How to Enable TMP 2.0
If your PC’s hardware supports TMP 2.0 and it’s not already enabled, you need to do so through the UEFI/BIOS if you want to upgrade to Windows 11 using the automatic upgrade tool or to upgrade and continue to have access to all security and feature updates.
Here’s how to Enable TMP 2.0 in broad strokes.
Reboot or start up your PC and enter the UEFI/BIOS using your motherboard manufacturer’s particular key during startup. Search for the TPM toggle. For some manufacturers, this is located in the Security tab; in others, Advanced. You may need to go into further sub-menus to find it. On Asus motherboards, it’s found under PCH-FW Configuration (Intel) or AMD fTPM configuration (AMD). Toggle TPM to On, Enabled, or Firmware TPM depending on your manufacturer’s particular UEFI/BIOS. Select Save and Exit, or Exit and, when prompted, confirm you want to save before doing so.
If you don’t find the option, you may need to update your BIOS.
For more help with specific manufacturers, here are some of their guides:
HP Dell Asus Lenovo Gigabyte MSI
What Is a TPM 2.0 Device?
A TMP 2.0 device has a CPU that supports Trusted Platform Module 2.0. That includes any mainstream AMD Ryzen Zen+ processor from the second generation onwards (that doesn’t include Ryzen 2000 APUs) and Intel eighth-generation CPUs or newer. There are also some select Intel Xeon processors which make the cut.
The TPM 2.0 module itself is a small chip that resides on the motherboard, storing information like passwords, certificates, and encryption keys to make it harder for hackers and malware to access them.
Do I have TPM 2.0 On My Computer?
If you have an AMD Ryzen 2000 processor (not including 2200G and 2400G) or newer, or an Intel 8000-series processor or newer, then you almost certainly have a TMP 2.0 module. Anything older than that, including first-generation AMD Ryzen, and Intel 7000 series CPUs, do not support it.
Even if you have the right CPU, your motherboard may not have TMP 2.0 enabled automatically or may not have the option to toggle it manually. If not, try the steps above, and if you run into trouble, try updating your motherboard’s firmware.
How Do I Know If TPM 2.0 Is Enabled?
You can confirm whether TMP 2.0 is enabled on your system by using the Windows 11 PC Health Check application if you’re a Windows Insider.
Alternatively, press Windows key+I to access the Settings menu, then go to Update & Security > Windows Security > Device Security. If you see Security processor details under the Security processor heading, confirm its Specification version is 2.0. If it says 1.0, or the option is missing entirely, TPM 2.0 is not enabled or available.
