Was your computer manufactured between 2018 and 2021 and still running Windows 10 because you have yet to be prompted to upgrade to Windows 11? If so, it could be Windows 11 compatible and needs a feature turned on. Here is how to enable the Trusted Platform Module (TPM) in your computer.

One of the services we offer is to perform a clean installation of Windows. When doing clean installs, I find that most systems manufactured between 2018 and 2021 do not have the TPM enabled. Once I enable the TPM, I usually will do a clean installation of Windows 11 instead of Windows 10.

So, what is the TPM? The TPM is a microchip that provides hardware-based security functions. It is designed to provide a secure foundation for various security-related functions, such as BitLocker drive encryption, Windows Hello, secure boot, and more. By providing a secure environment for sensitive operations, TPM helps protect the system's integrity and the data's confidentiality.

The first version of the TPM, 1.2, started to appear in computers in 2006 and was a dedicated chip. TPM version 2.0 (the version required by Windows 11) began to appear in computers in 2018 and is a firmware extension of the CPU (Central Processing Unit). Between 2018 and 2021, the TPM function of most computers was turned off by default, as no version of Windows required it.

Then, in 2021, Microsoft released Windows 11 and changed the hardware requirements for Windows. Windows 11 now requires a TPM version 2.0 for Windows 11 to be installed. There were registry hacks and other ways to get around it, but Microsoft quickly patched those flaws.

So, the first thing you need to do is find out the status of the TPM inside Windows 10. By bringing up the TPM Management console, you can see if a TPM is enabled and what version it is. To open the TPM Management console, perform either of the following:

• Open a RUN dialog box by pressing the Windows logo key + R, type tpm.msc in the Open field, and left-click on OK.
  or
• Open a search box by pressing the Windows logo key + S, type tpm.msc, and choose tpm.msc Microsoft Common Console Document.

Once the TPM Management console appears, it will tell you if a TPM is enabled and what version it is.

If it states that a compatible TPM could not be found, you will have to either research the system/motherboard specifications online or boot your computer into the BIOS (Basic Input/Output System) / UEFI (Unified Extensible Firmware Interface).

Now, before you research online or boot into the BIOS/UEFI, let's talk about what you will be looking for. The CPU manufacturers (Intel and AMD) have different names for implementing the TPM firmware extensions.

• The TPM extension inside Intel processors is called Platform Trust Technology (PTT).
• The TPM extension inside AMD processors is called Firmware TPM (fTPM).

The quickest and easiest way to check for a TPM is to boot your computer into the BIOS/UEFI. This may take several tries, as interrupting the booting cycle for your computer can be challenging. If you don't interrupt the boot process the first time, just let the computer boot to the login screen and restart it.

1. Restart your computer and access the BIOS/UEFI settings. The method to access these settings varies depending on the manufacturer of your computer. Typically, you can access the BIOS/UEFI settings by pressing a specific key (such as F2, F10, or Del) during the boot process. Most of the time, pressing either the F2 or the Del key rapidly when the splash screen (the manufacturer logo) appears will get you into the BIOS/UEFI settings. Consult your computer's manual or the manufacturer's website for specific instructions.
2. Once in the BIOS/UEFI settings, navigate to the Security or Advanced tab. Look for an option related to TPM or Security. The wording may vary depending on the manufacturer. Remember to look for PTT in systems with Intel processors and fTPM for systems with AMD processors.
3. Enable the TPM feature and save the changes before exiting the BIOS/UEFI settings. Your computer will restart.
4. After enabling TPM in the BIOS/UEFI settings, you can verify that it is enabled in Windows 10 by opening the TPM Management console (as previously outlined). It should now show that TPM is enabled.

Once the TPM is enabled, you can wait for Windows Update to offer the Windows 11 upgrade or manually upgrade Windows 10 to Windows 11. Enabling the Trusted Platform Module on computers manufactured between 2018 and 2021 running Windows 10 is an important step towards being able to upgrade to Windows 11. By following the steps outlined in this article, users can verify the presence and version of a TPM and enable it in the BIOS/UEFI.

Are you planning on upgrading from Windows 10 to Windows 11? Before you do, there are a few things you should do to ensure a smooth transition. In this article, we'll look at a few things to do before and after upgrading your computer to Windows 11.

Before upgrading to Windows 11

Check hardware compatibility

This is the first thing you need to do. Windows Update will typically prompt you to upgrade Windows 10 to Windows 11 if it sees that your computer has a Trusted Platform Module (TPM) version 2.0 enabled. This is the only hardware requirement that has changed between Windows 10 and Windows 11.

If your computer was built after 2018, it more than likely has a TPM 2.0 component. The problem is that manufacturers disabled the TPM prior to the release of Windows 11, as they felt it was not required for Windows 10, so why have it enabled by default?

So, computers built between 2018 and 2021 have a TPM 2.0 component included but not enabled. To enable the TPM 2.0 component, you will need to turn it on inside your system's BIOS (Basic Input/Output System). A quick check inside Windows 10 will tell you if the TPM component is enabled and what version it is.

