Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesSome links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
If BitLocker reports “Compatible TPM cannot be found,” “TPM is disabled and requires attention,” “TPM storage is not available,” or “There is a problem with your TPM,” Windows usually cannot access a firmware or hardware security module. Start by checking detection in tpm.msc, Windows Security, and PowerShell. If no TPM appears, enable the firmware option called Intel PTT, AMD fTPM, or a similarly named security device in UEFI. Then verify BitLocker prerequisites, update firmware or drivers when necessary, and keep the recovery key available before any TPM reset. A computer with no usable TPM can still protect its operating-system drive with a USB startup key if its firmware can read USB storage, but that mode lacks TPM-based boot-integrity verification.
What does a missing or undetected TPM message mean?
BitLocker uses a Trusted Platform Module (TPM) to perform cryptographic operations and release drive keys only when the computer’s startup state meets its protection policy. Microsoft describes the TPM as a hardware component designed to enhance security through cryptographic operations. A “missing” message does not prove that the computer has no TPM: the module may be disabled, hidden from Windows by UEFI settings, blocked by a non-Microsoft driver, or affected by firmware incompatibility.
As an Amazon Associate I earn from qualifying purchases.
Windows 11 requires TPM 2.0 as a foundation for security features, so a machine that cannot report version 2.0 may also fail Windows 11 checks. The exact UEFI labels and menu locations differ by manufacturer and model; the computer maker’s documentation is authoritative for those menus.
How do I check whether Windows detects a TPM?
Use all three checks below. They distinguish an absent module from one that is present but misconfigured.
Popular on Amazon
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
- Open the TPM console. Press
Win+R, entertpm.msc, and press Enter. In the console, read the status message and the Specification Version. A working modern installation should report TPM 2.0. - Check Windows Security. Open Windows Security > Device security > Security processor details. Review the security-processor status and specification version. If the page says no security processor is available, Windows is not exposing a usable TPM.
- Query PowerShell. Open PowerShell and run
Get-Tpm. ExamineTpmPresent,TpmReady,TpmEnabled, andTpmActivated. A present but not ready module points to initialization or firmware work rather than a physically missing chip.
Record the output before changing anything. It provides a baseline for support and helps show whether a later UEFI change worked.
How do I enable a TPM in UEFI or BIOS?
Restart the computer, enter UEFI/BIOS setup using the manufacturer’s key shown during startup, and look in Security, Advanced, Computing, or Trusted Computing menus. Enable the option matching the platform:
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minute- Intel systems: Intel Platform Trust Technology (Intel PTT), Intel PTT, or Security Device Support.
- AMD systems: AMD fTPM, AMD PSP fTPM, Firmware TPM, or a similarly named security-device setting.
- Generic labels: TPM State, Security Device, Security Device Support, or Trusted Computing.
Set the option to Enabled, save changes, and reboot into Windows. Run the three detection checks again. If the TPM now appears, do not clear it merely because BitLocker previously displayed an error; first test BitLocker status and protectors.
Some firmware exposes separate controls for enabling the security device and activating it. Enable both when the menu provides both choices. Do not switch between UEFI and legacy boot modes casually: changing boot mode can make an existing Windows installation unbootable and can alter BitLocker’s measurements. Obtain device-specific instructions from the manufacturer before changing boot configuration.
What if the TPM is enabled but Windows still cannot see it?
Persistent detection failure after enabling firmware TPM generally falls into three areas: a driver conflict, non-compliant UEFI, or a TPM that is hidden from the operating system.
Also popular on Amazon
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
Remove a non-Microsoft TPM driver conflict
Microsoft notes that a non-Microsoft TPM driver can prevent Windows from loading its default TPM driver. In Device Manager, inspect Security devices and the TPM entry. Use the computer maker’s current driver package or allow Windows to use its built-in driver; avoid untrusted “TPM repair” utilities. Reboot and repeat tpm.msc and Get-Tpm.
