Free tools Windows power users keep installed
One-click scans. No signup required.
Update Windows first, then install the TPM firmware package made for your exact PC or security-processor model. Do not clear the TPM unless the firmware instructions or a specific troubleshooting procedure requires it. Before changing TPM state, save your BitLocker recovery information and confirm how you will sign in after the restart. A clear resets the TPM, removes TPM-held keys, and can require a new Windows Hello PIN.
What a TPM firmware update changes
The Trusted Platform Module (TPM), also called the security processor, is a hardware-backed component that protects encryption keys, sign-in credentials and other security material. Firmware is the low-level code that operates that component. A firmware update replaces that code; it is not the same operation as clearing the TPM.
As an Amazon Associate I earn from qualifying purchases.
Clearing the TPM returns it to an unowned, factory-default state. The clear deletes keys created and stored by the TPM. Any data or credentials protected only by those keys may become unusable. Microsoft specifically identifies virtual smart cards and Windows sign-in PIN credentials as examples. A clear can also remove the state Windows Hello uses for PIN and biometric sign-in, so you should expect to set up your PIN again.
Recommended Free Tools
Clearing does not format a drive or intentionally delete ordinary documents, game installations or save files. It can, however, make an encrypted drive or protected credential inaccessible if its recovery key is unavailable. That is why a clear is a controlled maintenance step, not a routine part of every firmware update.
#1 Best Overall
- 【Quality materials and easy installation】TPM 2.0 Security Module is made of high quality material and is well made for long life.It is easy to install, lightweight and compact, and its easy integration makes it a breeze to install and operate quickly.
- 【Working environment】The TPM2.0 Security Module is compatible with GC-TPM2.0_S. Interface: LPC, TPM IC: SLB9665, Pin Connector: 12Pin.Please check compatibility before purchasing.
- 【Reliable Work】The TPM 2.0 Module is a highly reliable cryptographic processor that brings an extra layer of security to your Windows computer. With its advanced encryption technology, you can perform secure operations such as generating, storing, and restricting the use of cryptographic keys, ensuring that your system is protected from unauthorized access.
- 【High-quality replacement】high-quality professional use, the function is the same as the original model, stable performance, a good replacement of the original damaged old safety module.
- 【Model Support】Each security module is tested before it leaves the factory and is 100% perfectly works well.Therefore, Please confirm that your motherboard supports TPM2.0 technology.
Before you start: a safe preparation checklist
- Identify the exact computer model. TPM firmware is model-specific. Record the manufacturer, full model designation and, where the support page asks for it, the serial number or product family.
- Install Windows updates first. Microsoft warns: “Do not apply the TPM firmware update before you apply the Windows operating system update. Doing so will make it impossible to determine whether your system is affected.” Restart until Windows Update reports that no required restart remains.
- Locate your BitLocker recovery key. It may be stored in Microsoft Entra ID, Active Directory Domain Services (AD DS), a Microsoft Account, a USB drive or a paper copy. Test that you can reach the location before beginning.
- Back up important data. Keep a current copy of files and game saves that are not already synchronized. A backup does not replace a BitLocker recovery key, but it limits the damage if protected storage cannot be unlocked.
- Check ownership. On a work or school computer, do not clear the TPM without instructions from the organization’s IT administrator. Management policies can control firmware, BitLocker and Windows Hello behavior.
- Choose one TPM and keep using it. Switching between multiple TPMs can trigger BitLocker recovery. Microsoft recommends selecting one TPM rather than changing back and forth.
Choose the correct firmware path
Use the support instructions for the device manufacturer or the TPM manufacturer. Microsoft’s guidance points users to Surface instructions and manufacturer support destinations that include Infineon, Fujitsu, HP, HPE, Lenovo, Panasonic and Toshiba. Download only a package that explicitly matches your model and Windows edition. A package for a similar-looking computer can fail, or worse, leave the machine in an unsupported state.
| Situation | Recommended path | BitLocker consideration |
|---|---|---|
| Windows-delivered or OEM package that uses the Windows TPM interface | Install Windows updates, then run the manufacturer’s supported updater and follow its restart prompts. | Follow the package instructions; do not clear the TPM unless the instructions require it. |
| Non-Microsoft package that clears or reconfigures the TPM outside the Windows API | Use the manufacturer’s documented procedure for that exact model. | Suspend BitLocker before the operation when the instructions call for it; otherwise a restart can enter BitLocker recovery. |
| Work or school computer | Use the organization’s deployment or IT procedure. | Obtain administrator guidance and the organization-held recovery key before changing TPM state. |
The important distinction is not the file name or download location. It is whether the updater uses Windows’ supported TPM interface or performs a clear outside that interface. That difference determines how BitLocker protection must be handled.
Step-by-step: update TPM firmware
1. Finish Windows servicing first
- Open Settings > Windows Update.
