How do I install TPM 2.0 on my motherboard?

Q: Is it possible to install TPM?

How to install a TPM. First, check that your PC doesnt already have a working TPM installed into its motherboard or via the CPU by hitting Win + R in Windows to open Run and type tpm. msc then hit Enter. Its possible to have a TPM installed without it being enabled by default, so its best to check.

Published August 2021

Índice Show

How to enable TPM
Need more help?
What Is TPM 2.0
Check/Change TPM Status and Version
Does My Motherboard Have TPM Header
How to Install TPM 2.0 Module
Final Words: Install TPM 2.0 on Windows PC
Can I add TPM 2.0 to my motherboard?
How do I install TPM 2.0 on my PC?
Is it possible to install TPM?
What if my PC does not have TPM?

This article is intended for users who are not able to upgrade to Windows 11 because their PC is not currently enabled with TPM 2.0 or their PC is capable of running TPM 2.0 but is not set up to do so. If you are unfamiliar with this level of technical detail, we recommend that you consult your PC manufacturer’s support information for more instructions specific to your device.

Most PCs that have shipped in the last 5 years are capable of running Trusted Platform Module version 2.0 (TPM 2.0). TPM 2.0 is required to run Windows 11, as an important building block for security-related features. TPM 2.0 is used in Windows 11 for a number of features, including Windows Hello for identity protection and BitLocker for data protection.

In some cases, PCs that are capable of running TPM 2.0 are not set up to do so. If you are considering upgrading to Windows 11, check to ensure TPM 2.0 is enabled on your device. Most retail PC motherboards used by people building their own PC, for example, ship with TPM turned off by default even though it is almost always available to be enabled.

Option 1: Use the Windows Security app

Run Settings > Update & Security > Windows Security > Device Security
1. If you do not see a Security processor section on this screen your PC may have a TPM that is disabled. see How to enable TPM for more information or check your PC manufacturer’s support information for instructions. to enable the TPM. If you are able to enable a TPM, complete the next step to verify that it is a TPM 2.0.
2. If you see an option for Security processor details under Security processor, select that and verify that your Specification version is 2.0. If it is less than 2.0, your device does not meet the Windows 11 requirements.

Option 2: Use the Microsoft Management Console

Press [Windows Key] + R or select Start > Run.
Type “tpm.msc” (do not use quotation marks) and choose OK.
1. If you see a message saying a “Compatible TPM cannot be found,” your PC may have a TPM that is disabled. See How to enable TPM for more information or check your PC manufacturer’s support information for instructions to enable the TPM. If you are able to enable the TPM, complete the next step to verify that it is a TPM 2.0.
2. If you see a message confirming TPM is ready to use, check Specification Version under TPM Manufacturer Information to verify it is 2.0. If it is less than 2.0 your device does not meet the Windows 11 requirement.

How to enable TPM

If you need to enable TPM, these settings are managed via the UEFI BIOS (PC firmware) and vary based on your device. You can access these settings by choosing: Settings > Update & Security > Recovery > Restart now.

From the next screen, choose Troubleshoot > Advanced options > UEFI Firmware Settings > Restart to make the changes. These settings are sometimes contained in a sub-menu in the UEFI BIOS labeled Advanced, Security, or Trusted Computing. The option to enable the TPM may be labeled Security Device, Security Device Support, TPM State, AMD fTPM switch, AMD PSP fTPM, Intel PTT, or Intel Platform Trust Technology.

If you are unsure how to make any needed changes to the TPM settings, we recommend that you check your PC manufacturer’s support information or contact their support organization. Below are links to information from some PC manufacturers to help you get started:

Asus

Dell

Lenovo

Microsoft Surface

Need more help?

Microsoft recently unveiled Windows 11 to the world which comes with some interesting new features. While Windows 11’s stable version will drop somewhere around late fall, it comes with a set of pre-requisites that need to be fulfilled for a free upgrade from Windows 10 to Windows 11.

A key requirement for Windows 11 is to have a TPM 2.0 chip installed and Secure Boot enabled. Several existing Windows users were left wondering about questions like what is TPM 2.0? Do I have a TPM 2.0 chip? Do I need a TPM module for Windows 11? How to install TPM 2.0 on Windows? Well, we answer all your questions.

What Is TPM 2.0

TPM stands for Trusted Platform Module. It is a hardware module that is used for secure boot and checking system integrity. Windows operating system also uses it for file and disk encryption along with BitLocker.

TPM 2.0 was released in 2019. It is the latest version and an upgrade over TPM 1.2 which was released way back in 2011. Most latest premium and enterprise-level laptops/PCs released after 2016 have TPM 2.0 installed. In case you are unsure about the TPM version, here’s a simple way to check in Windows 10 and Windows 7.

