TPM Device Not Detected in Windows 11: How to Fix It (2026)

You opened tpm.msc, got “Compatible TPM cannot be found,” and now Windows Hello won’t work, BitLocker is throwing fits, or the Windows 11 upgrade checker is blocking you with a vague security chip error. Annoying, especially if your PC was fine yesterday. The good news: the chip itself is almost certainly healthy. It’s either been switched off in your BIOS or the driver has gone sideways.

This guide covers every fix in order, from a 30-second status check to driver reinstalls and BitLocker recovery. Start at the top.

What Is TPM, and Why Does Windows 11 Need It?

TPM stands for Trusted Platform Module, a small security chip (or a firmware equivalent built into your processor) that stores encryption keys, protects login credentials, and verifies your PC hasn’t been tampered with at startup. Windows 11 requires TPM version 2.0. Without it, the Windows 11 upgrade is blocked outright. Windows Hello biometric sign-in and PIN are also degraded or unavailable (though a PIN can work without TPM in some configurations), and BitLocker loses its TPM-backed key protector, falling back to a password or USB key instead.

Many newer PCs have TPM 2.0 built in. On Intel systems it’s called Intel PTT (Platform Trust Technology). On AMD systems it’s AMD fTPM (Firmware TPM). Both live inside the processor, so no separate chip is needed. The catch is that some manufacturers ship PCs with TPM disabled by default, and BIOS updates can silently reset that setting back to off.

Quick Diagnosis: Check Your TPM Status First

Before touching any settings, spend two minutes confirming exactly what Windows can see.

Step 1: Run tpm.msc

• Press Windows key + R to open the Run dialog.
• Type tpm.msc and press Enter.

• Read the status message in the center panel.

What the results mean:

tpm.msc message	What it means
“The TPM is ready for use” + Version 2.0	TPM is healthy, skip to the driver or Hello/BitLocker sections if you still have issues
“Compatible TPM cannot be found”	TPM is disabled in BIOS or not present, start with Fix #1
“The TPM is ready for use” + Version 1.2	TPM is on but the wrong version, check BIOS for a version switch
TPM console opens but shows errors or warnings	Driver issue, go to Fix #4

Step 2: Check Device Manager

• Right-click the Start button and select Device Manager.
• Look for a Security Devices category in the list.
• Expand it, you should see Trusted Platform Module 2.0 listed.

• No “Security Devices” section at all → This usually means TPM is disabled or hidden at the firmware level, but it can also result from Device Manager view filters, a missing or corrupted driver, or an OS-level enumeration problem. Start with Fix #1, but if BIOS already shows TPM as enabled, move to Fix #4 before assuming a firmware issue.
• TPM listed with a yellow warning triangle → This most commonly points to a driver problem, but can also indicate a firmware or hardware issue. Start with Fix #4; if the driver reinstall doesn’t resolve it, check for a BIOS update (Fix #10) before assuming hardware failure.
• TPM listed cleanly → Windows sees the chip. If issues remain, jump to Fix #6 (Windows Hello) or Fix #7 (BitLocker).

Quick-Reference Troubleshooting Table

Symptom	Likely Cause	Fix to Try
tpm.msc says “Compatible TPM cannot be found”	TPM disabled in BIOS	Fix #1, #2, or #3
No Security Devices section in Device Manager	TPM disabled in BIOS or driver/OS issue	Fix #1, #2, or #3; then Fix #4 if BIOS shows TPM enabled
Yellow warning triangle on TPM in Device Manager	Most often a driver issue; can also be firmware or hardware	Fix #4; if unresolved, check Fix #10
Windows Hello unavailable after BIOS update	TPM reset to off by update	Fix #1 or #2, then Fix #6
BitLocker asks for recovery key on every boot	TPM state changed or cleared	Fix #7
PC Health Check blocks Windows 11 upgrade	TPM off or version 1.2	Fix #1, #2, or #3
All fixes tried, TPM still not detected	Possible hardware fault	Fix #10

Common Issues and Solutions

Fix #1: Enable TPM in BIOS, Intel Systems (Intel PTT)

Intel PTT is a firmware-based TPM available on many modern Intel platforms. Intel 8th-generation and newer CPUs are the processors officially supported for Windows 11, and all of them include PTT. It’s functionally identical to a physical TPM chip for all Windows 11 purposes, and it lives inside the CPU rather than on a separate module.

• Restart your PC.
• As the PC starts, press the BIOS entry key for your manufacturer: F2 (Dell, ASUS, Acer), Delete (MSI, Gigabyte), F10 or Esc then F10 (HP), F1 or F2 (Lenovo). The key usually flashes on screen during startup.
• Navigate to the Advanced or Security tab using the arrow keys.
• Look for Intel Platform Trust Technology (PTT), TPM Device, or Security Device Support.
• Change the value to Enabled.
• Press F10 to save and exit.
• Let Windows boot normally, then reopen tpm.msc to confirm it now says “The TPM is ready for use.”

Tip: If you can’t find the setting, check the Security tab first, then Advanced. Some BIOS versions bury it under Platform Configuration or Onboard Devices.

