Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix NowHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
VGSOURCES
Get listed

PC troubleshootingPATCH 2026.10.18

Enable TPM 2.0 for Windows 11: A Safe UEFI-to-Windows Walkthrough

By VGSources Team 12 min read

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

If Windows says TPM 2.0 is missing or not enabled, first check whether the security processor is already present. On many PCs the TPM is supported but disabled in UEFI firmware. Enable the setting for your exact computer, save the change, boot back into Windows, and confirm that the TPM reports Specification Version 2.0 and a ready status.

Firmware menus and startup controls vary by manufacturer and model, so there is no universal key or menu path. The procedure below uses Windows Recovery to reach UEFI, identifies the names you may see, and explains what each result means without asking you to change unrelated firmware options.

As an Amazon Associate I earn from qualifying purchases.

What TPM 2.0 does—and what the Windows message really means

A Trusted Platform Module (TPM) is a security processor used for functions such as protecting cryptographic keys and supporting Windows security features. Microsoft lists TPM 2.0 as a minimum requirement for Windows 11, describing it as “an important building block for security-related features.” A TPM specification version below 2.0 does not satisfy that requirement.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

An eligibility warning is not proof that the computer has no TPM. A TPM can be built into the system firmware and turned off in UEFI, or the operating system may be unable to detect it because of a firmware configuration problem. Conversely, some older computers genuinely lack a supported TPM 2.0 implementation. The checks in Windows tell you which situation you are dealing with before you change firmware.

#1 Best Overall
NewHail TPM2.0 Module LPC 14Pin Module with Infineon SLB9665 for ASUS Motherboard Compatible with TPM-M R2.0
  • Compatible with TPM-M R2.0
  • Chipset: Infineon SLB9665
  • PIN DEFINE:14Pin
  • Interface:LPC
  • Please check the Pinout of mainboard at the official website and make sure it compatible with the pinout of TPM module before purchasing, thank you.

Check the TPM from Windows before entering UEFI

Windows 11: use Windows Security

  1. Open Windows Security from the Start menu or Windows Search.
  2. Select Device security.
  3. Choose Security processor details.
  4. Read the TPM information, including Specification version and the readiness or status message.

If the Security processor area is present and the specification is 2.0, the TPM is already enabled at the required level. If the section is absent, or Windows reports that a compatible TPM cannot be found, the firmware TPM may simply be disabled. Do not conclude that the hardware is absent until you check the computer maker’s specifications for the exact model.

Windows 10: use the same security-processor page

On Windows 10, open Settings > Update & Security > Windows Security > Device security, then open Security processor details. The labels can differ slightly after feature updates, but the information you need is the same: whether Windows sees a security processor and which specification version it reports.

Use the TPM Management console for a second view

  1. Press Windows key + R.
  2. Type tpm.msc and press Enter.
  3. Read the status at the top of the console and expand TPM Manufacturer Information.
  4. Record Specification Version and whether the TPM is ready for use.

A message such as “Compatible TPM cannot be found” can result from a disabled UEFI setting, not only from missing hardware. The console’s manufacturer and version fields are useful after you enable the setting because they provide a direct confirmation that Windows is using the expected TPM.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Open your PC’s UEFI firmware from Windows

Save open documents and close applications before restarting. You will leave Windows temporarily, and a firmware restart should not be interrupted by unsaved work.

  1. In Windows 11, open Settings > System > Recovery.
  2. Under Advanced startup, select Restart now. Confirm the restart if Windows asks.
  3. When the blue Windows Recovery Environment screen appears, choose Troubleshoot.
  4. Select Advanced options.
  5. Choose UEFI Firmware Settings, then select Restart.

Windows 10 uses Settings > Update & Security > Recovery for the first part of this route. Select Restart now under Advanced startup, then use the same Troubleshoot > Advanced options > UEFI Firmware Settings > Restart choices.

If UEFI Firmware Settings is not listed, the universal Windows route may not apply to that computer. The manufacturer’s support instructions may specify a model-specific restart method or a startup key. Do not guess at a key sequence or alter boot settings simply to reach the TPM menu.