Check/Change TPM Status and Version

In order to check if you have a TPM module, press Win+R to trigger the Run prompt andtype tpm.msc. Next, hit Enter.

On the TPM management page, you will see your TPM status. In my case, the status is “The TPM is ready for use”. You can even see the TPM version at the bottom under TPM Manufacturer Information.

If your TPM module status is turned off, you have to enable it in your UEFI firmware settings menu. The menu options are different for every laptop depending on the manufacturer. Generally, you can find the TPM option under Security or Advanced Settings. The TPM module is called PTT for Intel processors and fTPM for AMD processors.

Does My Motherboard Have TPM Header

Now if your PC doesn’t have a TPM chip, don’t worry. Most motherboards have a TPM header and you can install a TPM module manually. If you are unsure about it, you can check on your motherboard manufacturer’s site. You just have to Google your motherboard model number and check the technical specs on the ‘manufacturer’s site.

For instance, let’s just pick up the ROG Strix-B450F motherboard. On the Asus site, if you check under technical specs, you’ll see the TPM header under I/O ports. This means that the Asus B450F motherboard has an option to install the TPM module.

If you can’t find the information on the manufacturer’s site, you can also physically inspect your motherboard. It usually is around the RGB header or COM ports. For reference, in the ROG Strix B450F, the TPM header is beside the COM port.

How to Install TPM 2.0 Module

If your PC has a TPM header, you can easily get a TPM 2.0 module for your motherboard. This will make your PC Windows 11 compatible if you fulfill other requirements.

However, finding the right TPM 2.0 module is the hard part. You need to get the exact pin number and pin layout of your motherboard’s TPM header. For instance, let’s take the above-mentioned B450F motherboard again. The manual says it has a 14-1 PIN header with the following PIN layout. Hence, I have to buy a 14-1 PIN TPM 2.0 module.

You have to ensure that the TPM module you buy has the same PIN layout as your TPM header. More importantly, it has the same PIN lockout. In my case, the TPM module has to have a lockout PIN in the 5th row. For reference, below is the image of my TPM header layout.

It is recommended to purchase a TPM module from the same company as your motherboard manufacturer. Additionally, due to the soaring demand, TPM module prices have hit the ceiling. It’s also hard to find them on Amazon, BestBuy, or Walmart. Here’s a TPM module I found on B&H with fair pricing.

Asus 14-1 TPM module on B&H
TPM Modules on Amazon

If you are in doubt, it’s better to contact your motherboard manufacturer’s customer support. They will be better guide you to the right TPM module

Once you buy your TPM module, install it on the motherboard. You need to enable the TPM module from the UEFI firmware menu. Most of the TPM modules, if compatible, work right out of the box without any installation. They do need a system restart though.

Final Words: Install TPM 2.0 on Windows PC

As noted earlier, most computers should already have TPM 2.0 installed on their motherboard. For a lot of users, it is turned off by default. We have written a detailed guide on how to enable TPM and Secure Boot from the UEFI boot menu. In case your Windows computer came without a TPM chip, it is easy to buy one online. You can either install it manually or take your computer to a repair shop. It shouldn’t take long. You just need a compatible motherboard.

Also Read: 11 Best Windows 11 Features That You Should Know About

Pratik

Pratik works as an In-house writer and video host at TechWiser. Former Programmer, Current writer. Loves tech in any form, quite optimistic about AI, data science and IoT. Talks extremely less but you betcha can geek out over anything on Twitter.

Can I add TPM 2.0 to my motherboard?

Can I Add a TPM to My PC? If you built your own desktop PC in the last few years and you're comfortable tinkering with hardware and software security settings in the system's BIOS, you can probably add a discrete TPM 2.0 chip to your motherboard.

How do I install TPM 2.0 on my PC?

Enable TPM 2.0 on your PC.

Press [Windows Key] + R or select Start > Run..

Type “tpm.msc” (do not use quotation marks) and choose OK. If you see a message saying a “Compatible TPM cannot be found,” your PC may have a TPM that is disabled..

Is it possible to install TPM?

How to install a TPM. First, check that your PC doesn't already have a working TPM installed into its motherboard or via the CPU by hitting Win + R in Windows to open Run and type tpm. msc then hit Enter. It's possible to have a TPM installed without it being enabled by default, so it's best to check.

What if my PC does not have TPM?

If your device does not have a TPM 2.0 chip, when you run the Windows PC Health Check tool or another utility, you will get an error, and you won't be able to install Windows 11 even though the rest of the hardware meets the minimum requirements.