TPM 2.0 Windows 11 fix download

Published August 2021

This article is intended for users who are not able to upgrade to Windows 11 because their PC is not currently enabled with TPM 2.0 or their PC is capable of running TPM 2.0 but is not set up to do so. If you are unfamiliar with this level of technical detail, we recommend that you consult your PC manufacturer’s support information for more instructions specific to your device.

Most PCs that have shipped in the last 5 years are capable of running Trusted Platform Module version 2.0 (TPM 2.0). TPM 2.0 is required to run Windows 11, as an important building block for security-related features. TPM 2.0 is used in Windows 11 for a number of features, including Windows Hello for identity protection and BitLocker for data protection.

In some cases, PCs that are capable of running TPM 2.0 are not set up to do so. If you are considering upgrading to Windows 11, check to ensure TPM 2.0 is enabled on your device. Most retail PC motherboards used by people building their own PC, for example, ship with TPM turned off by default even though it is almost always available to be enabled.

Option 1: Use the Windows Security app

  1. Run Settings Update & Security > Windows Security > Device Security

    1. If you do not see a Security processor section on this screen your PC may have a TPM that is disabled. see How to enable TPM for more information or check your PC manufacturer’s support information for instructions. to enable the TPM. If you are able to enable a TPM, complete the next step to verify that it is a TPM 2.0.

    2. If you see an option for Security processor details under Security processor, select that and verify that your Specification version is 2.0. If it is less than 2.0, your device does not meet the Windows 11 requirements.

Option 2: Use the Microsoft Management Console

  1. Press [Windows Key] + R or select Start Run.

  2. Type “tpm.msc” (do not use quotation marks) and choose OK.

    1. If you see a message saying a “Compatible TPM cannot be found,” your PC may have a TPM that is disabled. See How to enable TPM for more information or check your PC manufacturer’s support information for instructions to enable the TPM. If you are able to enable the TPM, complete the next step to verify that it is a TPM 2.0.

    2. If you see a message confirming TPM is ready to use, check Specification Version under TPM Manufacturer Information to verify it is 2.0. If it is less than 2.0 your device does not meet the Windows 11 requirement.

How to enable TPM

If you need to enable TPM, these settings are managed via the UEFI BIOS (PC firmware) and vary based on your device. You can access these settings by choosing: Settings Update & Security > Recovery > Restart now.

From the next screen, choose Troubleshoot > Advanced options > UEFI Firmware Settings > Restart to make the changes. These settings are sometimes contained in a sub-menu in the UEFI BIOS labeled Advanced, Security, or Trusted Computing. The option to enable the TPM may be labeled Security Device, Security Device Support, TPM State, AMD fTPM switch, AMD PSP fTPM, Intel PTT, or Intel Platform Trust Technology.

If you are unsure how to make any needed changes to the TPM settings, we recommend that you check your PC manufacturer’s support information or contact their support organization. Below are links to information from some PC manufacturers to help you get started:

Asus

Dell

HP

Lenovo

Microsoft Surface

See also

Windows 11 system requirements

Ways to install Windows 11

Windows help & learning

Need more help?

Security Windows 10 Microsoft Defender Antivirus More...Less

If you receive a message in Windows Security prompting you to update your security processor or TPM firmware, follow the steps in the "Recommended actions" section below.

Note: In previous versions of Windows 10, Windows Security is called Windows Defender Security Center.

Why am I receiving this message?

Many devices that run Windows 10 have Trusted Platform Module (TPM) chipsets. There's a security vulnerability in certain TPM chipsets that can affect operating system security, which means Windows 10 operating systems are at an increased risk. You received this message because Microsoft has released Windows 10 security updates to address the vulnerability, which you need to download and install. Additionally, device manufacturers are releasing firmware updates to address the problem, which you also need to download and install. Finally, after you've installed these updates, you must clear your TPM.

1. Download and install the Windows operating system updates from Windows Update

If you have turned on automatic updates in Windows Update, you don’t need to take any action because the updates will be downloaded and installed automatically.

If you have not turned on automatic updates, we recommend that you go to Windows Update immediately to check for and install the applicable updates manually. To learn more, see Windows Update: FAQ.

Warning: Do not apply the TPM firmware update before you apply the Windows operating system update. Doing so will make it impossible to determine whether your system is affected.

2. Install any applicable firmware updates

If you have a Surface device, see Security issue for TPM on Surface devices for more information and instructions.

If your device is not from Microsoft, locate the device manufacturer of your device in the following table, select the corresponding link, and apply the firmware update that's provide. If your device manufacturer isn't listed in this table, contact the manufacturer’s customer support department.

Device manufacturer

Link for firmware update

TPM manufacturer

https://www.infineon.com/TPM-update

Fujitsu

https://www.fujitsu.com/global/support/products/software/security/products-f/ifsa-201701e.html

HP Customer Support

https://support.hp.com/document/c05792935

HP Enterprise Support

https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03789en_us

Lenovo

https://support.lenovo.com/product_security/LEN-15552

Panasonic

https://pc-dl.panasonic.co.jp/itn/info/osinfo20171026.html

Toshiba

http://go.toshiba.com/tpmsecuritynotice

3. Clear your TPM

Important: Before clearing your TPM, make sure you back up your data. Do not clear the TPM on a device you don't own, such as a work or school PC, without being instructed to do so by your IT administrator.

To clear your TPM, follow these steps:

  1. Go to Start  > Settings  > Update & Security  > Windows Security > Device security .

  2. Under Security processor, select Security processor details.

  3. Select Security processor troubleshooting, and then under Clear TPM, select Clear TPM.

    You'll need to restart your device to complete the process.

Note: If you have Windows Hello set up (PIN or biometric), it will no longer work after you clear the TPM. To fix this, reset your PIN by following the guidance at PIN sign-in issues. 

Need more help?

How do I fix TPM 2.0 error when installing Windows 11?

To clear the TPM.
Open the Windows Defender Security Center app..
Select Device security..
Select Security processor details..
Select Security processor troubleshooting..
Select Clear TPM..
You will be prompted to restart the computer. ... .
After the PC restarts, your TPM will be automatically prepared for use by Windows..

Can I install Windows 11 TPM?

However, Microsoft has insisted that Windows 11 can only run on devices with TPM 2.0. This has caused a lot of people with reasonably powerful and recent PCs to find that they cannot upgrade to Windows 11, despite the rest of their hardware meeting Windows 11 system requirements.

How do I bypass TPM 2.0 and install Windows 11?

How to Bypass Windows 11 TPM the Official Microsoft Way.
Open Regedit. ... .
Navigate to HKEY_LOCAL_MACHINE\SYSTEM\Setup\MoSetup. ... .
Create a DWORD (32-bit) Value called AllowUpgradesWithUnsupportedTPMOrCPU if it doesn't already exist..
Set AllowUpgradesWithUnsupportedTPMOrCPU to 1. ... .
Close regedit and restart your PC..

Can you add TPM 2.0 to a computer?

Can I Add a TPM to My PC? If you built your own desktop PC in the last few years and you're comfortable tinkering with hardware and software security settings in the system's BIOS, you can probably add a discrete TPM 2.0 chip to your motherboard.