Usually, no: enabling TPM 2.0 and Secure Boot should not meaningfully reduce Windows performance or in-game FPS. TPM protects cryptographic keys and records boot measurements; Secure Boot verifies trusted boot software before Windows starts. Neither is a graphics feature or a persistent game-rendering workload.
Usually, no: enabling TPM 2.0 and Secure Boot should not meaningfully reduce your operating-system performance or in-game FPS. TPM 2.0 protects cryptographic keys and records boot measurements; Secure Boot verifies trusted boot software before Windows starts. Neither is a graphics feature or a persistent game-rendering workload.
As an Amazon Associate I earn from qualifying purchases.
If a game refuses to launch after you change these settings, that is a compatibility or anti-cheat requirement—not evidence that the settings are lowering your frame rate. A performance change is more likely to involve a separate feature such as BitLocker, Virtualization-Based Security (VBS), Memory Integrity/HVCI, a BIOS update, a driver change, or an accidental change to boot configuration.
What TPM 2.0 does
TPM 2.0 is a hardware- or firmware-based security processor. Depending on the platform, it may be a discrete motherboard chip or a firmware TPM integrated into the processor or platform security environment. Windows uses it for functions such as:
#1 Best Overall
- Compatible with TPM-M R2.0
- Chipset: Infineon SLB9665
- PIN DEFINE:14Pin
- Interface:LPC
- Please check the Pinout of mainboard at the official website and make sure it compatible with the pinout of TPM module before purchasing, thank you.
- protecting cryptographic keys;
- measured boot and device-health attestation;
- Windows Hello;
- BitLocker and device encryption key protection; and
- other security operations that need tamper-resistant storage.
It is not a second general-purpose CPU and does not render frames. Turning it on does not inherently alter your GPU workload, game graphics settings, refresh rate, or normal game loop. Microsoft describes TPM 2.0 as a security component rather than a performance processor; the practical conclusion is that TPM enablement alone should not produce a general FPS penalty. Microsoft’s TPM guidance explains the supported security functions and the distinction between firmware and discrete TPM implementations.
What Secure Boot does
Secure Boot is a UEFI feature that checks whether firmware drivers and other early boot components have trusted signatures. The firmware verifies the boot chain, then Windows continues with protections including Trusted Boot. Most of this work happens before the operating system and game have started.
That timing matters: the repeated CPU and GPU work involved in rendering frames, processing input, running game logic, and presenting images is not the same work Secure Boot performs during startup. Secure Boot can add verification activity to the boot path, and firmware implementations differ, but it is not documented as a persistent gaming workload that should materially reduce FPS. See Microsoft’s Secure Boot documentation for the boot-chain role and verification process.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteDoes TPM or Secure Boot affect Windows performance?
For normal Windows use, the direct effect after startup should be negligible. Secure Boot performs its main checks while the machine is booting. TPM operations occur when Windows or an application requests a security service, such as accessing a protected key or performing an attestation operation. Neither setting is intended to consume a constant share of your gaming CPU or GPU resources.
“Negligible” is more accurate than “literally zero.” Motherboard firmware, drivers, storage configuration, and the security features that use TPM can vary. More importantly, changing the settings may involve a larger configuration change—such as switching from Legacy/CSM boot to native UEFI. That change can affect whether Windows starts, but it is not the same as Secure Boot reducing runtime performance.
What can be confused with TPM or Secure Boot?
BitLocker and Device Encryption
TPM frequently works with BitLocker or Windows Device Encryption. The TPM helps protect encryption keys and can help verify that the startup environment has not been altered. However, turning on TPM does not automatically mean that every disk is encrypted, and BitLocker is a separate Windows feature.
Rank #2
- TPM 2.0 module for Asus motherboard.
- TPM 2.0 module chip 2.0mm pitch, 2x7P, 14 pin security module
- LPC 14 Pin for AsusTPM chip is better compatible with DDR4 memory module of motherboard, built in support memory type higher than DDR3! Supported states may vary by motherboard specification.
- Note: Don't support laptops and motherboards prior to X99; Don't support DDR3 memory.
- Packing list:1x TPM 2.0 Module for ASUS
Microsoft characterizes BitLocker as typically having a small performance overhead—often in the single-digit percentage range relative to the storage operations being performed—and says Windows encryption is designed to run in the background with reduced resource aggressiveness. The effect is therefore more likely to appear during storage-heavy work such as installing a game, applying a large patch, extracting files, or loading on a storage-limited system than as a consistent reduction in rendered FPS. That is a workload-based expectation, not a universal benchmark result. Microsoft’s BitLocker documentation provides the relevant qualification.
Free tools Windows power users keep installed
One-click scans. No signup required.
VBS and Memory Integrity/HVCI
Virtualization-Based Security and Memory Integrity—also called Hypervisor-Protected Code Integrity or HVCI—are separate Windows protections. They can be used alongside TPM 2.0 and Secure Boot, which is why users sometimes attribute their performance effects to those settings.