Using a Run dialog box (Windows logo key + R) or Search box (Windows logo key + S), you can check the status of the TPM component inside your system. Just type TPM.MSC into a Run dialog box and select OK, or type TPM.MSC into a Search box and choose tpm.msc Microsoft Common Console Document.

When the TPM Management console opens, it should display the TPM's status and version. If you get a message stating that a compatible TPM cannot be found and your computer was manufactured between 2018 and 2021, you should check the website of the manufacturer of your computer/motherboard for a user manual to find instructions on how to enable the TPM.

Geek tip: If you ever have to replace the CMOS battery in your computer, the BIOS can reset itself to factory defaults. If the factory defaults had the TPM turned off, then things like Bitlocker drive encryption will not work correctly.

Check your drive for errors

You should definitely check the drive that has Windows installed on it for errors. You want to make sure the folders and files contained on it aren't damaged. There is nothing worse than getting halfway through the upgrade process only to get an error that causes the upgrade to fail.

How to run a standard disk check in Windows 10

1. Open File Explorer using one of the following:
• Left-click on the File Explorer icon (manilla folder) on the Taskbar.
• Press the Windows logo key + E at the same time.
• Use the Power User menu by right-clicking on the Start button and selecting File Explorer.
2. In the left-side column, left-click on This PC.
3. In the right-side column, right-click on the drive you want to check and select Properties.
4. Left-click on the Tools tab.
5. Under Error checking, left-click on Check.
6. Left-click on Scan drive.

If you want to run an advanced disk check, follow the link below.

How to check your drive for errors in Windows 10

Backup your computer

As the old saying goes, "It's always better to be safe than sorry," and this couldn't be more true when it comes to your computer. Having a good 'bare metal' backup is essential when it comes to an operating system upgrade.

Yes, 99.99% of the time, nothing goes wrong with an in-place upgrade, but there is always the possibility. A full backup will definitely bring a greater degree of safety to the whole upgrade process.

Backup your files with File History and Windows Backup in Windows 10

If you decide to do a full 'bare metal' backup, you will definitely want to create a recovery drive just in case.

How to create a recovery drive in Windows 10 and Windows 11

Clean up the junk

Whether or not you upgrade your operating system, giving it a good cleaning can do wonders for your computer's performance, not to mention making the upgrade process a little bit simpler.

Removing temporary folders and files, emptying the recycle bin, and clearing out your downloads folder are just a few ways to prepare your computer before upgrading to Windows 11. Windows 10 has two (2) different programs built in to help with cleaning out junk.

Clean up your Windows 10 computer using the Storage feature

Clean up Windows 10 with Disk Cleanup

Uninstall unnecessary programs/apps

Over time, you may have installed programs that you no longer use. Before upgrading to Windows 11, it's a good idea to uninstall any unnecessary programs to free up space on your computer. This can also speed up the upgrade process and ensure Windows 11 runs smoothly.

How to uninstall a program or app in Windows 10

1. Left-click on the Start menu and left-click on the Gear (Settings) icon. It should be the second icon up from the bottom.
2. Left-click on the Apps category.
3. In the right-hand column, you will find a list of installed programs (App & features).
4. Scroll down the list of apps and left-click any program you would like to remove, and select Uninstall.

Uninstall or disable your anti-virus

If you are using any anti-virus program other than Microsoft Windows Defender, you should disable or remove it before upgrading to Windows 11. I have seen anti-virus programs slow down an upgrade and even cause it to fail.

You can save yourself a headache or two by at least disabling your anti-virus software. Although uninstalling is the best option, disabling should work just as well.

Upgrade to Windows 11

So, if you haven't yet been prompted to upgrade to Windows 11 through Windows Update and your computer has a TPM 2.0 component enabled, you can manually upgrade your computer using the Windows 11 Installation Assistant. Just download it and run it.

Windows 11 Installation Assistant

After upgrading to Windows 11

Now that you have a new operating system, you will want to ensure you have all of the latest and greatest drivers for the components inside your computer. First, you should check for driver updates on the website of your computer or motherboard manufacturer. After that, if you have a dedicated graphics card, you should look for updated drivers for it. This will help ensure that your computer runs Windows 11 smoothly and efficiently.

When it comes to maintaining HDDs (Hard Disk Drive) or SSDs (Solid State Drive), running a disk check will usually find any software-related issues. But when I need to check the hardware inside a drive, I will use SpinRite from Gibson Research Corporation.

Intro screen from GRC SpinRite

SpinRite is a storage data recovery, repair, and maintenance program that works on HDDs and SSDs. SpinRite includes a feature called DynaStat that can reassemble missing data from bad sectors. SpinRite is a self-contained program that runs on top of a version of FreeDOS (Free Disk Operating System).

Graphic Status Display screen from GRC SpinRite

SpinRite has five (5) levels of operation, each building on the previous level.

