Enable TPM (Trusted Platform Module) on Windows PC, In order to install Windows 11, TPM 2.0 (Trusted Platform Module) needs to be available on your computer. In some cases, you may find that you need to manually enable TPM2.0 by going to the BIOS/UEFI settings.
Enable TPM (Trusted Platform Module) on Windows PC
The Trusted Platform Module or TPM is basically a security chip that can use an integrated encryption key to implement hardware-based security functions on a computer.
In addition to certain minimum hardware requirements, Microsoft also requires Windows 11 computers to be equipped with TPM 2.0 to support enhanced security features such as Windows Hello (face recognition, fingerprint, and iris login), integrated BitLocker for data protection, etc.
If your computer was purchased within the past 5 years, it should be equipped with a Trusted Platform Module (TPM) and be able to upgrade to Windows 11.
To check whether your computer is ready for Windows 11, go to Settings > Update & Security > Windows Security > Select Device Security in the left pane. In the right pane, click on the Security Processor Details link. On the next screen, make sure that the Specification Version is 2.0.
Note: If the security processor is not listed, you need to manually enable the TPM on your computer (see the steps provided below).
If the TPM specification version is 2.0, your computer is ready for Windows 11. If it is lower than 2.0, your computer is not eligible for Windows 11.
Use UEFI settings to enable TPM
In some cases, the computer is equipped with a TPM security chip, but it will not be displayed on the device security screen. This can be solved by enabling TPM in the BIOS/UEFI settings.
Go to Settings > Update & Security > Select Recovery in the left pane. In the right-pane, scroll down and click on Restart now button, located under the “Advanced Startup” section.
From the next screen, navigate to Troubleshoot > Advanced options > UEFI Firmware Settings. On the next screen, click on Restart to proceed to the UEFI settings screen.
On the next screen, locate the TPM Settings option and toggle the TPM Device Status to the ON position. Make sure you save the revised TPM Settings and log out from UEFI.
Note: On the UEFI settings screen, TPM settings may be under Advanced Security, Trusted Computing, Intel Software Guard, or other headings.
In addition, the option to enable TPM can be named Intel Platform Trust Technology, Intel PTT, Intel SGX Enable, Security Device or Security Device Support, AMD TPM, or AMD PSP TPM.
Verify TPM in Device Manager
After enabling TPM in UEFI, you need to make sure that the system has detected TPM 2.0.
Right-click on the Start button and select Device Manager. On the Device Manager screen, expand the Security Devices entry and see if Trusted Platform Module 2.0. is listed.
If Trusted Platform Module 2.0 is not listed or if you see a yellow triangle next to it, right-click on Trusted Platform Module 2.0 and click on the Update Driver option.
On the next screen, click the Automatically search for the updated driver version option, and then follow the on-screen instructions to install the updated driver software on your computer.
Cannot install Windows 11
If you cannot install Windows 11, even after enabling TPM 2.0, the problem may be due to the processor or some hardware components on your computer that is not compatible with Windows 11.
The easiest way to confirm this is to download the PC Health Check application from Microsoft.
Open the downloaded App and click on Check Now. On the next screen, you will see whether or not your PC meets Windows 11 requirements.
If the processor or any other hardware components on your computer do not meet the Windows 11 requirements, you will not install Windows 11.
In this case, you can choose to buy a new Windows 11 compatible computer or continue to use Windows 10. As shown in the picture above, you will continue to get Windows 10 updates.