How to Check TPM Status in Windows 11 (And What Each Result Means)

“This PC can’t run Windows 11” or “Compatible TPM cannot be found” usually means Windows can’t see a working TPM 2.0 security chip. To check TPM status in Windows 11, press Win + R, type tpm.msc, and read the Status and Specification Version fields. If the window says “The TPM is ready for use” and the version is 2.0, you’re done.

What Is TPM and Why Does Windows 11 Need It?

A Trusted Platform Module (TPM) is a security processor that generates, stores, and protects cryptographic keys. It can be a discrete chip on the motherboard, firmware running on the main processor, or a security processor integrated into the CPU. In UEFI settings, the firmware option often appears as AMD fTPM on AMD systems or Intel PTT (Platform Trust Technology) on Intel systems.

BitLocker, Windows Hello, and some game anti-cheat systems can use the TPM to protect keys or check device integrity. Windows 11 lists TPM 2.0 as a minimum system requirement (Microsoft Learn, Windows 11 requirements, retrieved October 11, 2026). If Windows can’t see an enabled TPM 2.0, the PC doesn’t meet that requirement. Often the TPM is simply turned off and can be enabled, which is why checking what Windows sees comes first.

Before You Start

• A PC running Windows 11 (most steps also work on Windows 10)
• An administrator account for the PowerShell step and for changing any TPM or firmware setting
• About five minutes. Method 1 alone answers the question for most people.
• Your BitLocker recovery key saved somewhere safe, if BitLocker is on. You only need it if you end up clearing the TPM.

These steps apply to Windows PCs only.

How to Check TPM Status in Windows 11

Each method shows something different. Use Method 1 for a quick answer. Use Method 4 when something is broken and you need to know exactly which part is failing.

Step 1: Open the TPM Management Console (tpm.msc)

• Press Win + R to open the Run dialog.
• Type tpm.msc and press Enter.

• Click Yes if a User Account Control prompt appears.
• In the TPM Management on Local Computer window, read the Status box in the middle pane.
• Scroll down to TPM Manufacturer Information and read Specification Version.

Expected result: On a Windows 11-ready PC, the Status reads “The TPM is ready for use.” and Specification Version reads 2.0. If you see “Compatible TPM cannot be found” instead, Windows isn’t detecting a TPM it can use. Microsoft’s TPM troubleshooting guide says to first make sure the TPM hasn’t been disabled or hidden from Windows in the UEFI settings, so jump to Fix #1.

The Manufacturer Name field shows who made the TPM. It doesn’t by itself prove whether you have a firmware TPM or a separate chip, so check your PC or motherboard maker’s specifications if you need to know.

Step 2: Check Windows Security > Device Security

This method doesn’t use any admin tools, so it’s the easiest one to talk a relative through over the phone.

• Click Start, type Windows Security, and open the Windows Security app.
• Click Device security.

• Under Security processor, click Security processor details.
• Read Specification version and the Status lines.

Expected result: You see a Specification version of 2.0, and none of the Status entries (such as attestation or storage) reports a problem (Microsoft Support, Device security in the Windows Security app, retrieved October 11, 2026). If there’s no Security processor section at all, Microsoft says the PC most likely lacks TPM hardware or the TPM isn’t enabled in UEFI. Continue to Step 3. If the section is there but something is wrong, click Security processor troubleshooting to see the specific error message Windows reports.

Step 3: Look in Device Manager > Security Devices

• Right-click Start and choose Device Manager.
• Expand Security devices.

Expected result: A Trusted Platform Module entry appears with no yellow warning icon.

• Entry missing: Most often the TPM is turned off or hidden in firmware, or the PC doesn’t have one. Firmware or driver problems can also keep it from appearing, so confirm with Step 1 or Step 4.
• Yellow warning icon: Windows sees the device but reports a problem with it. Double-click the entry and read the Device status message. Checking your PC maker’s support page for chipset driver and firmware updates is a reasonable next step. Microsoft also warns that a non-Microsoft TPM driver can stop the default TPM driver from loading.

Step 4: Run Get-Tpm in PowerShell

This is the most useful method for troubleshooting. It shows each stage of TPM setup separately.

• Right-click Start and choose Terminal (Admin). Click Yes at the UAC prompt.
• Run this command:

Get-Tpm

• Read the first five lines of the output. Microsoft’s Get-Tpm reference shows these properties in its example output:

Property	What it tells you
TpmPresent	Whether Windows detects a TPM on the computer
TpmReady	Whether the TPM meets Windows’ requirements (Microsoft’s reference defines it as compliance with Windows Server 2012 standards)
TpmEnabled	Generally indicates the TPM is turned on (Microsoft’s reference lists it without a definition)
TpmActivated	Generally indicates the TPM is activated (Microsoft’s reference lists it without a definition)
TpmOwned	Whether the TPM has been taken ownership of. Windows does this automatically, so you never need to create an owner password yourself

• Get-Tpm doesn’t list the TPM specification version. To see it, run this command:

Get-CimInstance -Namespace root\cimv2\security\microsofttpm -ClassName Win32_Tpm

The SpecVersion value is a comma-separated string, not a single number. It combines the TCG specification version with the revision and errata levels. Microsoft’s own example, “1.2, 2, 0”, describes a TPM implemented to TCG specification version 1.2, revision level 2, with no errata (Microsoft Learn, Win32_Tpm class, retrieved October 20, 2026). For the Windows 11 requirement, read the specification version: it must be 2.0. If you’d rather not decode the string, the Specification Version field in tpm.msc (Step 1) shows the same answer.