Microsoft specifically warns that older processors can experience a larger performance impact from HVCI because they must emulate hardware capabilities that newer processors handle more efficiently. The size of any gaming impact depends on the processor, drivers, Windows configuration, and workload; Microsoft does not provide one universal FPS percentage. The careful conclusion is:
- TPM 2.0 and Secure Boot: normally no meaningful direct FPS cost.
- VBS/HVCI: may have a measurable performance effect on some systems, especially older hardware.
- BitLocker: can affect storage operations, but is not equivalent to a guaranteed in-game FPS loss.
For the technical distinction, consult Microsoft’s VBS and HVCI guidance.
Why some games require TPM 2.0 or Secure Boot
Security settings can matter to gaming without making a game run faster. Some anti-cheat systems require the computer to provide a trusted boot and platform-security state. If the requirement is not met, the result may be a launch refusal, an anti-cheat error, or a restriction—not a predictable FPS change.
For example, Riot describes Secure Boot as a way to verify the Windows bootloader and TPM 2.0 as a hardware-backed identity and attestation component for Vanguard-related checks. Riot’s current Vanguard On-Demand documentation also lists UEFI/Secure Boot, TPM 2.0, VBS/HVCI, and IOMMU for the stated Windows 11 25H2 mode. These requirements apply to the configurations and Riot titles covered by Riot’s documentation; they should not be generalized to every PC game. Read Riot’s Vanguard On-Demand requirements.
Rank #3
- TPM 2.0 module for ASROCK motherboard.
- TPM 2.0 module chip 2.0mm pitch, 2x9P, 18 pin security module for ASROCK
- LPC 18 Pin for TPM chip is better compatible with DDR4 memory module of motherboard, built in support memory type higher than DDR3! Supported states may vary by motherboard specification.
- Note: Don't support laptops and motherboards prior to X99; Don't support DDR3 memory.
- Packing list:1x TPM 2.0 Module for ASROCK
Activision likewise documents TPM 2.0 and Secure Boot as requirements for particular Call of Duty configurations and explains that they help verify system integrity from startup through gameplay. Again, the practical effect is compatibility—launching or not launching—not a graphics-performance boost. Check Activision’s current support information for the specific Call of Duty configuration involved.
Requirements can change with the game, anti-cheat version, Windows release, and date. Always use the publisher’s current support page for the title that is failing rather than assuming every game needs both settings.
Should you enable them?
In most cases, yes—if your hardware and Windows installation support them, and especially if Windows 11, an organizational security policy, or a game’s anti-cheat system requires them. Windows 11 requires TPM 2.0 by default, while Microsoft’s system-requirements wording distinguishes being Secure Boot capable from having Secure Boot actively enabled. A device can meet the capability requirement while the setting remains off, although a particular security feature or game may require it to be enabled. Microsoft’s Windows 11 requirements page explains that distinction.
Do not disable TPM or Secure Boot as an FPS optimization. If disabling one appears to improve performance, test the other variables that changed at the same time before treating the setting as the cause.
Check your current status in Windows
Check TPM 2.0
- Press
Win + R. - Enter
tpm.mscand press Enter. - Look for The TPM is ready for use.
- Check Specification Version; it should show 2.0.
A motherboard TPM header by itself is not proof that a usable TPM is installed. Many systems already provide a firmware TPM, labeled something like AMD fTPM or Intel Platform Trust Technology (PTT) in firmware. If your exact motherboard supports an add-on, a TPM 2.0 module may be appropriate, but compatibility is motherboard-, header-, firmware-, and sometimes revision-specific. Do not buy a generic module without checking the motherboard manual and vendor compatibility list.
Check Secure Boot and boot mode
- Press
Win + R. - Enter
msinfo32and press Enter. - In System Summary, find Secure Boot State.
- Also check BIOS Mode. Native UEFI is the expected mode for Secure Boot; Legacy indicates that the system may still be using the older boot path.
The exact firmware labels vary. Common locations include a UEFI security, boot, or Windows configuration menu. Consult the motherboard or OEM manual before changing settings.
Rank #4
- Compatible with ASUS motherboards with 20-1 pin TPM header; Please check your motherboard manual to confirm the presence of a 20-1pin TPM header before purchasing. Not compatible with ASUS X570-P or other models with other TPM header
- TPM 2.0 module 2.54mm pitch, 2x10P, 20-1 pin security module
- LPC 20-1Pin for AsusTPM chip is better compatible with DDR4 memory module of motherboard, built in support memory type higher than DDR3! Supported states may vary by motherboard specification.
- Note: Don't support laptops and motherboards prior to X99; Don't support DDR3 memory.If you are unsure whether your motherboard is compatible with our TPM module, please verify with us before making a purchase. Thank you.
