Quick Answer: What Is TPM 2.0 and How Do I Enable It?
TPM 2.0 (Trusted Platform Module 2.0) is a security chip built into your PC that protects sensitive data and is required for Windows 11. To enable TPM 2.0, restart your PC, enter BIOS/UEFI (usually by pressing F2, F10, or Del), navigate to Security settings, and change TPM status to “Enabled”. Most PCs sold in the UK since 2016 already have TPM 2.0 – you just need to activate it.
As more of our lives move online, ensuring your PC meets the latest security standards isn’t just for businesses anymore. If you’re looking to enable TPM 2.0 to meet Windows 11 requirements or improve system security, this step-by-step guide shows you exactly how – plus solutions for common problems Aussie users face.
What Is TPM 2.0?
Let’s start from the beginning: what exactly is TPM 2.0? TPM stands for “Trusted Platform Module”. It’s a cryptographic processor typically built into your PC’s hardware. The primary job of TPM is to protect sensitive data and contribute to your device’s overall security. TPM 2.0 is the successor to TPM 1.2 and represents the highest TPM standard for data security.
TPM Fundamentals
A Trusted Platform Module performs several crucial tasks to ensure the security of your sensitive information.
- Stores digital keys and signatures securely
- Enables secure system boots by working with Secure Boot
- Provides authentication via fingerprint, facial recognition, or PIN codes
- Protects sensitive data even in case of theft
TPM 1.2 vs TPM 2.0: Key Differences
A few years ago, TPM 2.0 replaced TPM 1.2 as the industry standard for cryptographic encryption. While both versions serve the same purpose – protecting sensitive data – TPM 2.0 is significantly more advanced. Key differences include new encryption algorithms and additional hierarchies for TPM control.
Hardware TPM vs Firmware TPM (fTPM / PTT)
Not all TPM is created equal. If you come across abbreviations like dTPM, fTPM, or PTT, here’s what they mean:
- Hardware TPM (dTPM): A dedicated chip on your motherboard
- Firmware TPM (fTPM): A software solution built into the processor chipset (AMD’s approach)
- Platform Trust Technology (PTT): Intel’s version of firmware TPM
All solutions are compatible with TPM 2.0 and Windows 11, so Aussie users can confidently use any of these implementations.
Why Does Windows 11 Require TPM 2.0?
So why is TPM 2.0 mandatory for Windows 11? The short answer: it’s more secure. The longer answer: By using TPM 2.0, Windows 11 can guarantee better data encryption and user authentication, while more effectively protecting your device from malware, rootkits, and ransomware.
Aussie gamers will also have noticed that TPM 2.0 is increasingly part of system requirements for new games. Titles like Battlefield 6, Call of Duty: Black Ops 7, and Valorant now require it.
How to Enable TPM 2.0: Step-by-Step Guide
TPM 2.0 should automatically be enabled on your device. If it’s not, you can manually enable TPM 2.0 in just a few steps – no technical expertise required.
Follow these six steps to activate TPM 2.0 on your PC:
Check TPM Status
Before starting the activation process, first check the current TPM status. The easiest way is via the Windows Security app. Go to Settings > Update & Security > Windows Security > Device Security and see whether a security processor is listed. If none is shown, TPM 2.0 may be disabled. Alternatively, you can use the PC Health Check Tool.
Prepare for BIOS/UEFI
If your device supports TPM 2.0 but it is currently disabled, you can enable it through the BIOS. Before doing so, make sure to back up all important data to an external drive or the cloud. It is also recommended to check your BIOS version and update it if necessary.
Access BIOS/UEFI
Your system should now be ready to enable TPM 2.0. Restart your PC and repeatedly press F1, F2, F10, or Ctrl + Alt + Esc during startup. The exact key depends on the manufacturer and can usually be found in the user manual. Repeatedly pressing the key will open the BIOS menu.
Enable TPM
In the BIOS menu, navigate to the Security tab and make sure TPM is set to “Available”. Change the TPM status to “Enabled” to activate TPM 2.0. Save your changes using the Esc key and exit the BIOS. Wait for your PC to complete the reboot to confirm that TPM has been enabled.
Verify After Activation
Once your PC has restarted, repeat Step 1 to verify that TPM is now enabled. In the Windows Security app, you should be able to view all details of the security chip. If the specifications meet your requirements, no further action is needed.
Common Problems and Solutions
TPM 2.0 activation doesn’t always go smoothly. If you’ve followed the steps but still can’t find your TPM, here are solutions to frequent issues Aussie users encounter:
“Compatible TPM Not Found”
Problem: The Error message states “Compatible TPM was not found” or similar.
Solution: The most common cause is that your TPM isn’t enabled. Follow our step-by-step guide above to enable TPM via BIOS. If the issue persists, ensure you’re looking in the correct BIOS section (Security or Advanced).
TPM Option Not Visible in BIOS
Problem: You’ve opened BIOS but can’t find any TPM option.
Solution: This usually means your BIOS firmware is outdated. Fix this by:
- Visiting your PC manufacturer’s support website
- Downloading the latest BIOS update for your model
- Installing the update (follow manufacturer instructions carefully)
- Restarting and accessing BIOS again
TPM Won’t Initialise
Problem: Windows doesn’t automatically initialise TPM.
Solution: Check your UEFI settings:
- Your UEFI interface must be TCG-compatible
- TPM must be enabled in UEFI settings (not just visible)
- Consider resetting TPM to factory settings through BIOS
How to reset TPM:
- Enter BIOS/UEFI
- Navigate to Security > TPM
- Select “Clear TPM” or “Reset to Factory Defaults”
- Save and restart
BitLocker Problems After TPM Activation
Problem: BitLocker doesn’t work properly after enabling TPM 2.0.