Expected result: Microsoft’s example output shows these five flags reading True, and on a Windows 11-ready PC SpecVersion starts with 2.0. Treat that as a reference point rather than a strict pass/fail test; the same example also shows RestartPending : True, so individual flags can vary. What matters most is TpmPresent, TpmReady, and the version.

What the flags tell you when something is wrong:

• TpmPresent : False: Windows doesn’t see a TPM. Most often it’s off or hidden in firmware, or the PC doesn’t have one.
• Present and enabled, but TpmReady or TpmOwned is False: The TPM is on, but Windows hasn’t finished setting it up. Windows normally initializes the TPM and takes ownership automatically, so restart first and check again. On a domain-joined work PC, Microsoft notes that setup can’t complete if policy requires saving TPM recovery information to Active Directory and the PC can’t reach a domain controller, so connect to the company network first. If it stays False, work through Fix #1 and Fix #2 before you consider anything else.
• RestartPending : True: Restart the PC, then run Get-Tpm again before you change anything.

Step 5: Check UEFI Mode and Secure Boot in System Information

• Press Win + R, type msinfo32, and press Enter.
• In System Summary, find BIOS Mode and Secure Boot State.

Expected result: BIOS Mode reads UEFI. System Information doesn’t confirm that a TPM is present or usable, and it isn’t a substitute for Steps 1 to 4. It does confirm two related Windows 11 requirements: UEFI mode and Secure Boot.

The actual TPM on/off switch is in your UEFI firmware. To get there, go to Settings > System > Recovery > Advanced startup > Restart now > Troubleshoot > Advanced options > UEFI Firmware Settings > Restart. The setting name depends on the manufacturer. Look for Security Device Support, TPM State, AMD fTPM, AMD PSP fTPM, Intel PTT, or Intel Platform Trust Technology.

What Each TPM Status Means

Use this table to match what Windows shows you to your goal.

What you see	What it means	Windows 11 upgrade	BitLocker / Windows Hello / anti-cheat	Next step
“The TPM is ready for use.”	Windows can use the TPM. This message alone doesn’t show the version	Pass only if Specification Version is 2.0	The TPM part of the requirement is met, but each feature or anti-cheat system can have other requirements	Confirm Specification Version
“The TPM is ready for use, with reduced functionality.”	The TPM works, but Windows can’t use all of its features. The cause varies (firmware, provisioning, or a specific feature such as attestation)	Check Specification Version separately	Depends on which feature is affected	Read the message under Windows Security > Security processor troubleshooting, then update BIOS/UEFI (Fix #2)
“Compatible TPM cannot be found”	Windows isn’t detecting a usable TPM. Microsoft says the PC may have a TPM that’s disabled	Fails until a TPM 2.0 is enabled	Unavailable until a TPM is enabled	Enable it in firmware (Fix #1)
Specification Version 1.2	Older TPM standard	Fails the official requirement	Varies by feature	Check whether your maker offers a TPM 2.0 firmware update for your exact model (Fix #2)
Firmware TPM (AMD fTPM or Intel PTT)	TPM provided by the platform firmware instead of a separate chip	Counts if Specification Version is 2.0	Treated the same as a discrete TPM of the same version	Nothing to fix

“The TPM is ready for use” only confirms that the TPM works. It doesn’t confirm the version. Always check Specification Version as well.

Tips and Troubleshooting

These fixes are listed from least to most invasive. Each one links to a full HDG guide, so the steps here are kept short.

Fix #1: Turn On TPM, fTPM, or PTT in UEFI Firmware

Use this fix for “Compatible TPM cannot be found“, a missing Device Manager entry, or TpmPresent : False.

• Restart into UEFI Firmware Settings using the path in Step 5.
• Find the TPM setting under the Security, Advanced, or Trusted Computing menu.
• Set it to Enabled, then save and exit.
• Back in Windows, run tpm.msc again to confirm the change.

The menu wording varies by PC maker. See Microsoft’s guide to enable TPM 2.0 in BIOS/UEFI for details.

Fix #2: Update Your BIOS/UEFI Firmware

Use this fix for “reduced functionality” or a TPM that reports version 1.2.

• Find the exact model on the Settings > System > About page.
• Download the latest BIOS/UEFI update from the PC or motherboard maker’s support site.
• Install it on AC power, and don’t interrupt it. If BitLocker is on, suspend it first.

