Trusted Platform Module (TPM) 2.0 has been a requirement for new Windows laptops since 2016, but its inclusion as a requirement for Windows 11 has drawn more attention and left some users wondering how to enable TPM 2.0 in BIOS.
TPM 2.0 is typically a discrete chip that provides additional hardware-based security for your system. Any Windows laptop released in 2016 should have the feature enabled by default. Whether it was disabled or you have an older system, you may now find it necessary to enable TPM 2.0 in BIOS in order to upgrade to Windows 11.
The basic process for this will be the same regardless of what kind of laptop or desktop you have, but some of the language may differ slightly. It’s a very quick and easy change to make, so follow along and we’ll walk you through the necessary steps.
- Restart your laptop
- Hold down the F2 key (FN F2 if you don’t have dedicated function keys) during boot up to get to the BIOS menu
- Navigate to the Security tab (you’ll need to use your arrow keys)
- Find a listing for either TPM, Intel Platform Trust Technology (IPTT) or AMD CPU fTPM
- Toggle it to “Enabled”
- Hit F10 to Save and Exit BIOS
That’s it. Your system should now have TPM 2.0 enabled and you should be all set for Windows 11.
There are a couple of caveats here. The first is that if your system shows TPM 1.2, then you will need to check for new security drivers from the manufacturer of your laptop. Many have offered an update to TPM 2.0, but you may have simply missed the update.
The second is that if your system did not have a BIOS setting for TPM, IPTT or AMD CPU fTPM, then it is likely too old to support TPM 2.0. If it’s a laptop, your only option will be to update to any post-2016 laptop and it will have the necessary support. Desktop users would either need to add a motherboard with a TPM 2.0 chip or a modern Intel or AMD processor that offers firmware-based TPM, which would also be enabled using the instructions above.