Fix #2: Enable TPM in BIOS, AMD Systems (AMD fTPM)

AMD fTPM is AMD’s built-in firmware TPM, available on Ryzen processors. It meets the Windows 11 TPM 2.0 requirement with no physical chip required.

• Restart and enter BIOS using the same key method from Fix #1.
• Navigate to Advanced > AMD CBS (AMD Core Boot Settings), or look for a Trusted Computing section.
• Find AMD fTPM Switch or TPM Device Selection.
• Set it to Enabled or AMD CPU fTPM.
• If you see a choice between AMD CPU fTPM and Discrete TPM, pick AMD CPU fTPM unless you have a separately installed physical module.
• Press F10 to save and exit.
• After Windows boots, run tpm.msc to verify.

Note: Some AMD systems warn that enabling fTPM may cause occasional stuttering on certain workloads. This affects a small number of older Ryzen platforms and most users never see it. If you do, check for a BIOS update from your motherboard manufacturer.

Fix #3: Enable TPM by Manufacturer, Dell, HP, and Lenovo

If you’re on a branded system, the BIOS layout is more predictable. Here’s exactly where to look on the three most common brands.

Dell:

• Restart and press F2 at the Dell splash screen.
• Navigate to Security > TPM 2.0 Security.
• Check the box or toggle labeled TPM On.
• Confirm TPM 2.0 is selected in the version field (not TPM 1.2).
• Click Apply, then Exit.

HP:

• Restart and press F10 (or Esc, then F10) to enter BIOS Setup.
• Navigate to Security > TPM Embedded Security.
• Set TPM Device to Available.
• Set TPM State to Enabled.
• Press F10 to save and exit.

Lenovo (ThinkPad and IdeaPad):

• Restart and press F1 or F2 to enter BIOS. On some ThinkPads, press Enter first, then F1.
• Navigate to Security > Security Chip.
• Set Security Chip Type to TPM 2.0.
• Set Security Chip to Active or Enabled.
• Press F10 to save and exit.

After rebooting from any of these, run tpm.msc to confirm.

Fix #4: Update or Reinstall the TPM Driver

If tpm.msc still shows an error after enabling TPM in BIOS, or Device Manager is showing a yellow triangle, the Windows TPM driver is the most likely culprit, though firmware and hardware issues can produce the same symptom. A missing driver can also cause the entire Security Devices category to disappear from Device Manager even when TPM is enabled in BIOS, so this fix is worth trying any time the section is absent and BIOS already shows TPM as on.

To update the driver:

• Right-click Start and select Device Manager.
• Expand Security Devices.
• Right-click Trusted Platform Module 2.0 and select Update driver.
• Choose Search automatically for drivers.
• Let Windows find and install any available update.

If the update finds nothing new, reinstall the driver instead:

• Right-click Trusted Platform Module 2.0 and select Uninstall device.
• If a checkbox appears for “Attempt to remove the driver for this device,” check it.
• Click Uninstall.
• Restart your PC. Windows will automatically reinstall the TPM driver on boot.
• Open tpm.msc to confirm the status.

Also check Windows Update (Settings > Windows Update > Check for updates) for optional driver updates. TPM firmware patches sometimes come through here.

Fix #5: Access BIOS via Windows 11 Advanced Startup (No Keyboard Shortcut Needed)

If your PC boots too fast to catch the BIOS key, Windows 11 has a built-in way to get there.

• Open Settings (Windows key + I).
• Go to System > Recovery.
• Under Advanced startup, click Restart now.

After the PC restarts to the blue recovery menu, select Troubleshoot > Advanced options > UEFI Firmware Settings > Restart.

Your PC restarts directly into BIOS. Apply the TPM steps from Fix #1, #2, or #3.

Fix #6: Re-enroll Windows Hello After Fixing TPM

Windows Hello stores its authentication data in TPM. Once you fix the TPM error, Hello doesn’t automatically reconnect, so you have to re-enroll manually.

• Confirm tpm.msc shows “The TPM is ready for use” before continuing.
• Open Settings > Accounts > Sign-in options.

Under Windows Hello, click the method you want to restore (Face, Fingerprint, or PIN).

Click Set up (or Add for PIN) and follow the on-screen steps.

If a Hello option still shows as unavailable, restart once more and return to this page.

Fix #7: Handle BitLocker Recovery Key Prompts Caused by TPM

BitLocker stores its drive encryption key inside TPM. If TPM changes state because it was disabled, cleared, or reset by a BIOS update, BitLocker enters recovery mode to protect your data. This is expected behavior, not a sign your drive is damaged.

If BitLocker is asking for a recovery key at boot:

• At the blue BitLocker recovery screen, you need your 48-digit recovery key.
• Find it by signing into your Microsoft account at account.microsoft.com/devices/recoverykey from another device.
• Enter the recovery key to boot into Windows.
• Once inside Windows, fix the underlying TPM error using the BIOS steps above.
• After TPM is working again, BitLocker should resume normal operation without prompting for the key.

If BitLocker won’t enable because TPM isn’t detected:

• Fix the TPM detection issue first (Fix #1 through Fix #4).
• Once tpm.msc confirms TPM is ready, go to Settings > Privacy & Security > Device encryption and turn it on, or set it up through Control Panel > BitLocker Drive Encryption.