• Level 1 - Examine storage media: This operation rapidly read-scans the entire storage media surface independent of whatever data and/or file system that may be present. This level will read every sector of the selected drive(s) psychical surface, looking for areas that appear healthy but could fail.
• Level 2 - Recover unreadable data: This operation rapidly read-scans the entire storage media for any unreadable or difficult to read data sectors. Spinrite will then attempt to recover unreadable data using the built-in advanced recovery technology.
• Level 3 - Refresh storage media: This operation performs all of the scanning and data recovery of Level 2. This level will read and write every sector of the selected storage media psychical surface, mainly exercising the hard drive. It tests and verifies every sector on the drive(s).
• Level 4 - Refresh and verify media: This operation performs all of the scanning and data recovery of Level 3. This level will read, write, and invert every sector twice of the selected drive(s) psychical surface. This tests and verifies that every 'bit' on the selected partition can be successfully written to and retrieved.
• Level 5 - Exercise storage media: This operational level should only be used on HDDs. This level does everything that all other levels do and restores any areas that may have been previously marked as defective but are now reliable.

DynaStat Data Recovery screen from GRC SpinRite

Note: If your Windows-based computer uses BitLocker drive encryption, it must be paused or disabled before you can run Spinrite. See the link below for instructions on how to do this.

Now, I have been using SpinRite for several years, and running it used to be fairly simple. If you could not get your system to boot from the SpinRite media, just go into the BIOS and change the boot mode. But with BitLocker drive encryption, things have changed.

For you to be able to run SpinRite on your system, it needs to be able to boot using either BIOS (Basic Input-Output System) or UEFI (Unified Extensible Firmware Interface) with BIOS capability support. For you to boot your system, you may have to turn off secure boot.

Warning: Secure boot is directly tied into BitLocker drive encryption, and if your drive is encrypted and you turn off the secure boot function without pausing or turning off BitLocker, you can lose access to that drive. Here is how to turn off BitLocker drive encryption.

GRC does have a free app called BootAble that will create a bootable USB drive to verify whether your system can boot using the SpinRite version of FreeDos. SpinRite is available from Gibson Research Corporation for $89 (as of this writing). For more information on SpinRite, follow the link below.

Gibson Research Corporation SpinRite

Doing computer repair, I fix a wide range of problems. One problem that I see more often are systems that go into sleep/standby mode and cannot come out of it. The cause varies from computer to computer, but the fix is usually a change in the software and/or hardware settings. Here's a couple of ways to fix a computer that goes to sleep/standby and won't wake up.

Your computer uses a standard for power management called Advanced Configuration and Power Interface (ACPI). There are six (6) different 'sleep' states that your computer can use. The following is a portion of the Wikipedia article on ACPI.

The ACPI specification defines the following four Global "Gx" states and six Sleep "Sx" states for an ACPI-compliant computer-system:

• G0 (S0): Working. "Awaymode" is a subset of S0, where monitor is off but background tasks are running.
• G1, Sleeping subdivides into the four states S1 through S4:
• S1: All processor caches are flushed, and the CPU(s) stops executing instructions. Power to the CPU(s) and RAM is maintained; devices that do not indicate they must remain on may be powered down.
• S2: CPU powered off. Dirty cache is flushed to RAM.
• S3: Commonly referred to as Standby, Sleep, or Suspend to RAM (STR). RAM remains powered
• S4: Hibernation or Suspend to Disk. All content of main memory is saved to non-volatile memory such as a hard drive, and is powered down.
• G2 (S5), Soft Off: G2/S5 is almost the same as G3 Mechanical Off, except that the PSU still supplies power, at a minimum, to the power button to allow return to S0. A full reboot is required. No previous content is retained. Other components may remain powered so the computer can "wake" on input from the keyboard, clock, modem, LAN, or USB device.
• G3, Mechanical Off: The computer's power has been totally removed via a mechanical switch (as on the rear of a PSU). The power cord can be removed and the system is safe for disassembly (typically, only the real-time clock continues to run - using its own small battery).

Changing the power management options in the operating system

General power options in Windows 8

Sometimes just changing the software settings in the operating system power options will fix the issue. Access to the power options in Windows can be done thru the Control Panel. Depending on your version and view by settings, you may or may not see a power option link. In that case, look for power options under the hardware category.

Editing advanced power settings in Windows 8

Once there, create a new plan or modify an existing plan, changing the advanced settings as needed.

Advanced power option settings in Windows 8

You can also disable S4 hibernation and make it unavailable quickly and easily using an administrator command prompt.

How to open a Command Prompt with Administrator privileges in Windows Vista and Windows 7

How to open a Command Prompt with Administrator privileges in Windows 8

How to open a Command Prompt with Administrator privileges in Windows 10

How to disable Windows hibernation

Changing power management options in the BIOS

Power management settings in a typical computer BIOS

If changing the operating system's power options does not fix the problem, you can try changing the APCI setting to the computer's Basic Input/Output System (BIOS). To access the BIOS, you will need to do so at the time the computer boots up. When the computer starts up, it usually displays a 'splash' screen with the manufacturer's name and logo. On this screen, you typically see something like 'Press F2 or Del or F10 for setup' (it varies from manufacturer to manufacturer). The 'splash' screen may only appear for a second or two and may take a few reboots to get into the BIOS. Once there, you need to look for Power Management Options. There you will find the different ACPI standby states.