Update UEFI and platform firmware
A TPM 2.0 that remains invisible can indicate UEFI non-compliance or a firmware bug. Check the manufacturer’s support page for a UEFI/BIOS update that specifically addresses security, fTPM, PTT, or Windows 11 compatibility. Keep AC power connected, suspend BitLocker protection if the manufacturer instructs you to do so, and follow the vendor’s update procedure exactly. A failed firmware update can prevent startup, so do not interrupt it.
Check for a hidden or administratively disabled device
Corporate policies or firmware settings can hide a TPM from the operating system. If the computer is managed, ask the administrator whether a policy disables security devices or restricts BitLocker. On a personal computer, load UEFI defaults only after documenting current boot and storage settings; defaults can change controller modes and boot order.
Which BitLocker prerequisites should I verify?
Even a detected TPM will not satisfy every BitLocker requirement. Microsoft’s preparation guidance calls for the following conditions:
- The TPM is unlocked and usable by Windows.
- Windows Recovery Environment (WinRE) is enabled. Run
reagentc /infoin an elevated Command Prompt and confirm that Windows RE status is Enabled. - The system-reserved or system partition uses the format appropriate to the boot mode: FAT32 on UEFI systems or NTFS on legacy systems.
- The operating-system volume has enough unallocated or correctly arranged system-partition space for BitLocker’s boot files.
Check current encryption and protectors with an elevated Command Prompt:
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Also popular on Amazon
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
manage-bde -status
manage-bde c: -protectors -getIn PowerShell, Get-BitLockerVolume reports volume protection status, encryption percentage, and protector types. These commands can reveal that the TPM is fine while a recovery-environment or partition-layout problem blocks setup.
How do I collect useful BitLocker and TPM evidence?
Save command output and event logs before making destructive changes. In Event Viewer, inspect:
Microsoft-Windows-BitLocker-API/ManagementMicrosoft-Windows-BitLocker-API/Operational- BitLocker-DrivePreparationTool logs
Export or copy the relevant events with their timestamps and error codes. Also retain the output of Get-Tpm, manage-bde -status, manage-bde c: -protectors -get, reagentc /info, and Get-BitLockerVolume. This evidence lets an OEM technician distinguish a policy problem from a firmware or motherboard fault.
Should I clear the TPM?
Clear or reinitialize the TPM only after confirming that the BitLocker recovery key is available. Clearing changes the TPM’s ownership and stored keys; BitLocker can respond by entering recovery at the next boot. Retrieve the recovery key from the account or management system that enrolled the device, and verify that it is readable before proceeding.
When protection is backed up, use Windows Security’s security-processor troubleshooting option or the TPM management console to clear and reinitialize the TPM. Do not clear the TPM directly in UEFI unless the manufacturer’s instructions explicitly require that route. After the clear operation, Windows automatically initializes and takes ownership of the TPM. Reboot, confirm TPM 2.0 detection, and re-add or repair BitLocker protectors as needed.
Also popular on Amazon
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
If the device is managed by an organization, coordinate the operation with its administrator. A recovery prompt is expected after certain TPM, firmware, motherboard, or boot-configuration changes; it is not evidence that the data was erased.
Can I use BitLocker without a TPM?
Yes, when the computer’s BIOS/UEFI can read a USB flash drive during startup. Microsoft documents a startup-key configuration that stores the BitLocker key on removable media. This allows BitLocker on the operating-system drive, but it does not provide TPM-based measurement of the boot environment, so its system-integrity assurance is weaker than TPM-backed BitLocker.
USB startup-key requirements
- A firmware setup that can access USB storage early in boot.
- A reliable USB flash drive dedicated to the startup key.
- A separately stored BitLocker recovery key; the USB startup key is not a substitute for recovery protection.
- A test of the selected USB port and drive while setting up encryption. Some systems initialize only specific ports before Windows loads.