- Install all offered updates and restart when Windows requests it.
- Return to Windows Update and check again. Continue until the operating system is current and no pending restart is shown.
Microsoft’s warning about ordering is decisive: applying firmware first prevents Windows from determining whether the computer is affected by the issue the update addresses.
2. Download the model-specific updater
- Open the support site for your PC or TPM manufacturer.
- Search by the exact model, not just the product family or processor name.
- Read the release notes for prerequisites, supported Windows versions, power requirements and whether the process clears the TPM.
- Save the installer locally and close applications that could interrupt a restart.
If the manufacturer provides more than one package, use the one identified for your firmware branch and operating-system edition. Do not substitute a generic TPM utility for the manufacturer’s procedure.
Rank #2
- 【Wide Compatibility – Gigabyte & ASUS】 Specifically designed for Gigabyte and ASUS desktop motherboards with a 20-1 pin (2x10 / GA 20-1) 2.54mm pitch LPC TPM header. Ideal for upgrading to TPM 2.0 on DDR4 systems. (Note: NOT compatible with 12-pin, 2x6, or 14-pin headers).
- 【Windows 11 Readiness】 An essential hardware upgrade to meet Windows 11 security requirements. Ensure your system stays secure and up-to-date with a dedicated hardware TPM 2.0 module without replacing your entire motherboard or CPU.
- 【Advanced Security & Encryption】 Powered by the standalone Infineon SLB9665 encryption processor. This module securely stores cryptographic keys for software like Windows BitLocker, providing a robust layer of hardware-based security for your data.
- 【Platform Limits – No Laptops】 Optimized for Desktop motherboards from the DDR4 era (X99 series and newer). Not compatible with laptops or legacy DDR3 systems. Please verify your motherboard's header layout (2x10 pins) before ordering.
- 【Easy Setup & BIOS Note】 Simple plug-and-play installation takes only minutes with no tools required. IMPORTANT: After installation, you MUST enable "Security Device Support" or "Intel PTT / AMD fTPM" in your BIOS settings for Windows to recognize the module.
3. Protect BitLocker before a non-Microsoft clear
For a package that explicitly clears the TPM outside the Windows API, suspend BitLocker before running it. The exact control may be in the manufacturer’s instructions or your organization’s management console. Keep the recovery key available even when protection is suspended; firmware changes and restarts can still prompt for recovery.
For an updater that uses Windows’ supported interface and does not instruct you to suspend protection, follow its documented process instead of applying a blanket clear or suspension. The firmware path determines the correct BitLocker action.
4. Run the updater and complete every restart
- Run the downloaded package with the administrator approval it requests.
- Read each confirmation carefully. If it says the TPM will be cleared, stop and verify that your recovery key and backups are ready.
- Keep the computer connected to reliable power. Do not force it off while firmware is being written.
- Allow every automatic restart to finish. If BitLocker asks for its recovery key, enter the saved key rather than repeatedly rebooting.
- After Windows returns, open the updater’s result or support utility and confirm that it reports completion.
Should you clear the TPM before or after the firmware update?
There is no universal “always clear before” or “always clear after” rule. Clear the TPM only when the update instructions or a defined troubleshooting procedure requires it. A proactive clear adds risk without proving that the firmware update needs one.
If the package performs a clear outside Windows’ TPM API, its instructions normally place BitLocker suspension before the package runs. If Windows Security or another Microsoft-supported workflow asks you to clear the TPM, use that workflow and restart when prompted. Do not improvise a different order.
Rank #3
- TPM 2.0 module for Asus motherboard.
- TPM 2.0 module chip 2.0mm pitch, 2x7P, 14 pin security module
- LPC 14 Pin for AsusTPM chip is better compatible with DDR4 memory module of motherboard, built in support memory type higher than DDR3! Supported states may vary by motherboard specification.
- Note: Don't support laptops and motherboards prior to X99; Don't support DDR3 memory.
- Packing list:1x TPM 2.0 Module for ASUS
When an installer says nothing about clearing, do not clear simply because you are updating firmware. Keep the existing TPM ownership and credentials intact, then verify the update. This preserves Windows Hello and reduces the chance of a recovery prompt.
How to clear the TPM through Windows
Use Windows functionality rather than clearing directly in UEFI. Microsoft Learn recommends the Windows path, and Microsoft Support documents the following location:
- Sign in with an account that has administrative permission.
- Open Windows Security.
- Select Device security.
- Open Security processor details.
- Select Security processor troubleshooting.
- Choose Clear TPM, confirm the warning and restart when Windows requests it.
Windows may require a physical-presence confirmation during the restart. This is a deliberate safeguard for TPM administrative commands. Do not interrupt the restart or power off the computer while the clear is in progress.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →The legacy management console is another Windows-supported route for viewing and administering the TPM: press Win+R, enter tpm.msc, and follow the available action for clearing the TPM. If the console reports that the operation is unavailable, use the Windows Security path or the manufacturer’s documented procedure. Avoid replacing either with a direct UEFI clear unless the device documentation explicitly requires that route.
