The Trusted Platform Module 2.0 is needed for Windows 11. (TPM 2.0). Windows 11 uses the TPM 2.0 chip, which is designed to handle cryptographic tasks, for a number of its security features. For example, Windows 11 uses the TPM 2.0 chip on your PC when you sign in with your fingerprint or face using Windows Hello and when encrypting data.
What Is Windows 11’s TPM?
Trusted Platform Module (TPM) is both an international standard for a microprocessor designed to do security tasks and a chip that meets those standards. When you hear that a PC has TPM, it means that it has a chip that meets the TPM standards or that it has firmware that lets the main CPU do the same things. Most of the time, the TPM chip is built right into the motherboard of a PC. However, you can also add TPM to a PC by installing an expansion card.
The TPM standard was made by a group of technology companies, including PC makers like IBM and HP, chip makers like Intel, and software companies like Microsoft. The group put out TPM 1.0 in 2001. TPM 1.2 came out in 2009, and TPM 2.0 came out in 2014.
The point of the TPM standard is to make sure that any PC with a TPM chip can do certain security tasks. For example, a chip that meets the TPM standard needs to have a random number generator, be able to make cryptographic keys, and be able to encrypt and decrypt data.
TPM 2.0 Is What?
TPM 2.0 is the version of the TPM standard that came out in 2014. When Windows 11 came out, it was the most recent version of the standard. The term is also used to talk about chips that meet the standard. When you hear that a computer needs TPM 2.0, it means that it needs a chip or software that meets the TPM 2.0 standard.
TPM 2.0 can encrypt and decrypt data and verify the authenticity of hardware, among other cryptographic tasks. Most of the time, you can turn on TPM 2.0 in the UEFI of computers that don’t have a dedicated TPM 2.0 chip but do have TPM 2.0 firmware.
TPM 2.0 came out in 2014, so computers made before then don’t have it. A computer can get TPM 2.0, though, by installing an expansion card. You can also emulate TPM 2.0, which is how you can use Parallels to run Windows 11 on a Mac.
What Does Windows 11’s Tpm 2.0 Do?
In Windows 11, TPM 2.0 takes care of a lot of security-related tasks, and it starts as soon as you turn on your computer. During the boot process, Windows 11 checks the integrity of the operating system with the TPM chip. This is done before Windows loads. If it finds something wrong, it stops the boot process and lets you fix Windows so that you don’t load an operating system that may have been changed without your knowledge.
If you use Windows Hello, the TPM 2.0 chip also helps you sign in to Windows. The chip is important for encrypting and storing your biometric data, which is made up of your fingerprint or a scan of your face. When you try to sign in to Windows, the record is checked against your biometric data.
Once you’re signed into Windows 11, TPM 2.0 lets anti-malware software check the integrity of Windows 11 in the same way that the system is checked during the boot process. Malware doesn’t start running until Windows is loaded, or it loads at the same time as Windows. This means that your anti-malware can find rootkits and other bad software and get rid of them.
How to Tell if Your Computer Has Tpm
Your computer may have TPM 2.0 if it was made after 2014. If it was built within the last few years, this feature is likely to be there. If you aren’t sure, the Windows 11 compatibility check is the best way to find out.
You can also go to Update & Security > Windows Security > Device Security in Windows Settings to see if you have a TPM. If you have a TPM, look for the Specification Version, which will say 1.0, 1.2, or 2.0. If you don’t have a TPM at all, the security processor details section will be empty.
What to Do in The Absence of Tpm 2.0
If your PC lacks TPM 2.0, you should continue to use Windows 10. There is an unsafe workaround that will allow you to install Windows 11 on a PC without TPM 2.0. Microsoft won’t give updates and support to users who use the bypass method to install Windows 11 on a PC without TPM 2.0, and many Windows 11 security features won’t function; therefore, utilizing the bypass method leaves you fundamentally less secure, both now and in the future.
If you can find a compatible expansion card for your motherboard, you can install TPM 2.0 on a computer that does not already have it. You can install the card and enable TPM 2.0 in the BIOS or UEFI if you choose this path. Before you do so, however, you should ensure that your computer already supports firmware TPM 2.0. This can be accomplished by loading the UEFI and looking for an option to enable TPM 2.0.
After installing a TPM 2.0 card or enabling it in the UEFI, upgrading to Windows 11 is straightforward. But, if you are unable to install TPM 2.0 to your system, you should keep with Windows 10 for as long as Microsoft supports it.