Rank #2
Sale
ASRock TPM2-S TPM Module Motherboard (V2.0)
  • Nuvoton NPCT650
  • TCG PC Client Platform TPM Profile (PTP) Specification; Family 2.0 (Trusted Platform Module Library; Family 2.0)
  • TCG PC Client Specific TPM Interface Specification (TIS), Version 1.3 (TPM Main Specification; Family 1.2 Revision 116)
  • Low Standby Power Consumption

Find the TPM control in UEFI

UEFI interfaces are designed by the PC or motherboard manufacturer. Look first in menus named Advanced, Security, or Trusted Computing. Some firmware has a search function; if yours does, search for “TPM,” “security device,” or “trusted.”

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Label you may see Where it commonly appears What to do
Security Device Security or Trusted Computing Enable the security-device option if it is currently disabled.
Security Device Support Security or Advanced Set support to Enabled, then leave unrelated security settings unchanged.
TPM State Security, Advanced, or Trusted Computing Enable the TPM state; do not use a clear or reset command unless the manufacturer explicitly directs it.
AMD fTPM switch Advanced CPU or firmware-security menus on systems with AMD processors Choose the firmware TPM option supported by that model.
AMD PSP fTPM Advanced or Trusted Computing on some AMD systems Enable PSP firmware TPM when documented for the computer.
Intel PTT Security, Advanced, or Trusted Computing on systems with Intel processors Enable Intel Platform Trust Technology if that is the documented TPM control.
Intel Platform Trust Technology Security or firmware-security menus Set the platform-trust option to Enabled.

These names are examples, not a universal menu. A manufacturer may use a different label, place the setting under a sub-menu, or expose only one firmware-TPM choice. Select the option documented for the exact model and processor platform. If you cannot identify it confidently, stop and use the manufacturer’s support documentation rather than changing several settings to see what happens.

Enable only the supported TPM option

Change the setting

  1. Open the menu containing the documented TPM or security-device control.
  2. Change that one control from Disabled to Enabled (or select the firmware TPM option specified by the manufacturer).
  3. Review the screen for a separate confirmation. Some interfaces show an Apply, Confirm, or Accept command before the change is staged.

Do not change boot mode, Secure Boot, CPU virtualization, storage-controller mode, password settings, or other firmware options as part of this procedure. Microsoft’s UEFI guidance recommends changing only what is necessary. A TPM toggle should not require a collection of unrelated changes.

Save and restart

  1. Use the firmware’s own Save Changes and Exit, Save & Exit, or equivalent command.
  2. Confirm that you want to save the change when prompted.
  3. Allow the computer to restart into Windows. If the firmware offers both a discard and a save choice, select the save option.

The exact key used to save varies by interface, so follow the on-screen legend instead of assuming that a particular function key applies. If you accidentally leave without saving, repeat the UEFI route and make the change again.

Verify that Windows now sees TPM 2.0

  1. Open Windows Security > Device security > Security processor details.
  2. Confirm that a security processor is listed and that Specification version is 2.0.
  3. Check that the status says the TPM is ready or otherwise reports no initialization error.
  4. For an independent check, run tpm.msc and confirm the same specification version under TPM Manufacturer Information.

If you are checking eligibility from Windows 10, Microsoft’s PC Health Check app can show the Windows 11 requirements result and identify which requirement is blocking an upgrade. TPM 2.0 is only one requirement; a ready TPM does not by itself guarantee that the PC passes every Windows 11 check.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Use the result to choose your next step