Solution: This is typically caused by outdated firmware:
- Check for Windows updates (Settings > Update & Security)
- Install all available updates, especially firmware updates
- Restart your PC
- Re-enable BitLocker if necessary
Aussie tip: If you’re using a work PC, check with your IT department before modifying BitLocker settings.
Windows 11 Installation Rejected
Problem: Windows 11 installation fails despite enabling TPM.
Solution: TPM 2.0 is a requirement for Windows 11. If installation is rejected:
- Verify TPM is actually version 2.0 (not 1.2)
- Ensure Secure Boot is also enabled in BIOS
- Check your CPU is Windows 11 compatible (8th gen Intel or 2nd gen AMD Ryzen minimum)
- Run Microsoft’s PC Health Check tool again
TPM 2.0 and Windows 11 Upgrade
If you’re buying a new PC – any model from 2016 onwards sold in the UK – it generally already has TPM 2.0, which you may just need to activate. However, if you’re using an older PC with Windows 7 or Windows 8, you might still be running TPM 1.2.
Upgrading from TPM 1.2 to TPM 2.0
To upgrade to Windows 11, you must upgrade to TPM 2.0. A Windows 11 upgrade without TPM 2.0 is only possible with complicated workarounds (not recommended).
How to upgrade:
- Back up your important data (external drive or cloud)
- Clear your current TPM (via BIOS, as shown above)
- Download the appropriate TPM update package for your PC model from the manufacturer’s website
- Install the firmware update following the manufacturer’s instructions
- Restart and enable TPM 2.0 using our guide above
Security Best Practices for TPM 2.0
For everyday users, TPM can be tricky to understand since it’s a security feature that mostly works behind the scenes. Nevertheless, it has real impacts on your user experience and data security.
Even as a non-technical user, follow these best practices:
TPM 2.0 Over TPM 1.2
TPM 2.0 was released in 2014 and became the industry standard by 2018. For Windows 11 upgrades, modern games, and optimal data security, TPM 2.0 is now essential.
Everyday Applications
TPM 2.0 is your best mate when it comes to securing passwords, fingerprints, and facial scans. Use it for:
- Quick logins via Windows Hello
- Seamless two-factor authentication (2FA)
- Secure password management
Enhanced Security
TPM 2.0 is even more secure when combined with BitLocker and Secure Boot. Ensure both are enabled to better protect your PC and data:
- Check BitLocker status: Settings > Update & Security > Device Encryption
- Verify Secure Boot: Check in BIOS/UEFI Security settings
- Enable both if not already active
Secure Your TPM Password
If you manually set up TPM 2.0 on an older device, you’ll need to initialise it and create a secure owner password. Store this password somewhere safe – preferably written down physically (not just digitally).
TPM 2.0 works best when you don’t even notice it. Once correctly set up and enabled, it’s an extra security layer working behind the scenes to keep your data safe.
Verdict: Enable TPM 2.0 for Better Security
TPM 2.0 isn’t just a useful security feature – it’s essential for upgrading to Windows 11 and running many popular modern games. That’s why it’s crucial you’ve learnt how to check your TPM status, enable an existing TPM, solve common TPM problems, and what to do if you don’t yet have the correct TPM version.
With our comprehensive guide, Aussie users can confidently activate TPM 2.0 and ensure their PCs meet the latest security standards. Whether you’re a gamer, professional, or everyday user, taking a few minutes to enable TPM 2.0 provides significant long-term security benefits.
If your current PC doesn’t support TPM 2.0 or activation is proving problematic, modern systems like GEEKOM Mini PCs come with TPM 2.0 already enabled and Windows 11 Pro pre-installed. This saves you the manual configuration and lets you get started right away.
Ready to secure your PC? Follow our step-by-step guide to enable TPM 2.0 today and enjoy enhanced protection for your data and privacy.
Frequently Asked Questions: TPM 2.0
How do I check if I have TPM 2.0?
You can check your TPM status through the Windows Security app by following this path: Settings > Update & Security > Windows Security > Device Security. Alternatively, press Windows + R, type tpm.msc, and hit Enter to open the TPM management console and verify your TPM version and status.
Can I install Windows 11 without TPM 2.0?
Yes, it’s technically possible to install Windows 11 without TPM 2.0, but it requires complicated workarounds and means your device will be less secure. We recommend performing the firmware update to TPM 2.0 for the Windows 11 upgrade whenever possible. Microsoft’s official stance is that TPM 2.0 is mandatory for optimal security.
Does my older PC support TPM 2.0?
Not necessarily. Whether your older PC supports TPM 2.0 depends mainly on the motherboard and CPU, not just the operating system.
Here’s a quick guide:
If your PC is from around 2016 onwards (for example, Intel 8th gen or newer, or AMD Ryzen 2000 series and later), it is likely to support TPM 2.0, but it may need to be enabled in the BIOS (often listed as Intel PTT or AMD fTPM).
If your PC is older than that (roughly pre-2016), it will usually not support TPM 2.0 and may only have TPM 1.2 or none at all.
Will I lose data by enabling TPM?
No, you shouldn’t lose data by enabling TPM. Data loss is more likely when resetting or clearing TPM. Nevertheless, we recommend playing it safe and backing up important data to an external drive or cloud storage before TPM activation – just to be certain.
Can I enable TPM 2.0 on a Mac?
Mac computers use Apple’s own security chip called the T2 Security Chip (or Apple Silicon’s Secure Enclave on M1/M2/M3 models). While they don’t use TPM specifically, they provide equivalent or superior security features. If you’re running Windows 11 via Boot Camp on an Intel Mac, TPM functionality may be emulated, but native macOS doesn’t use TPM.
