To check for TPM in Windows 10, press Windows logo key + R, type tpm.msc, and press Enter. If it says The TPM is ready for use and Specification Version is 2.0, you’re set. If it says Compatible TPM cannot be found, turn on TPM in your PC’s UEFI firmware settings.
Applies to: Windows 10. Checked against Microsoft Support on September 25, 2026.
TPM (Trusted Platform Module) is a security chip, or firmware, used by features such as BitLocker and Windows Hello. Windows 11 requires TPM 2.0. See how to upgrade Windows 10 to 11.
Check TPM in Windows Security
- Select Start > Settings > Update & Security > Windows Security > Device security.
- Under Security processor, select Security processor details.
- Check that Specification version is 2.0.
If there’s no Security processor section, TPM is probably turned off.
Check TPM with tpm.msc
- Press Windows logo key + R, type
tpm.msc, and select OK. - Under Status, look for The TPM is ready for use.
- Under TPM Manufacturer Information, check Specification Version.
Check TPM with PowerShell
Open PowerShell as an administrator and run Get-Tpm. TpmPresent and TpmReady should both say True. To see the version, run Get-CimInstance -Namespace root/cimv2/security/microsofttpm -ClassName Win32_Tpm | Select-Object SpecVersion. The first number in the result, such as 2.0, is the version.
Check TPM in Device Manager
- Right-click Start and select Device Manager.
- Expand Security devices.
- Look for Trusted Platform Module 2.0. The number is the TPM version.
If there is no Security devices group, Windows can’t see a TPM. It may be turned off in the firmware settings, which the next section covers.
Turn on TPM in the firmware settings
- Select Start > Settings > Update & Security > Recovery.
- Under Advanced startup, select Restart now.
- Select Troubleshoot > Advanced options > UEFI Firmware Settings > Restart.
- Find the TPM setting, often on the Security or Advanced tab. It may be called TPM, Security Device Support, Firmware TPM, or Trusted Computing.
- Set it to Enabled, then save and exit (often F10).
Check again with tpm.msc once Windows restarts. The menu names differ by PC maker. For other ways in, see how to enter the BIOS on Windows 10.
What the TPM setting is called on your PC
- Intel processors: look for Intel Platform Trust Technology (PTT) or Intel PTT.
- AMD processors: look for AMD fTPM, AMD CPU fTPM or Firmware TPM.
- Business laptops such as Dell, HP and Lenovo often list it as Security Chip or TPM Device under Security.
Most PCs sold since 2016 have a TPM 2.0 built into the processor, even if it’s turned off by default on some desktops.
Troubleshooting
- “Compatible TPM cannot be found” after turning it on. Make sure you saved the firmware settings before exiting, then fully shut down and start the PC again.
- BitLocker asks for a recovery key after the change. Changing TPM settings can trigger this. Find the key at account.microsoft.com/devices/recoverykey before you change anything.
- Status says the TPM is ready but with reduced functionality. Install the latest Windows and firmware updates, then restart.
- There’s no TPM option in the firmware. Update the BIOS from your PC maker’s site. Some older PCs simply don’t have one.
Frequently asked questions
My TPM is version 1.2. Can I upgrade it?
Some PCs can update TPM firmware from the PC maker. If not, the PC doesn’t meet the Windows 11 requirement.
Should I clear the TPM?
Not unless your PC maker or IT support tells you to. Clearing it removes keys that features such as BitLocker rely on, so you could lose access to encrypted data. If the PC does ask for a key afterward, here is where to find your BitLocker recovery key.
Do I also need Secure Boot?
Windows 11 needs a Secure Boot capable PC. See how to turn on Secure Boot in Windows 10.
Will changing the TPM setting affect BitLocker?
It can. If BitLocker or device encryption is on, changing TPM or other firmware settings may make Windows ask for your BitLocker recovery key at startup. Before you change anything, make sure you have the key saved, or suspend BitLocker in Control Panel > BitLocker Drive Encryption > Suspend protection. Turning TPM on for the first time doesn’t affect a PC without BitLocker.
Is it safe to turn on TPM?
Yes. Turning it on doesn’t change your files or settings. It only makes the security chip available to Windows features like BitLocker and Windows Hello.
Is firmware TPM as good as a separate TPM chip?
For home use, yes. Intel PTT and AMD fTPM meet the Windows 11 requirement and work with BitLocker and Windows Hello.
Can I add a TPM to a desktop PC?
Some motherboards have a TPM header for a small plug-in module. Check your motherboard manual, and turn on firmware TPM first, since most modern processors already include one.
To check everything else Windows 11 needs, see how to check if your PC can run Windows 11.
Microsoft’s guide is Enable TPM 2.0 on your PC. More help is on our Windows Help & Guides page.
Related: how to install Windows 11 on an unsupported PC.
Related: turn on Secure Boot in Windows 11.
Matt Jacobs has been working as an IT consultant for small businesses since receiving his Master’s degree in 2003. While he still does some consulting work, his primary focus now is on creating technology support content for SupportYourTech.com.
His work can be found on many websites and focuses on topics such as Microsoft Office, Apple devices, Android devices, Photoshop, and more.