Microsoft’s Windows Security guidance notes that a firmware update from the device maker can resolve some TPM support problems. For TPM 1.2, though, a BIOS update only helps if the manufacturer has released a TPM 2.0 firmware update for that exact model; a general BIOS update doesn’t turn TPM 1.2 hardware into TPM 2.0. If your manufacturer doesn’t offer one and the firmware has no TPM 2.0 option, the PC likely can’t meet the official requirement as it stands. Some desktop motherboards accept an add-on TPM 2.0 module, so check your board’s manual. Otherwise, a Windows 11-ready laptop or a motherboard upgrade is the realistic path.

Fix #3: Clear the TPM (Last Resort)

Only consider this on your own personal PC, after restarting and trying Fix #1 and Fix #2, when the TPM is present and enabled but TpmReady or TpmOwned still stays False, or when Security processor troubleshooting tells you to clear the TPM.

Don’t clear the TPM on a work or school PC unless your IT administrator tells you to. Microsoft gives that exact warning (Microsoft Learn, Troubleshoot the TPM, retrieved October 20, 2026).

Clearing the TPM can cause data loss. You lose all keys created in the TPM and any data protected by those keys, such as a virtual smart card or a sign-in PIN. Before you start, make sure you have a backup and a recovery method for anything the TPM protects:

• Back up your BitLocker recovery key if BitLocker is on. Save it to your Microsoft account, or write it to a USB flash drive.
• Sign in with an administrator account. Microsoft lists local administrator rights as the minimum for this procedure.
• Go to Windows Security > Device security > Security processor details > Security processor troubleshooting.
• Click Clear TPM and restart. You may be asked to press a key during the restart to confirm.

Always clear the TPM from Windows like this, not directly from the UEFI firmware. After the restart, Windows automatically prepares the TPM for use again. Expect to set up your Windows Hello PIN again, and keep your BitLocker recovery key handy in case Windows asks for it.

Help & Answers

FAQ

8 questions

How do I check if my PC has TPM 2.0?

Run tpm.msc and read Specification Version under TPM Manufacturer Information. It needs to say 2.0.

What does “Compatible TPM cannot be found” mean?

Windows isn’t detecting a TPM it can use. Often it’s turned off or hidden in UEFI firmware.

Less often, the PC doesn’t have one, or a firmware or driver problem is involved. Start with Fix #1.

What does “The TPM is ready for use” actually confirm?

It confirms Windows can use the TPM. It doesn’t confirm the version is 2.0, and it doesn’t guarantee that every feature or anti-cheat system will accept your PC, since those can have other requirements.

What’s the difference between TPM 1.2 and TPM 2.0?

TPM 2.0 is the newer standard and the version Windows 11 officially requires. A TPM 1.2 PC fails the Windows 11 check.

Are fTPM and Intel PTT the same as a TPM chip?

They’re firmware-based TPMs rather than a separate physical chip. Microsoft’s guide lists AMD fTPM switch, AMD PSP fTPM, Intel PTT, and Intel Platform Trust Technology among the UEFI option names for enabling the TPM. Once it’s on, check Specification version as Microsoft describes: if it’s less than 2.0, the device doesn’t meet the Windows 11 requirement (Microsoft Support, Enable TPM 2.0, retrieved October 20, 2026).

Can I check TPM status without PowerShell?

Yes. Windows Security and tpm.msc both show TPM status and the specification version, and Device Manager shows whether Windows sees a TPM device. Windows Security is the simplest option if you aren’t signed in as an administrator.

Is clearing the TPM safe?

It’s a troubleshooting step, not routine maintenance. Clearing the TPM deletes all keys created in it and any data protected by those keys, such as a virtual smart card or sign-in PIN. Back up anything the TPM protects, including your BitLocker recovery key, and never clear a work or school PC without your IT administrator’s instruction.

Does my PC need a TPM if it’s already running Windows 11?

If Windows 11 is running, it was either installed on supported hardware or installed by bypassing the check. Bypassed installs still boot, but Microsoft calls them unsupported. BitLocker, Windows Hello, and some anti-cheat systems can still rely on a working TPM either way (Microsoft Support, Windows 11 system requirements, retrieved October 11, 2026).

Didn't find your answer? Search our guides.

Search the site

Wrapping Up

tpm.msc answers the question for most people in about ten seconds. When something’s wrong, Get-Tpm is the more useful tool, because it shows exactly which stage is failing. Often, “Compatible TPM cannot be found” turns out to be fTPM or PTT switched off in firmware, not missing hardware. Watch for one warning sign: if the TPM keeps dropping out after every restart, or LockedOut reads True when nobody has been entering wrong PINs, check for a firmware update and contact your PC or motherboard maker before you clear anything.

Step	Action	Applies To
1	tpm.msc: Status and Specification Version	Everyone
2	Windows Security > Security processor details	Non-admin users
3	Device Manager > Security devices	Driver problems
4	Get-Tpm in an admin PowerShell window	Pinpointing failures
5	msinfo32 and UEFI firmware	Enabling TPM, UEFI and Secure Boot checks