What you see after checking What it means Next action
Security processor present; Specification Version 2.0; ready status The TPM is enabled at the specification level Windows 11 requires. Run the broader Windows 11 compatibility check if the upgrade is still blocked. Investigate the other reported requirement rather than changing the TPM again.
Security processor present; specification below 2.0 The detected TPM does not meet Microsoft’s Windows 11 TPM requirement. Check the exact model’s specifications and manufacturer guidance. A firmware toggle does not convert an older TPM specification into TPM 2.0.
No Security processor area or “Compatible TPM cannot be found” The TPM may still be disabled in UEFI, or the computer may lack supported TPM hardware. Verify the model’s specifications and repeat the manufacturer-specific UEFI instructions. Do not assume that purchasing a generic module will work; compatibility is model-specific and is not established by the Windows message.
No UEFI Firmware Settings choice or an unfamiliar firmware layout The Windows recovery path or labels do not match this computer. Use the PC or motherboard maker’s support page for that exact model. Do not guess at firmware changes.
TPM warning remains after enabling the setting Windows may still have a firmware-level detection or security-processor problem. Check whether the manufacturer lists a firmware update for the exact model and follow its installation instructions. Do not install an update intended for another model.

When the TPM is still missing after you enabled it

Confirm that the change was saved

Return to UEFI and check the same setting. If it has reverted to Disabled, the previous exit did not save the change or the firmware rejected it. Use the documented save command and restart again. Avoid repeatedly toggling different security options; that can make the original problem harder to diagnose.

Rank #3
NewHail TPM2.0 Module TPM SPI 12Pin Module with infineon SLB 9670 for MSI Motherboard Compatible with TPM2.0(MS-4462)
  • Compatible with:TPM2.0(MS-4462)
  • Chipset: INFINEON 9670 TPM 2.0
  • PIN DEFINE:12-1Pin
  • Interface:SPI
  • Supports:MSI Intel 400 Series and 500 Series Motherboards,MSI AMD B550 and A520 Series Motherboards,Windows 10 TPM 2.0

Check the model documentation

Search the manufacturer’s support material by the complete model name or service tag, not just by the processor family. Two computers with similar processors can expose different firmware controls. The documentation should identify whether the system supports a firmware TPM, the menu label used, and any required firmware version.

Consider a firmware update only when it is model-specific

Microsoft’s Windows Security troubleshooting guidance notes that firmware updates can resolve some security-processor issues and advises checking with the manufacturer for availability and installation instructions. That is not a recommendation to update blindly. Confirm the exact model, current firmware version, power requirements, recovery instructions, and whether the update addresses TPM detection before proceeding.

Stop when the hardware is not supported

If the manufacturer confirms that the computer has no TPM 2.0 implementation, or Windows consistently reports a specification below 2.0, enabling a menu option cannot satisfy the Windows 11 requirement. The appropriate conclusion is that this PC does not meet that particular requirement. Continue using the supported operating system or follow the manufacturer’s documented upgrade path; do not rely on an unverified firmware modification or a generic add-on.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Understand the status messages before taking further action

“Ready for use” indicates that Windows can communicate with the TPM. The specification version is a separate fact: a ready TPM at version 1.2 is still below Windows 11’s 2.0 requirement, while a version 2.0 TPM with an initialization or detection error needs troubleshooting. Record both values, along with the manufacturer information, when contacting support.

Do not use Clear TPM, Reset, or similar commands merely because the upgrade checker complained. Clearing can remove TPM-protected information and may affect security features. The normal fix for a disabled TPM is to enable the documented control, save it, and verify the result in Windows. A clear operation belongs only in a manufacturer- or Microsoft-directed recovery procedure where its consequences are understood.

When firmware presents more than one TPM-looking option

Some systems show a firmware TPM name such as AMD fTPM or Intel PTT, while others show a generic Security Device control. These are not interchangeable labels that should be enabled at random. Use the option identified for your exact computer and processor platform. If both a generic control and a platform-specific option are visible, consult the model manual before changing either one; the manual may describe one as the master switch and the other as an informational setting.

