / best place to look is the model specific manual on manufacturers website. 2) A article on how to find the laptops or Motherboards model / revision using something like Aida 64, Speccy, SysInfo would be helpful :). Given not all manufacturers include the model number on the underside of a laptop for instance. Also those with pre-built boutique PCs may not know the exact motherboard their PC is running on.
  • I know this is geared towards an actual hardware chip. but I activated TPM support through my motherboard's BIOS menu.