- Packing list:1x TPM 2.0 Module for ASUS (Doesn't fit the connector on a ASUS Prime X570-P motherboard)
Important warning: do not switch Legacy/CSM to UEFI casually
On an existing Windows installation, changing firmware mode from Legacy/CSM to UEFI can make Windows fail to boot if the disk layout and boot files are not prepared for the change. Microsoft identifies this as a configuration risk and discusses preparation, including the possible use of the MBR2GPT tool. Back up important files, make sure you have a recovery route, and follow the instructions for your exact PC or motherboard before changing boot mode. A Windows recovery USB is optional preparation for boot troubleshooting; it does not improve FPS and does not make an incompatible TPM or Secure Boot configuration compatible.
Recommended Free Tools
If the system stops booting after a firmware change, return to the previous firmware mode only if you know which setting was changed and it is safe to do so, or use the manufacturer’s recovery procedure. Do not clear the TPM merely as a first troubleshooting step: clearing it can remove or invalidate protected keys and may affect BitLocker, Windows Hello, and other security features. Microsoft’s TPM recommendations cover the broader preparation and configuration concerns.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How to investigate a performance change properly
If FPS or frame-time consistency changes after enabling security features, isolate the variables instead of comparing two loosely configured system states.
- Record a baseline. Use the same game, scene, resolution, graphics settings, frame cap, power plan, and driver version. Record average FPS and, preferably, 1% low or frame-time data.
- Change one setting at a time. Test TPM and Secure Boot separately where practical. Do not simultaneously update the BIOS, enable BitLocker, turn on Memory Integrity, and install a new GPU driver.
- Check background work. If encryption has just started, compare performance after the disk-intensive background operation has finished.
- Check VBS/HVCI separately. Look at Windows Security’s Device Security area and determine whether VBS or Memory Integrity changed. Treat this as a separate security-versus-performance decision, particularly on older hardware.
- Check firmware and drivers. A BIOS update can change power, memory, virtualization, fan, or boost behavior independently of Secure Boot. For a driver issue, use the GPU and system manufacturer’s official driver sources first.
- Identify the symptom. A lower benchmark score, longer boot time, stutter during patching, and a game refusing to launch are different problems and should not be attributed to the same setting.
If only one game fails after the change, start with that publisher’s anti-cheat documentation. If every game has lower frame rates, investigate drivers, temperatures, clocks, power limits, background processes, VBS/HVCI, and BIOS configuration rather than assuming TPM is consuming rendering resources.
A current Secure Boot maintenance note
Microsoft is updating older Secure Boot certificates because some certificates issued in 2011 begin expiring in June 2026. Supported Windows devices may continue to boot and receive ordinary updates, but Microsoft says devices that have not received the relevant certificate remediation may not receive future Secure Boot protections for early-boot components. This is a security-maintenance issue, not evidence that Secure Boot reduces gaming performance. Check Microsoft’s Secure Boot certificate update guidance for applicability and instructions.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Bottom line
TPM 2.0 and Secure Boot are security and boot-integrity features, not FPS settings. Their direct runtime performance cost should normally be negligible, while their practical gaming impact may be significant when an anti-cheat system requires them for a game to launch. If you experience a real performance regression, investigate BitLocker, VBS/HVCI, firmware, drivers, and configuration changes separately. Disable TPM or Secure Boot only for a specific, understood compatibility reason—not as a general gaming-performance tweak.
Best Value
- TPM modules are suitable for GIGABYTE for Windows 11 motherboards.
- Some motherboards require a TPM module inserted or an update to the latest BIOS to enable the TPM option.
- 12Pin Remote Card Encryption Security Module Is Easy To Use, No Complicated Procedures Are Required, And It Can Be Used Immediately After Installation.
- Interface: LPC
- Packing list:1x TPM 2.0 Module for GIGABYTE
Frequently Asked Questions
Does enabling TPM 2.0 lower FPS?
No. TPM 2.0 is a security processor for protected keys, measurements, and attestation; it does not render frames or run the game’s main loop. A performance change should prompt investigation of other configuration changes.
Does Secure Boot reduce gaming performance?
Normally no. Secure Boot performs its main signature checks before Windows starts. It may affect boot configuration or game compatibility, but it is not expected to impose a persistent in-game rendering workload.
Why does a game require TPM 2.0 and Secure Boot?
Some anti-cheat systems require TPM 2.0, Secure Boot, or both. In that situation the settings can determine whether a game launches, but they do not provide an FPS boost. Requirements vary by title, Windows version, and anti-cheat configuration.
Are BitLocker, VBS, and Memory Integrity the same as TPM or Secure Boot?
They can be related but are not the same feature. TPM may protect BitLocker keys, while VBS and Memory Integrity/HVCI are separate Windows protections. HVCI can have a measurable effect on some older systems, so test it separately from TPM and Secure Boot.
The Bottom Line
TPM 2.0 and Secure Boot should not meaningfully change FPS. Enable them when Windows or a specific game’s anti-cheat requires them. If performance changes, investigate BitLocker, VBS/HVCI, BIOS and driver changes separately; if a game will not launch, treat that as a security-requirement or compatibility issue rather than an FPS problem.
