TPM means Trusted Platform Module. It is a security component, either a physical chip or a firmware feature inside the CPU, that stores encryption keys and helps verify the system has not been tampered with. Most people hear about it because Windows 11 requires TPM 2.0.
Does this affect you?
This guide is useful if Windows 11 says TPM is missing, BitLocker asks for a recovery key, or BIOS settings mention PTT, fTPM, TPM Device, or Security Device Support.
What TPM actually does
You rarely use TPM directly; security features use it in the background.
- It stores cryptographic keys in a protected area that is harder to extract than normal software storage.
- BitLocker can use TPM to unlock an encrypted drive only when the boot environment looks trusted.
- Windows Hello uses TPM-backed protection for face, fingerprint, and sign-in secrets.
- It helps detect low-level boot tampering before Windows loads.
- Windows 11 requires TPM 2.0 as part of its baseline security requirements.
Check if TPM 2.0 is enabled
Many PCs from roughly 2016 onward include TPM support but may have it disabled in firmware.
- Press Windows key + R, type tpm.msc, and press Enter.
- If the status says TPM is ready and the specification version is 2.0, you are set.
- If Windows says a compatible TPM cannot be found, check BIOS or UEFI before assuming the PC lacks the feature.
- Restart and enter BIOS, often with Del or F2. Look for PTT on Intel systems, fTPM on AMD systems, or names such as TPM Device or Security Device Support.
- Enable it, save changes, boot Windows, and run tpm.msc again.
TPM details worth knowing
Discrete TPM and firmware TPM both count
Some systems use a separate TPM chip or motherboard header. Most modern PCs use firmware TPM built into the CPU platform, called Intel PTT or AMD fTPM. For Windows 11 and normal BitLocker use, both are generally fine.
It does not slow normal use
Enabling TPM has no meaningful everyday performance cost. Any cryptographic overhead is small and not something you will feel during browsing, gaming, or office work.
Very old PCs may not support TPM 2.0
If the CPU and board are too old, there may be no BIOS setting to enable. Windows 11 workarounds exist, but Microsoft does not recommend them for long-term support.
Sources
- Microsoft – TPM 2.0 and Windows 11 Requirements (2025)
- Trusted Computing Group – Trusted Platform Module Overview (2024)
- Intel – Platform Trust Technology Explained (2025)