[SOLVED] Enabling TPM 2.0 in Bios

[R3kki]

Hello, Windows 11 released today.
I am wondering where can I enable TPM 2.0. in Bios with gigabyte z370 h3 motherboard. I have newest version on Bios installed. I didn't find anything in Bios, that will enable TPM 2.0.
Thank you for any advice.

 

[kerberos_20]

in bios under peripherals, its called intel platform trust technology (ptt)

 

[ern88]

What is your system specs? What was the release date of the BIOS?

 

[R3kki]

in bios under peripherals, its called intel platform trust technology (ptt)

Thank you, I have it enabled and tried install windows 11. It says that does not reach requirements. How do I check if TPM 2 is enabled?


Anyway my specs are 16gb ram, i7-9700k, rtx 2060 super

 

[kerberos_20]

Thank you, I have it enabled and tried install windows 11. It says that does not reach requirements. How do I check if TPM 2 is enabled?


Anyway my specs are 16gb ram, i7-9700k, rtx 2060 super

win + R and type in tpm.msc, then press enter
that window would tell you TPM status

 

[R3kki]

win + R and type in tpm.msc, then press enter
that window would tell you TPM status

Yep, I have that. But still in the installation assistant it says that this computer does not meet the requirements.

 

[sjenvey777]

I managed to do mine fine. However trying to upgrade my Parents PC and I cannot seem to find TPM 2.0,

My parent's computer is using a Gigabyte GA-Z97P-D3 motherboard. Not sure if it's to old or something. Any help, Sorry I don't want to create another thread as I imagine it will be filled with these in the next few days.

Upon looking, I went into PowerShell (Run as admin) and type "get-tpm" and my parents computer everything comeback false. So I'm guessing they do not have TPM 2.0

 

[bmaz121]

Let's clear up the confusion. A PC needs TPM in three places. 1: CPU, 2:Motherboard module, and 3: the Bios. So, what are the possible configs. The CPU has TPM, so no Motherboard TPM is needed. The Motherboard has TPM either built in or an added chip plugged in so, no CPU TPM is needed. OK, which of these is true?

 

[kerberos_20]

Let's clear up the confusion. A PC needs TPM in three places. 1: CPU, 2:Motherboard module, and 3: the Bios. So, what are the possible configs. The CPU has TPM, so no Motherboard TPM is needed. The Motherboard has TPM either built in or an added chip plugged in so, no CPU TPM is needed. OK, which of these is true?

you only need one physical TPM, most CPUs have it built in, if its not there, then you need to plug it into TPM mainboard slot (but those are all EOL coz CPUs already has them, so not really point to make them)
once you have your physical TPM, then you can enable it in bios, secure boot is not needed for TPM
TPM combined with usb keys can effectively lock your system from unatorized access
secure boot enhances that to lock boot
you will still need bios supervisor password, or all those security stuffs are pointless

 

[Endre]

Yep, I have that. But still in the installation assistant it says that this computer does not meet the requirements.

For your PC to be Win11 compatible, you need more than just TPM 2.0.
You also need the following:

1. UEFI BIOS.
2. Secure boot enabled.
3. GPT partitions (instead of MBR).
4. DirectX 12 compatible video card.
5. 4GB RAM.
6. 64GB storage.
   7. 8th Gen Intel CPU (or newer).

 

[froggy8]

sorry to hijack this thread but when i did a windows update, my pc said that its not ready for windows 11 or something like that. but when i updated my bios, it automatically enabled my tpm which i didnt ant it to if its like windows 10 when they installed it without my permission.

 

[kerberos_20]

sorry to hijack this thread but when i did a windows update, my pc said that its not ready for windows 11 or something like that. but when i updated my bios, it automatically enabled my tpm which i didnt ant it to if its like windows 10 when they installed it without my permission.

win11 wont install on its own, it acts as cumulative update (21H2), so it will be there untill you manualy update it
people still runnin older win10 builds...for now micro$oft doesnt enforce win11

 

[joeldf]

For your PC to be Win11 compatible, you need more than just TPM 2.0.
You also need the following:

1. UEFI BIOS.
2. Secure boot enabled.
3. GPT partitions (instead of MBR).
4. DirectX 12 compatible video card.
5. 4GB RAM.
6. 64GB storage.
   7. 8th Gen Intel CPU (or newer).

2. Secure boot CAPABLE...

...is the actual requirement. Nothing in the Win 11 requirement says it has to actually be enabled.

 

[Endre]

2. Secure boot CAPABLE...

...is the actual requirement. Nothing in the Win 11 requirement says it has to actually be enabled.

CSM must be disabled.
Secure boot must be enabled.
(Intel PTT can’t be enabled in CSM mode).

That’s the way Win11 is meant to be used.

 

[kerberos_20]

2. Secure boot CAPABLE...

...is the actual requirement. Nothing in the Win 11 requirement says it has to actually be enabled.

true, secure boot is not needed, but uefi + tpm is necesary to be secure boot capable
and things like valorant enforcing secure boot to be enabled may pop more offten

 

[kerberos_20]

CSM must be disabled.
Secure boot must be enabled.

That’s the way Win11 is meant to be used.

https://support.microsoft.com/en-us...ure-boot-a8ff1202-c0d9-42f5-940f-843abef64fad
nope, u read that wrong

While the requirement to upgrade a Windows 10 device to Windows 11 is only that the PC be Secure Boot capable by having UEFI/BIOS enabled, you may also consider enabling or turning Secure Boot on for better security.

 

[joeldf]

CSM must be disabled.
Secure boot must be enabled.

That’s the way Win11 is meant to be used.

I'll find out in a week or so when I finally take the update plunge. PC Heath Check says I'm good to go without enabling secure boot.

 

[joeldf]

true, secure boot is not needed, but uefi + tpm is necesary to be secure boot capable
and things like valorant enforcing secure boot to be enabled may pop more offten

And I'm guessing that it's either not having UEFI or a GPT partition on the primary as being the issue for the @froggy8 .

 

[kerberos_20]

sorry to hijack this thread but when i did a windows update, my pc said that its not ready for windows 11 or something like that. but when i updated my bios, it automatically enabled my tpm which i didnt ant it to if its like windows 10 when they installed it without my permission.

thats nothing new...microsoft forced bios updates dated around 2018 to have SVM (virtualisation) enabled as default bios option (windows security rule since win 1809)
bios settings enabled by default, which are required for never OS helps new people avoiding touching bios settings, which can mess up whole system if you do it wrong
TPM itself does nothing...just swap CPU and all security gone

 

[Endre]

Good luck with that!

You can’t enable Intel PTT (TPM 2.0) unless you first fisable CSM and enable Secure Boot.

Win11 can run without TPM 2.0, but you might not receive updates.

 

[joeldf]

Good luck with that!

You can’t enable Intel PTT (TPM 2.0) unless you first fisable CSM and enable Secure Boot.

Win11 can run without TPM 2.0, but you might not receive updates.

PTT is enabled in my BIOS, and CSM is disabled. Secure boot is not enabled, but the option is there for it. According to Win 11 requirements, that all you need.

 

[kerberos_20]

tpm can be enabled with legay bios (CSM), but windows (8 up to 10) will just say that tpm is running with limited functions
windows 8 had tpm requirement for OEMs...so it worked in hybrid mode (back in win8 era uefi wasnt common...too many legacy hardwares), win10 can work with tpm and csm aswell