Enable the no-TPM policy
On supported Windows editions, configure the BitLocker policy that permits additional authentication at startup and allows BitLocker without a compatible TPM. In Local Group Policy Editor, the relevant settings are under Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives. The exact policy names and availability depend on Windows edition and management configuration.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →After applying policy, start BitLocker for the operating-system volume and choose the option to require a startup key on a USB flash drive. Follow the wizard to save the key, print or save the recovery information separately, and restart with the USB inserted. Remove the drive after shutdown and test that the machine refuses to unlock without it. If firmware cannot read the drive before Windows starts, this fallback will not work; return to TPM or OEM repair instead.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Which fix is best for security and manageability?
Choose the least disruptive path that restores a hardware-backed trust chain. The practical differences are:
Also popular on Amazon
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
| Option | Security-integrity coverage | Requirements | Recovery and ongoing management |
|---|---|---|---|
| Enable an existing TPM | TPM-backed measured boot and automatic key release when startup measurements match policy | TPM 2.0 present; UEFI option such as PTT or fTPM enabled | Keep the BitLocker recovery key; easiest to manage through Windows and organizational tools |
| Repair or update UEFI/firmware | Can restore the same TPM-backed coverage when the fault is firmware-related | Compatible manufacturer update and stable power; model-specific procedures | Firmware changes can trigger recovery; suspend or document protection only as instructed |
| USB startup key without TPM | BitLocker encryption remains available, but TPM-based system-integrity verification is absent | Firmware must read a USB flash drive during boot; removable key must be available | Users must protect and carry the startup key plus a separate recovery key; lost media prevents normal startup |
TPM-backed BitLocker is the preferred configuration because it combines encryption with measured-boot checks. USB startup-key mode is a documented fallback for hardware that genuinely lacks a usable TPM.
When does a TPM problem require manufacturer support?
Escalate after confirming the Microsoft driver, enabling the correct UEFI setting, and applying available manufacturer firmware updates. Contact the computer maker when the TPM remains absent, UEFI offers no security-device option on a model expected to support one, firmware updates fail, or event logs report repeated hardware initialization errors. Persistent TPM or platform-controller faults may require motherboard replacement. Before service, back up data, verify the recovery key, and record the command output and event IDs so the technician can reproduce the failure without risking a lockout.
How can I avoid a BitLocker lockout while troubleshooting?
- Locate and test the 48-digit BitLocker recovery key before clearing the TPM or changing firmware.
- Do not change UEFI boot mode, storage-controller mode, Secure Boot settings, or boot order without understanding their effect on measured boot.
- Keep the recovery key separate from the encrypted drive and from the USB startup key.
- After every change, reboot once and verify
tpm.msc,Get-Tpm, andmanage-bde -statusbefore beginning another change. - For managed computers, involve the administrator before clearing, re-enrolling, or removing protectors.
Frequently Asked Questions
Does a TPM error mean my computer has no TPM chip?
No. Firmware TPM implementations such as Intel PTT and AMD fTPM are common, and either can be disabled or hidden in UEFI. Detection in Windows Security, tpm.msc, and Get-Tpm is more reliable than the error wording alone.
Will clearing the TPM delete my files?
Clearing the TPM does not itself erase the encrypted volume, but it can remove the key material BitLocker expects and trigger recovery. Have the recovery key available and confirm how protectors will be restored before clearing.
Why does BitLocker ask for recovery after a BIOS update?
A firmware or boot change can alter the measurements that TPM-backed BitLocker checks. Entering the recovery key once may re-establish normal startup, but repeated prompts indicate that the change, policy, or firmware state still differs from the expected configuration.
Can I keep using a USB startup key permanently?
You can, provided firmware consistently reads the selected drive and you maintain a separate recovery key. The trade-off is operational: losing, damaging, or forgetting the startup drive prevents ordinary boot, and the configuration lacks TPM-based boot-integrity verification.
Free tools Windows power users keep installed
One-click scans. No signup required.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
