How to Enable TPM 2.0 and Secure Boot to Install Windows 11?

If you try to upgrade your Windows 10 device to recently released Windows 11 build, you might get following Windows 11 TPM error message while running Update Assistant tool:

Following screenshot shows the error message displaying in Windows 10 device:

This error message occurs if your Windows 10 computer doesn’t have TPM 2.0 and Secure Boot features available or enabled in BIOS settings. Your computer system must contain TPM 2.0 chip and Secure Boot enabled to support and install Windows 11 as mentioned in minimum system requirements for Windows 11.

Windows 11 Minimum System Requirements or Hardware Specifications

TPM 2.0 is a small chip which comes built-in with new PC and laptops. If your computer system is not very old, there are chances that you have TPM 2.0 chip in your device.

Check out following exclusive article to learn what is TPM chip and how to check whether your computer has TPM chip or not:

How to Check Your Computer has TPM 2.0 for Windows 11?

If your Windows 10 computer contains TPM chip but you still receive above mentioned error message, you can fix the issue by enabling both TPM and Secure Boot options using BIOS Settings page.

Once you enable TPM and Secure Boot features in BIOS setup, the error message will disappear and you’ll be able to install or upgrade to Windows 11.

Following steps will help you in enabling TPM 2.0 and Secure Boot options in your Windows 10 computer:

STEP 1:

First of all we’ll need to enter BIOS/UEFI setup which will require restarting your device.

Follow the instructions given in following article to learn how to enter BIOS setup in your computer:

How to Enter BIOS Settings on Your Windows PC?

The BIOS settings screen will be different for different brand computers.

STEP 2:

Once you enter the BIOS setup screen, look for SECURITY tab or section.

Every BIOS setup has Security tab and this is the tab which will allow you to enable TPM and Secure Boot features.

PS: In some BIOS setup, you might get Advanced tab instead of Security tab.

You can use arrow keys on your keyboard to navigate between tabs and options. Some brands allow mouse use in BIOS setup screen.

Under Security tab, if your computer contains TPM chip, you’ll get an option to turn it on or off. The option label might be different in different brands. Some common names for TPM are:

• TPM
• fTPM
• IPTT (Intel Platform Trust Technology)
• Trusted Computing
• Trust Technology
• Security Chip
• TPM Support
• TPM Security
• TPM Device

If an option is present to enable/disable TPM, select Enabled or similar option as shown in following screenshot:

If your BIOS setup also allows to select version number of TPM, set the version number to 2.0.

Similarly, you’ll get an option to enable/disable Secure Boot feature. Select Enabled for Secure Boot as well.

Now save and exit from BIOS setup screen by selecting Exit option or by pressing F10 key or other options shown by your computer.

STEP 3:

Now after restart, try to run Windows 11 setup again via Windows Updates or other ways and this time you’ll not receive TPM or Secure Boot error messages and Windows 11 will install without any problem.

BONUS TIP: Can You Add TPM Chip to Your Computer?

You can also purchase and attach an external TPM 2.0 chip card to your motherboard if it supports. Check your device manufacturer website to learn whether your computer motherboard supports TPM cards. Or you can replace the old motherboard with a new motherboard which comes with TPM 2.0 chip. You can also install a modern Intel or AMD processor which comes with firmware-based TPM.

Also Check:

[Tip] Bypass Windows 11 TPM and Secure Boot Requirements Check to Install on Unsupported Hardware

How to Bypass “This PC can’t run Windows 11” Error and Disable Hardware Check on Unsupported Devices

Fix “This PC can’t Run Windows 11” Error Message While Installing Windows 11

Should You Install Windows 11 on Unsupported Hardware Devices?