Rank #4
Sale
Yeiwenl TPM 2.0 Module with 14 Pin, TPM 2.0 Encryption Security Module for ASUS Motherboard Compatible with Win11
  • TPM 2.0 module for Asus motherboard.
  • TPM 2.0 module chip 2.0mm pitch, 2x7P, 14 pin security module
  • LPC 14 Pin for AsusTPM chip is better compatible with DDR4 memory module of motherboard, built in support memory type higher than DDR3! Supported states may vary by motherboard specification.
  • Note: Don't support laptops and motherboards prior to X99; Don't support DDR3 memory.
  • Packing list:1x TPM 2.0 Module for ASUS

There is no general performance or cost comparison that makes one label universally better. The relevant comparison is whether the setting is supported on that model and whether Windows subsequently reports Specification Version 2.0 and a ready status. If the manufacturer does not document an option, leave it unchanged.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Prepare useful details before contacting support

Support can diagnose the problem faster if you provide the complete computer or motherboard model, service tag where applicable, current UEFI version, Windows edition and version, and the exact wording shown in Windows Security or tpm.msc. Include whether the UEFI setting stayed enabled after a restart, the TPM manufacturer information, and the reported specification version. A photograph or transcription of the relevant firmware page can also help, but avoid sharing recovery keys or other confidential security data.

Use the maker’s official support page for firmware instructions. A firmware package for a similar-looking model can leave the computer unusable or fail to address TPM detection. If the support page does not list a TPM control, ask whether the model uses a firmware TPM, a discrete device, or no supported TPM 2.0 implementation before making any hardware purchase.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Common mistakes to avoid

  • Treating “not found” as proof of missing hardware: a disabled firmware TPM can produce the same Windows message.
  • Assuming every PC uses the same startup key: firmware entry methods and menu names differ by manufacturer and model.
  • Changing several UEFI settings at once: enable only the documented TPM or security-device control.
  • Confusing presence with compliance: a detected TPM with a specification below 2.0 does not meet the Windows 11 requirement.
  • Clearing or resetting the TPM unnecessarily: the task is to enable an existing security processor, not to erase it. Use a clear command only when the manufacturer or Microsoft explicitly instructs you and you understand the consequences.
  • Assuming TPM approval means full Windows 11 eligibility: PC Health Check can identify other requirements that still need attention.
  • Installing a random firmware update: only use a package identified for the exact model and follow its power and recovery instructions.
  • Buying a generic TPM module first: connector, firmware, and motherboard support are model-specific, and many PCs already provide TPM through firmware.

Why the exact model matters

Microsoft states that most PCs shipped in the last five years are capable of running TPM 2.0, but that is a broad statement, not a guarantee for every computer. Hardware revisions, firmware versions, regional configurations, and custom-built systems can differ. The reliable test is the combination of Windows’ reported specification version and the manufacturer’s documentation for the exact model.

That model-specific approach also explains why a generic TPM-module recommendation is unsafe. A module may use a different connector, firmware, or security design, and many systems already implement TPM functionality through Intel Platform Trust Technology or AMD firmware TPM. Only the manufacturer can establish whether an add-on is supported, required, and compatible.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

When to contact the manufacturer

Contact the PC or motherboard maker when the UEFI menu does not contain any documented TPM control, the firmware option is present but cannot be saved, Windows continues to report no compatible TPM after a successful save, or a firmware update appears necessary. Provide the exact model, current firmware version, Windows edition and version, the wording of the Windows Security or tpm.msc message, and the TPM specification version if one is shown. This gives support enough information to distinguish a disabled setting from unsupported hardware or a firmware defect.

Best Value
Asus TPM-SPI Trusted Platform Module (TPM)
  • Product Color: Black
  • Width: 0.6"
  • Depth: 0.5"
  • Additional Information: Interface: SPI Features: TPM IC: Nuvoton NPCT750 TPM Version: TPM 2.0 Pin Dimension: 14-1pin System Requirements: Windows® 10, UEFI OS
  • Country of Origin: Vietnam

Frequently Asked Questions

Can I enable TPM 2.0 without entering UEFI?

Usually the control is in UEFI firmware, so Windows can verify the TPM but generally cannot turn a disabled firmware setting on. Use Settings > Recovery > Advanced startup > Restart now, then Troubleshoot > Advanced options > UEFI Firmware Settings. If that choice is missing, follow the exact model’s support instructions.

What if Windows says “Compatible TPM cannot be found”?

