How to Enable TPM 2.0 on Your Computer
Trust is an overused word, but when it comes to PC security, a Trusted Platform Model (TPM) is a hardware-based security feature that you can truly trust to enhance your computer’s security. For certain, technological developments and the constant evolution of AI integrated devices increase our efficiency and enjoyment of using PCs. That said, an increasingly internet and cloud reliant world is also open to attack from nefarious players. Malware and ransomware are on the rise year-on-year, with around 59% of organizations experiencing ransomware attack in 2023, and a staggering 93% of those attacks coming in the form of Windows-based executables.
Bearing the relentless tide of cybersecurity threats in mind, access to TPM 2.0 can help you to stay one step ahead of the bad guys. TPM 2.0 is essentially a hardware-based shield that stops unauthorized access to your system, protects sensitive data, and encrypts passwords. If your system runs Windows 11, then enabling TPM 2.0 is essential for comprehensive protection against cyberattacks and malware, as well as overall compatibility.
If you’re still clinging to Windows 10, then the news you need to know is that Microsoft will end support on October 14 2025. After this date, devices without TPM 2.0 will not be able to upgrade to Windows 11, and will no longer receive security updates. Scary stuff. But fear not! As always, we’re here to help. Read on to discover:
- What is TPM and TPM 2.0?
- Why you should enable TPM
- How to check if your PC has TPM 2.0
- Step-by-step instructions to enable TPM 2.0
What is TPM and TPM 2.0?
As we touched on above, TPM is short for Trusted Platform Module, a hardware-based security feature that became standard in CPUs and motherboards in 2016. TPM security chips generate and store cryptographic keys in a secure environment enacting device protection against cyberattacks. While it was great back in the day, the predecessor to TPM 2.0, namely TPM 1.2 only supports RSA and SHA-1, these are outdated cryptographic algorithms.
TPM 2.0 supports a wide range of cryptographic algorithms, providing increased resilience against constantly evolving security threats like firmware tampering and unauthorized software execution. For comprehensive protection against hackers and data breaches, TPM 2.0 is the only way to go.
Without going into too much technical detail, TPM is a secure cryptoprocessor, a chip that encrypts or scrambles data so only the right people can read it (protecting passwords, biometric data, and the like). Imagine it as a safe within your computer that stores and processes all your important stuff, making it harder for hackers to mess with or steal your data. Even if a hacker does gain physical access to your system, TPM 2.0 stores all your critical data in a Fort Knox-style safe house, so they’ll have a hard time getting ahold of the info. By now, perhaps you’re wondering which CPUs got TPM 2.0? Intel 8th Gen onwards and AMD Ryzen 2000 onwards feature firmware-based TPM, eliminating the need for a separate chip.
Why Should I Enable TPM?
Perhaps this next section should be titled “Why on earth would you not enable TPM?” If you run Windows 11, then enabling TPM 2.0 is essential for installing the OS, and for ongoing compatibility, as well as the security benefits discussed above. Let’s dig a little deeper into the security protection offered by the component. TPM 2.0 stores all of your important data in a tamper-resistant module, while BitLocker (Microsoft’s disk encryption tool) actually relies on TPM 2.0 to secure your files and prevent unauthorized access even if your device is stolen.
Firmware and boot-level malware attacks are also thwarted by trusty TPM 2.0, ensuring that your device starts up in a secure manner without being compromised by the baddies. Finally, TPM strengthens Windows Hello by enabling secure biometric authentication such as fingerprint and facial recognition. Many new PCs are TPM 2.0 pre-enabled, so it’s worth the hassle to verify and activate it for long-term protection from cyberattacks.
How Do I Know If My Computer Has TPM 2.0?
From here onwards, our journey of discovery into the world of TPM 2.0 gets slightly simpler and more hands-on. There are several ways to check if your Windows computer has TPM 2.0, simply navigate to:
- Hit Win + I to open Settings.
- Go to Update & Security > Windows Security > Device Security.
- Locate Security Processor Details to see if TPM 2.0 is enabled.
An alternative approach is to:
- Press Windows + R, then type tpm.msc and hit Enter to open the TPM management window.
- Check your TPM version under Status and Specification Version.
Business and enterprise users can check TPM status in the BIOS and UEFI firmware settings.
- Press Win + I to open Settings.
- Go to Update & Security > Recovery.
- Under Advanced Startup, click Restart now.
- Navigate to Troubleshoot > Advanced options > UEFI Firmware Settings, then press Restart.
- Restart your device, access the BIOS by hitting the hot key, then look for TPM settings in the Security tab.
How to Enable TPM 2.0 on Windows
If you’ve located TPM in your computer, but it is disabled, the steps to enable it are relatively simple:
- Restart your computer, enter the BIOS menu by hitting the hot key (F2, F10, etc).
- Navigate to the Security or Advanced Settings tab and locate TPM, Security Processor, or Intel PTT (Platform Trust Technology).
- Enable the TPM setting and save changes.
- Exit BIOS, your computer will automatically restart, and TPM 2.0 will be activated.
- To check that TPM 2.0 is enabled, press Windows + R, then type tpm.msc. If you’ve successfully enabled TMP, Windows will recognize it and grant access to security features like BitLocker and Secure Boot.
Time to Upgrade?
If you’ve checked your device and are now wondering how to get TPM 2.0 if you don’t have it, then perhaps it's time to upgrade to Windows 11? As we said before, Microsoft is ending its support for Windows 10 this October. If you’ve got TPM 1.2. there is a possibility you can upgrade to TPM 2.0 via a firmware update. For this you’ll need to check with your computer or motherboard manufacturer to see if an upgrade is on the cards.
By default, Windows 11 devices must support TPM 2.0, and without it you’re putting your computer and precious data at heightened risk of attack. Acer has hundreds of great Windows 11 laptops and desktops to meet every user’s requirements and budget. Do yourself a favor and upgrade today to experience the benefits of Windows 11 including the increased security provided by TPM 2.0.
Recommended Products
Edmund is an English copywriter based in New Taipei City, Taiwan. He is a widely published writer and translator with two decades of experience in the field of bridging linguistic and cultural gaps between Chinese and English.
Socials
|
|
|
|