Important: Always save your BitLocker recovery key before making any BIOS or TPM changes. Back it up from Control Panel > BitLocker Drive Encryption > Back up your recovery key.

Fix #8: Fix the Windows 11 Upgrade Block Caused by TPM

If PC Health Check is blocking your Windows 11 upgrade over TPM 2.0, the cause is almost always TPM being disabled or running version 1.2 in BIOS.

• Run tpm.msc to check your current TPM version.
• If the console shows Specification Version: 1.2, re-enter BIOS and look for a TPM Version or Security Chip Type setting. Switch it to 2.0 if available.
• If TPM is simply disabled, enable it using Fix #1, #2, or #3.
• After rebooting, re-run PC Health Check. The TPM block should be gone.

Note: Also confirm that Secure Boot is enabled in BIOS. Windows 11 requires both TPM 2.0 and Secure Boot. Look for it under the Boot or Security tab and set it to Enabled.

Fix #9: Clear TPM (Last Resort Before Hardware Diagnosis)

Clearing TPM resets it to a factory-blank state. This can fix persistent initialization errors that survive driver reinstalls and BIOS toggles. It’s a significant step, so read the warning before you proceed.

⚠️ Warning: Clearing TPM permanently deletes all keys stored in it, including BitLocker encryption keys. If BitLocker is active on any drive, save your recovery key first or you risk losing access to your data. Find it at account.microsoft.com/devices/recoverykey.

• Open Windows Security (search for it in the Start menu).
• Go to Device Security > Security processor details.

• Click Security processor troubleshooting.

Click Clear TPM.

Click Clear and restart to confirm.

After the PC restarts, run tpm.msc to verify TPM is detected and ready.

Re-enroll Windows Hello (Fix #6) and confirm BitLocker status.

Fix #10: When to Seek Professional Hardware Support

You’ve worked through every fix and tpm.msc still says “Compatible TPM cannot be found.” Before calling it a hardware failure, do one more thing: update your system BIOS to the latest version from your manufacturer’s support website. BIOS updates frequently fix firmware TPM bugs, and this quietly resolves a surprising number of cases that survive everything else. Check our guide on how to update your BIOS safely before proceeding.

If a BIOS update doesn’t help, you’re likely looking at an actual hardware issue. That’s rare, but it happens.

Signs that point to hardware:

• TPM was never detected on a brand-new or factory-reset PC, even after enabling it in BIOS.
• BIOS shows no TPM or fTPM option at all. The setting is completely absent, not just disabled.
• The TPM entry appears and disappears randomly in Device Manager across reboots.
• You’re on a desktop with a discrete TPM module that may have come loose from its header.

What to do:

• Contact your PC manufacturer’s support line. Dell, HP, and Lenovo all have dedicated hardware support channels.
• For desktop users with a physical TPM header on the motherboard, a technician can check whether the module is seated correctly or has failed.
• Firmware TPM failures on laptops typically point to a motherboard-level issue and may require a board replacement under warranty.

Settings to Check

These are the most commonly involved settings in TPM detection failures:

• TPM State (BIOS/UEFI): Under Security or Advanced. Must be set to Enabled.
• Intel PTT: Under Advanced > Platform Trust Technology on Intel systems. Set to Enabled.
• AMD fTPM: Under Advanced > AMD CBS > Trusted Computing. Set to Enabled or AMD CPU fTPM.
• Secure Boot: Under Boot or Security in BIOS. Set to Enabled alongside TPM.
• TPM Driver (Device Manager): Device Manager > Security Devices > Trusted Platform Module 2.0. Should show no warning icons.
• Windows Security, Device Security: Settings > Privacy & Security > Windows Security > Device Security. Shows a plain-language TPM health status.

Prevention Tips

• Save your BitLocker recovery key before any BIOS update. BIOS updates are the single most common trigger for unexpected TPM resets. Keep the key in your Microsoft account and a printed backup somewhere sensible.
• Check TPM status after every BIOS update. Run tpm.msc after any firmware update to confirm TPM is still enabled and reporting correctly.
• Don’t clear TPM unless you have a specific reason. It’s irreversible and triggers BitLocker recovery mode. It’s a last resort, not routine maintenance.
• Enable Secure Boot alongside TPM. Both are required for Windows 11. Keeping both on prevents a whole category of upgrade-block and boot-integrity issues.
• Keep Windows Update current. TPM driver updates occasionally come through as optional updates. Checking monthly prevents driver drift.

Wrapping Up

For most people, this ends at Fix #1 or Fix #2. TPM got switched off in BIOS, usually by a firmware update, and turning it back on takes under five minutes. If that doesn’t do it, the driver reinstall in Fix #4 handles most of what’s left. The BitLocker and Windows Hello issues in Fix #7 and Fix #6 typically sort themselves out once the underlying TPM problem is fixed. They’re symptoms, not separate faults.

If you’ve genuinely tried everything and TPM still won’t show up, update your BIOS before assuming the hardware is dead. Firmware bugs are a more common culprit than most people expect, and a BIOS update fixes them without any drama.