That message can mean the TPM is disabled in UEFI, not that the hardware is absent. Check the manufacturer’s specifications, enable the documented Security Device, fTPM, or Intel PTT option, save, restart, and check Windows again.

Is a TPM with Specification Version 1.2 good enough for Windows 11?

No. Microsoft’s Windows 11 requirement is TPM 2.0. A ready TPM reporting a lower specification does not become version 2.0 through an ordinary firmware toggle.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Should I enable both Intel PTT and a separate TPM option?

Do not enable options at random. Firmware labels and relationships differ by model. Use the manufacturer’s documentation to identify the supported control, then verify that Windows reports one ready TPM at Specification Version 2.0.

Will enabling TPM erase my files?

Enabling the documented TPM setting normally does not erase Windows files. Do not select Clear TPM or Reset unless Microsoft or the manufacturer specifically directs it and explains the consequences, because clearing can affect TPM-protected information.

Why is TPM 2.0 ready but Windows 11 still says my PC is incompatible?

TPM is only one Windows 11 requirement. Run Microsoft’s PC Health Check app to see whether another requirement is blocking the upgrade, rather than changing the TPM setting again.

What should I do if the TPM setting turns itself off after reboot?

Return to UEFI and confirm that you used the firmware’s Save Changes and Exit command. If it still reverts, check model-specific documentation and contact the manufacturer; a firmware update may be relevant, but use only one intended for the exact model.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Can I buy a generic TPM module to solve this?

Not safely without model-specific confirmation. Many computers already use Intel PTT or AMD fTPM, and add-on modules can differ in connector and firmware. Ask the PC or motherboard maker whether a compatible TPM 2.0 device is supported and required.

The Bottom Line

Check Windows first, enable only the TPM control documented for your exact PC, save the UEFI change, and verify both a ready status and Specification Version 2.0 in Windows Security or tpm.msc. If the option is missing, the version is below 2.0, or detection still fails, use the manufacturer’s model-specific guidance instead of guessing or buying an unverified module.

Quick Recap

Bestseller No. 1
NewHail TPM2.0 Module LPC 14Pin Module with Infineon SLB9665 for ASUS Motherboard Compatible with TPM-M R2.0
NewHail TPM2.0 Module LPC 14Pin Module with Infineon SLB9665 for ASUS Motherboard Compatible with TPM-M R2.0
Compatible with TPM-M R2.0; Chipset: Infineon SLB9665; PIN DEFINE:14Pin; Interface:LPC
$24.99
SaleBestseller No. 2
ASRock TPM2-S TPM Module Motherboard (V2.0)
ASRock TPM2-S TPM Module Motherboard (V2.0)
Nuvoton NPCT650; Low Standby Power Consumption
$24.99
Bestseller No. 3
NewHail TPM2.0 Module TPM SPI 12Pin Module with infineon SLB 9670 for MSI Motherboard Compatible with TPM2.0(MS-4462)
NewHail TPM2.0 Module TPM SPI 12Pin Module with infineon SLB 9670 for MSI Motherboard Compatible with TPM2.0(MS-4462)
Compatible with:TPM2.0(MS-4462); Chipset: INFINEON 9670 TPM 2.0; PIN DEFINE:12-1Pin; Interface:SPI
$24.99
SaleBestseller No. 4
Yeiwenl TPM 2.0 Module with 14 Pin, TPM 2.0 Encryption Security Module for ASUS Motherboard Compatible with Win11
Yeiwenl TPM 2.0 Module with 14 Pin, TPM 2.0 Encryption Security Module for ASUS Motherboard Compatible with Win11
TPM 2.0 module for Asus motherboard.; TPM 2.0 module chip 2.0mm pitch, 2x7P, 14 pin security module
$23.74
Bestseller No. 5
Asus TPM-SPI Trusted Platform Module (TPM)
Asus TPM-SPI Trusted Platform Module (TPM)
Product Color: Black; Width: 0.6"; Depth: 0.5"; Country of Origin: Vietnam
$32.99

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

PC troubleshootingTPM 2.0UEFIWindows 11Windows Security

Leave a reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.