Enabling TPM for Windows 11 upgrade on 2018-2021 Windows 10 PCs

Was your computer manufactured between 2018 and 2021 and still running Windows 10 because you have yet to be prompted to upgrade to Windows 11? If so, it could be Windows 11 compatible and needs a feature turned on. Here is how to enable the Trusted Platform Module (TPM) in your computer.

One of the services we offer is to perform a clean installation of Windows. When doing clean installs, I find that most systems manufactured between 2018 and 2021 do not have the TPM enabled. Once I enable the TPM, I usually will do a clean installation of Windows 11 instead of Windows 10.

So, what is the TPM? The TPM is a microchip that provides hardware-based security functions. It is designed to provide a secure foundation for various security-related functions, such as BitLocker drive encryption, Windows Hello, secure boot, and more. By providing a secure environment for sensitive operations, TPM helps protect the system's integrity and the data's confidentiality.

The first version of the TPM, 1.2, started to appear in computers in 2006 and was a dedicated chip. TPM version 2.0 (the version required by Windows 11) began to appear in computers in 2018 and is a firmware extension of the CPU (Central Processing Unit). Between 2018 and 2021, the TPM function of most computers was turned off by default, as no version of Windows required it.

Then, in 2021, Microsoft released Windows 11 and changed the hardware requirements for Windows. Windows 11 now requires a TPM version 2.0 for Windows 11 to be installed. There were registry hacks and other ways to get around it, but Microsoft quickly patched those flaws.

So, the first thing you need to do is find out the status of the TPM inside Windows 10. By bringing up the TPM Management console, you can see if a TPM is enabled and what version it is. To open the TPM Management console, perform either of the following:

• Open a RUN dialog box by pressing the Windows logo key + R, type tpm.msc in the Open field, and left-click on OK.
  or
• Open a search box by pressing the Windows logo key + S, type tpm.msc, and choose tpm.msc Microsoft Common Console Document.

Once the TPM Management console appears, it will tell you if a TPM is enabled and what version it is.

If it states that a compatible TPM could not be found, you will have to either research the system/motherboard specifications online or boot your computer into the BIOS (Basic Input/Output System) / UEFI (Unified Extensible Firmware Interface).

Now, before you research online or boot into the BIOS/UEFI, let's talk about what you will be looking for. The CPU manufacturers (Intel and AMD) have different names for implementing the TPM firmware extensions.

• The TPM extension inside Intel processors is called Platform Trust Technology (PTT).
• The TPM extension inside AMD processors is called Firmware TPM (fTPM).

The quickest and easiest way to check for a TPM is to boot your computer into the BIOS/UEFI. This may take several tries, as interrupting the booting cycle for your computer can be challenging. If you don't interrupt the boot process the first time, just let the computer boot to the login screen and restart it.

1. Restart your computer and access the BIOS/UEFI settings. The method to access these settings varies depending on the manufacturer of your computer. Typically, you can access the BIOS/UEFI settings by pressing a specific key (such as F2, F10, or Del) during the boot process. Most of the time, pressing either the F2 or the Del key rapidly when the splash screen (the manufacturer logo) appears will get you into the BIOS/UEFI settings. Consult your computer's manual or the manufacturer's website for specific instructions.
2. Once in the BIOS/UEFI settings, navigate to the Security or Advanced tab. Look for an option related to TPM or Security. The wording may vary depending on the manufacturer. Remember to look for PTT in systems with Intel processors and fTPM for systems with AMD processors.
3. Enable the TPM feature and save the changes before exiting the BIOS/UEFI settings. Your computer will restart.
4. After enabling TPM in the BIOS/UEFI settings, you can verify that it is enabled in Windows 10 by opening the TPM Management console (as previously outlined). It should now show that TPM is enabled.

Once the TPM is enabled, you can wait for Windows Update to offer the Windows 11 upgrade or manually upgrade Windows 10 to Windows 11. Enabling the Trusted Platform Module on computers manufactured between 2018 and 2021 running Windows 10 is an important step towards being able to upgrade to Windows 11. By following the steps outlined in this article, users can verify the presence and version of a TPM and enable it in the BIOS/UEFI.