Checking status… Hyderabad doorstep laptop repair
How-To Guides

How to enable TPM 2.0 in BIOS for Windows 11 (HP, Dell, Lenovo)

LR LRW Engineer Team ~5 min read

Key takeaways

  • Windows 11 requires TPM 2.0 — check via tpm.msc in Windows before entering BIOS; it may already be enabled.
  • Intel laptops use PTT (Platform Trust Technology); AMD laptops use fTPM — both are firmware-based TPM and work without a physical chip.
  • The TPM setting in BIOS is named differently by brand: HP calls it TPM Embedded Security or PTT, Dell calls it TPM 2.0 Security, Lenovo calls it Security Chip.
  • Enabling TPM does not affect existing data — it is a passive security module until you specifically enable BitLocker or Windows Hello.

Does your laptop have TPM 2.0 enabled?

Short answer: Most laptops built after 2017 have TPM hardware but it is disabled in BIOS by default. Check first (tpm.msc in Windows), then enable it in BIOS — takes under 5 minutes and does not affect your existing data or software. Windows 11's TPM 2.0 requirement trips up many users upgrading from Windows 10 — 70% of PC Health Check failures in India are TPM-related, not hardware age.

How to enable TPM 2.0 for Windows 11

Step 1: Check if TPM is already enabled

Press Windows + R, type tpm.msc, press Enter. The TPM Management console opens. If it shows The TPM is ready for use with Version 2.0, TPM is already enabled — you do not need to enter BIOS. If it shows Compatible TPM cannot be found, proceed to Step 2. Also run the PC Health Check app (downloadable from microsoft.com) which gives a full Windows 11 compatibility report and specifically flags TPM status.

Step 2: Find the TPM setting in BIOS

Enter BIOS for your brand (F10 for HP, F2 for Dell, F1 for Lenovo ThinkPad). Navigate to the Security tab. The setting name varies:

  • HP laptops: Security → TPM Embedded Security (set to Available) or Security → PTT (Platform Trust Technology, for Intel CPUs). On HP EliteBook: Security → TPM Device.
  • Dell laptops: Security → TPM 2.0 Security (toggle On). Dell uses PTT for Intel and AMD fTPM for AMD Ryzen.
  • Lenovo ThinkPad: Security → Security Chip → Security Chip Type (TPM 2.0) → Security Chip (Active). On Lenovo IdeaPad/Yoga with AMD Ryzen: Security → AMD fTPM (Enable).
  • Asus: Advanced → Trusted Computing → TPM Device Selection (set to PTT for Intel or AMD CPU fTPM for AMD).
  • Acer: Security → Trusted Platform Module (TPM) → Enable.

Step 3: Save and verify

Press F10 to save and exit BIOS. After Windows restarts, run tpm.msc again — it should now show The TPM is ready for use with Version 2.0. If it still shows not found, check the BIOS setting again — some HP and Dell models require a supervisor password before the TPM setting becomes editable. If the BIOS shows the option as grayed out, set a BIOS password first, then return to the TPM setting.

Step 4: The India angle — Windows 10 to 11 upgrade wave

India has a very large installed base of Windows 10 laptops — many purchased for WFH during 2020–2022 — that are now eligible for Windows 11 upgrades. The most common Windows 11 upgrade blocker is not hardware age but a disabled TPM. Enabling TPM costs nothing and takes 5 minutes. After enabling TPM, re-run PC Health Check — if the only remaining blocker was TPM, the upgrade path opens immediately. Also see our guide on Secure Boot settings (Windows 11 also requires Secure Boot enabled) and our Windows 10 vs 11 migration guide for what changes after upgrading. If BIOS access itself is the problem, our BIOS service can configure TPM settings during a doorstep visit.

When to call a laptop repair service

When DIY ends

Seek professional help if: the TPM option is completely absent from BIOS (laptop may be too old — pre-2015 CPUs), BIOS shows the TPM setting but enabling it causes the laptop to fail to boot, or you need both TPM and Secure Boot enabled and BIOS changes seem to conflict.

Typical cost in India

BIOS configuration service (TPM + Secure Boot + Windows 11 readiness check): ₹500–₹1,000. Windows 11 fresh install with BIOS configuration: ₹1,000–₹1,800. Doorstep visit: ₹149, No Fix No Fee.

A note from the LRW Engineer Team

Enabling TPM does not automatically encrypt your drive. It is a passive module — it only activates encryption when you specifically turn on BitLocker (Windows) or enable Windows Hello. Many users fear enabling TPM will cause data loss — it does not. Enable it, upgrade to Windows 11, and only then decide whether to enable BitLocker separately.

Share this guide
Common questions

TPM 2.0 and Windows 11 — FAQ

Questions customers ask most often about enabling TPM for Windows 11.

  • What is TPM 2.0 and why does Windows 11 need it?
    TPM (Trusted Platform Module) is a security chip that stores encryption keys. Windows 11 requires TPM 2.0 for BitLocker, Windows Hello, and Secure Boot attestation. Most laptops after 2017 have TPM hardware — check tpm.msc in Windows to see if it is already enabled.
  • How do I check if TPM is enabled on my laptop?
    Press Windows + R, type tpm.msc, press Enter. If it shows "The TPM is ready for use" with Version 2.0, TPM is enabled. If "Compatible TPM cannot be found", enter BIOS and enable PTT (Intel) or fTPM (AMD). Also use the Microsoft PC Health Check app for a full Windows 11 compatibility report.
  • Where do I find TPM settings in BIOS on HP, Dell, and Lenovo?
    HP: Security > TPM Embedded Security or PTT. Dell: Security > TPM 2.0 Security (On). Lenovo ThinkPad: Security > Security Chip > Active. Lenovo IdeaPad/Yoga AMD: Security > AMD fTPM (Enable). Asus: Advanced > Trusted Computing > TPM Device Selection.
  • What is the difference between PTT, fTPM, and discrete TPM?
    PTT is Intel's firmware-based TPM (runs inside Intel ME — no physical chip needed). fTPM is AMD's equivalent. Discrete TPM is a separate physical chip on enterprise laptops (EliteBook, ThinkPad). All three meet TPM 2.0 requirements for Windows 11.
Related services

BIOS and Windows upgrade services

BIOS Configuration Service

TPM, Secure Boot, and boot order configuration — doorstep service.

OS Installation

Windows 11 fresh install with all required BIOS settings pre-configured.

General Service

Full laptop audit including firmware, drivers, and Windows 11 readiness.

SSD Upgrade

Replace ageing drives before Windows 11 upgrade for better performance.

Verified on Justdial

Hyderabad customers, in their own words.

Real ratings from customers across Hyderabad. Tap the badge to read live reviews on Justdial.

JUSTDIAL REVIEWS

Need a laptop repair in Hyderabad? We’re at your door today.

Doorstep service across 50+ zones. ₹149 visit charge, 30-day warranty, No Fix No Fee.