Trusted Platform Module Common Questions for Windows 11
Summary: Find answers to frequently asked questions about Trusted Platform Module (TPM) 2.0 for Windows 11, including its importance and upgrade requirements for Dell computers.
Instructions
TPM 2.0 is required to run Windows 11, as an important building block for security-related features. TPM 2.0 is used in Windows 11 for several features, including Windows Hello for identity protection and BitLocker for data protection. If you are considering upgrading to Windows 11, check to ensure TPM 2.0 is enabled on your device.
What is TPM?
TPM is a security technology that increases the computer security against software vulnerabilities. The TPM is used for multiple features that increase the security of your device:
- BitLocker Drive Encryption: Automatically encrypts the computer drive to keep your data safe.
- Data Execution Prevention: Prevents unauthorized applications like malware from running in memory.
- Windows Hello: Secure user authentication without a password.
- Secure Boot and Measured Boot: Block malicious drivers and rootkits from intercepting the boot process of the Operating System.
Does My Dell Computer Support TPM 2.0?
Dell computers that are shipped from 2015 onwards support TPM 2.0.
You can verify this in the Windows Device Manager:
- Right-click the Windows Start button.
- Click Device Manager.
- Expand the Security Device branch.
- You should see the Trusted Platform Module 2.0 entry.
Is TPM 2.0 Required for Windows 11?
Microsoft has a new requirement that TPM 2.0 or its equivalent be enabled before Windows 11 can be installed. To check and enable TPM capabilities on your computer, reference the Dell Knowledge Base article How to Enable the Trusted Platform Module (TPM).
Why TPM 2.0 Instead of TPM 1.2?
Version 2.0 provides higher security standards and better reliability.
Why Is There No TPM in BIOS?
The system BIOS is likely set to legacy mode. TPM 2.0 requires that the BIOS operates in native UEFI mode. Reference the Dell Knowledge Base article How to Enable the Trusted Platform Module (TPM) on how to enable TPM on your computer.
The TPM option can temporarily disappear. If this occurs, follow the steps below:
- If TPM is not present, update the system BIOS to the latest version available on the Dell Drivers & Downloads website.
- Power off the computer, then disconnect the AC power cable and leave the computer unplugged for about 30 seconds. Reconnect AC power to the computer and boot to the BIOS setup using the F12 one-time boot menu.
- To ensure that TPM is turned on, you must press F2 to enter System Setup. Then go to the Security section and check that TPM is set to On under the TPM security settings.
- If TPM is restored, proceed with normal system operation. If TPM is still missing from the BIOS setup, contact Dell Technical Support for further assistance.
Additional Notes:
- The version of security on your device — Intel PTT, AMD fTPM, or Microsoft TPM — depends on the BIOS installed on your computer.
- See the Dell Knowledge Base article Dell systems that can upgrade from TPM version 1.2 to 2.0 for a list of computers that can be updated from TPM 1.2 to 2.0.
What Are PTT and fTPM?
- PTT (Platform Trust Technology) is a firmware extension from Intel that supports Microsoft TPM requirements.
- fTPM (Firmware TPM) is a firmware technology from AMD that supports Microsoft TPM requirements.
- Windows 11 installs on computers with PTT, fTPM, or hardware TPM that meet the TPM 2.0 standard.
Regional Compliance & International Standards
Various ISO member countries — including Australia, Belgium, Canada, China, Czech Republic, Denmark, Finland, France, Ghana, Ireland, Italy, Japan, the Republic of Korea, Lebanon, Malaysia, Netherlands, Nigeria, Norway, the Russian Federation, South Africa, the United Arab Emirates, the United Kingdom, and the United States — approved the TPM 2.0 standard back in 2015. Local laws and regulations for the import and usage of cryptographic components in computer systems may vary.
The Eurasian Economic Commission #30 allows the import of computer systems with cryptographic devices since 2015.
In 2018, most computers shipped to the People's Republic of China that are preinstalled with Windows 10 shipped with PTT (for Intel CPUs) or fTPM (for AMD CPUs) and satisfy the TPM 2.0 requirements for Windows 11. Exceptions apply based on order configuration. Note: Some models may offer no, or only firmware TPM support (Intel PTT).
Follow the steps in this article to verify if your computer has TPM enabled. Contact your account team for assistance.
Additional Resources & Notes
-
TPM Firmware Downloads: For more information about updating drivers or firmware, see the Dell Knowledge Base article How to Update Drivers. On the Dell Drivers & Downloads website, the TPM firmware is located in the Security category (if your computer is compatible).
-
Troubleshooting: Learn how to Troubleshoot and Resolve Common Issues with Trusted Platform Module (TPM) and BitLocker for help with resolving common issues.
-
Compatibility List: Review Dell Computers Tested for Update to Windows 11.
-
TPM Standard Reference: For more information, reference the Trusted Computing Group TPM 2.0 Library Specification Approved as an ISO/IEC International Standard, published June 29, 2015.
-
Further Reading: TPM recommendations (Windows 10) — Microsoft 365 Security | Microsoft Docs · Dell systems that can upgrade from TPM version 1.2 to 2.0 · TPM 1.2 vs. 2.0 Features.
Tutorial on Dell Trusted Platform Module
Duration: 04:08
Closed captions: Available in multiple languages, click the Closed Caption icon and select the language that you want.
Enable Your Trusted Platform Module (TPM)
Duration: 03:49
Closed captions: Available in multiple languages, click the Closed Caption icon and select the language that you want.