Rank #4
- TPM 2.0 module for ASROCK motherboard.
- TPM 2.0 module chip 2.0mm pitch, 2x9P, 18 pin security module for ASROCK
- LPC 18 Pin for TPM chip is better compatible with DDR4 memory module of motherboard, built in support memory type higher than DDR3! Supported states may vary by motherboard specification.
- Note: Don't support laptops and motherboards prior to X99; Don't support DDR3 memory.
- Packing list:1x TPM 2.0 Module for ASROCK
What happens after a clear
BitLocker recovery
A TPM state change can make BitLocker challenge you for its recovery key at the next boot. Retrieve the key from Microsoft Entra ID, AD DS, your Microsoft Account, the prepared USB drive or the paper copy you located before starting. Enter the complete recovery key exactly as stored.
If the key is held by an employer or school, contact that organization’s IT desk. Do not keep guessing keys; the wrong key will not unlock the volume and repeated restarts do not repair the TPM.
Windows Hello
Microsoft says a clear disables the existing Windows Hello PIN and biometric sign-in state. At the Windows sign-in screen, choose the available password or recovery method, sign in, then reset the PIN through Settings > Accounts > Sign-in options. Enrolled biometrics may also need to be configured again.
TPM-protected credentials
Virtual smart cards and other keys created by the TPM are removed by a clear. If an application, certificate or enterprise sign-in depends on one of those keys, follow its re-enrollment procedure after the machine is back in Windows. A normal file backup cannot recreate a deleted TPM key.
Best Value
- Independent TPM Processor: The remote card encryption security module uses an independent TPM encryption processor, which is a daughter board connected to the main board.
- High Security: The TPM securely stores an encryption key that can be created using encryption software, without which the content on the user's PC remains encrypted and protected from unauthorized access.
- PC Architecture: TPM module system components adopts a standard PC architecture and reserves a certain amount of memory for the system, so the actual memory size will be smaller than the specified amount.
- Scope of Application: TPM modules are suitable for GIGABYTE for 11 motherboards. Some motherboards require a TPM module inserted or an update to the latest BIOS to enable the TPM option.
- Easy to Use: 12Pin remote card encryption security module is easy to use, no complicated procedures are required, and it can be used immediately after installation.
Fix clear TPM error 0x80290300
Microsoft identifies disabled BIOS controls as the likely cause of error 0x80290300. Firmware menus may call the controls RESET of TPM from OS or OS Management of TPM.
- Restart the computer and enter its BIOS or UEFI setup using the key shown on screen by the manufacturer.
- Open the Security, TPM or TPM Embedded Security page.
- Enable RESET of TPM from OS, OS Management of TPM, or the equivalent wording documented for your model.
- Save the firmware settings and boot back into Windows.
- Retry Windows Security > Device security > Security processor details > Security processor troubleshooting > Clear TPM.
Manufacturers can require physical presence to authorize TPM administrative commands. If the computer asks you to confirm at the keyboard during reboot, do so. Menu names and locations vary; do not change unrelated security settings while looking for the two TPM-management options.
If those options are absent, locked or controlled by policy, stop and use the manufacturer’s support instructions or your organization’s IT process. Repeatedly forcing a clear through unsupported tools can create additional BitLocker and sign-in problems.
Post-update verification
- Confirm the updater reports a successful firmware installation and that Windows no longer offers the same firmware package.
- Open Windows Security and review Device security > Security processor details for a healthy status.
- Restart once more if the manufacturer requires it, then verify that BitLocker unlocks normally or that you can supply the recovery key.
- Test your intended sign-in method. After a clear, complete Windows Hello PIN and biometric setup again rather than assuming the old credentials survived.
- For a managed device, allow the organization’s management service to finish compliance checks before returning the computer to normal use.
Practical decision guide for a gaming PC
If you are maintaining a personal gaming computer, schedule the update when you can tolerate several restarts and have access to your recovery information. The firmware operation itself is a security-maintenance task; the disruptive part is a possible BitLocker challenge or the loss of TPM-backed sign-in credentials after a clear. Preserve those recovery paths first, then use the exact OEM procedure.
If the computer belongs to a school, esports venue, studio or other organization, treat the TPM as managed infrastructure. Ask the administrator whether BitLocker protection should be suspended, which recovery key source is authoritative and whether Windows Hello or certificate credentials must be re-enrolled. Do not clear the TPM merely to remove an unfamiliar warning.
The safest sequence is therefore consistent: update Windows, identify the exact firmware package, prepare BitLocker recovery, clear only when required, use Windows-supported clearing tools, and restore sign-in credentials after the restart.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
