TPM Error: This Device Cannot Use a Trusted Platform Module

If you see the error “This device cannot use a trusted platform module” in Windows Security, it means Windows cannot access the TPM (Trusted Platform Module) chip on your motherboard, or the chip is disabled, not initialized, or not recognized by the system. The fix usually involves enabling TPM in your BIOS/UEFI settings, clearing the TPM, or updating your chipset drivers. Below is a detailed breakdown of what this error means, why it appears, and how to resolve it.

What Is a Trusted Platform Module (TPM)?

A TPM is a dedicated hardware chip on your computer’s motherboard that stores cryptographic keys, passwords, and certificates in a secure, tamper-resistant environment. It is used for features like BitLocker drive encryption, Windows Hello, and secure boot. TPM 2.0 is a requirement for Windows 11, so this error can block upgrades or cause security features to fail.

There are two main types of TPM:

• Discrete TPM – a separate chip soldered onto the motherboard, common on desktop PCs.
• Firmware TPM (fTPM) – a TPM implementation built into the CPU’s firmware, common on laptops and newer AMD/Intel systems.

If your PC has neither, or the TPM is disabled in firmware, Windows will report that it cannot use a TPM.

Why Does This Error Appear?

The error typically appears for one of these reasons:

• TPM is disabled in the BIOS/UEFI settings.
• The TPM driver is missing or outdated.
• The TPM is in a “deactivated” or “disabled” state within Windows.
• The TPM has been cleared or reset, and Windows hasn’t re-initialized it.
• The motherboard’s TPM firmware is outdated.
• You have a system with a TPM header but no physical TPM module installed.

On some systems, especially custom-built PCs, the TPM is disabled by default. On others, a BIOS update may reset the setting.

How to Fix “This Device Cannot Use a Trusted Platform Module”

Follow these steps in order. Most often, the issue is simply that TPM is turned off in the BIOS.

Step 1: Check if TPM is Present and Enabled

1. Press Win + R, type tpm.msc, and press Enter.
2. If you see “Compatible TPM cannot be found,” the TPM is either disabled or not present.
3. If you see “The TPM is ready for use,” the TPM is working; the error may be from a different component.

Step 2: Enable TPM in BIOS/UEFI

1. Restart your PC and press the key to enter BIOS/UEFI (common keys: Del, F2, F10, Esc).
2. Look for a setting named TPM, Intel Platform Trust Technology (PTT), or AMD fTPM. It is usually under “Security,” “Trusted Computing,” or “Advanced.”
3. Set it to Enabled (or “Firmware TPM” for AMD).
4. Save and exit. The PC will reboot.

If you don’t see any TPM option, your motherboard may not support TPM, or it requires a separate TPM module (a small chip that plugs into a header on the board).

Step 3: Clear the TPM (if it’s stuck)

If the TPM is enabled but Windows still shows the error, you may need to clear the TPM. This resets the cryptographic keys and can fix corruption.

1. In Windows, open tpm.msc again.
2. Click “Clear TPM…” on the right side.
3. Restart the PC. Windows will re-initialize the TPM automatically.

Note: Clearing the TPM will disable BitLocker if you use it; you’ll need to re-enable it afterwards.

Step 4: Update Drivers and Firmware

• Check Windows Update for optional driver updates.
• Visit your motherboard or laptop manufacturer’s support page and install the latest chipset drivers and BIOS/UEFI update.
• After updating BIOS, re-enter BIOS and confirm TPM is still enabled.

Common Misconceptions About TPM Errors

One common misconception is that the error means your PC is permanently broken or incompatible. In most cases, it’s just a setting that needs to be toggled. Another is that TPM is only for business PCs – in reality, most consumer motherboards from the last several years include TPM support, but it may be off by default.

Another misconception: “TPM 2.0 is the same as TPM 1.2.” They are different versions; Windows 11 requires TPM 2.0. If your system only has TPM 1.2, you may need to enable “TPM 2.0” in BIOS if the option exists, or upgrade hardware.

When the Error Persists: Alternatives and Workarounds

If you’ve enabled TPM, updated drivers, and cleared the TPM, but the error remains, consider:

• Check if your CPU/motherboard actually supports TPM 2.0 – some older systems (pre-2016) may not.
• Install a discrete TPM module – if your motherboard has a TPM header (often labeled “TPM” or “SPI TPM”), you can buy a compatible module (e.g., a 14-pin or 20-pin module). Check your motherboard manual for the correct type.
• Use a software TPM – Windows 10 and 11 can use a virtual TPM in Hyper-V, but this is only for virtual machines, not physical systems.
• Bypass TPM for Windows 11 – there are unofficial registry tweaks to bypass TPM checks, but they are not recommended and may violate Microsoft’s requirements.

If you’re trying to upgrade to Windows 11 and your hardware lacks TPM 2.0, the only reliable solution is to replace the motherboard or PC.

Comparing TPM 1.2 vs 2.0

Feature	TPM 1.2	TPM 2.0
Release year	2011	2014
Algorithm support	SHA-1, RSA	SHA-256, ECC, RSA
Windows 11 requirement	No	Yes
Common on	Older business PCs	Most PCs from 2016 onward

If your system only has TPM 1.2, it cannot be upgraded to 2.0 via software; you would need a new TPM module or a newer motherboard.

Frequently Asked Questions

How do I know if my PC has TPM?

Press Win + R, type tpm.msc, and press Enter. If it says “Compatible TPM cannot be found,” your PC either has TPM disabled or doesn’t have one. You can also check in BIOS under “Security” or “Trusted Computing.”

Can I enable TPM without entering BIOS?

No, TPM is a hardware/firmware feature that must be enabled in the BIOS/UEFI. There is no Windows setting that can turn it on if it’s disabled at the firmware level.

Will enabling TPM erase my data?

Enabling TPM itself does not erase data. However, clearing the TPM will invalidate BitLocker keys, and you may need to re-enter a recovery key to access encrypted drives. Always back up important data before clearing TPM.

Why does my new PC show this error?

Many new motherboards ship with TPM disabled by default to avoid compatibility issues with older operating systems. Check your BIOS settings; enabling fTPM or PTT usually resolves it.

Is it safe to use a software TPM instead?

Software TPMs exist only in virtual machines (e.g., Hyper-V). For physical PCs, there is no software replacement that provides the same security. Using a software TPM outside a VM is not possible in standard Windows.

Can I bypass the TPM requirement for Windows 11?

There are unofficial registry edits that skip the TPM check during installation, but they are not supported by Microsoft and may cause instability or security issues. It’s safer to upgrade hardware or use a PC that meets the requirements.

Related

• Internet May Not Be Available? Fixes & Causes
• Smart Plug Trade-Offs: 3 Things to Weigh
• Agentic Engineering Beyond Vibe Coding