How to Check if a Windows PC has a TPM Chip

A Trusted Platform Module (TPM) chip gives your Windows PC hardware-backed protection for encryption keys and sign-in credentials. Windows 11 requires TPM 2.0, and features such as BitLocker and Windows Hello use it.

If you’re a system administrator or an advanced user who needs to confirm that a PC has a TPM and which version it runs, this article is for you. It discusses the various methods of verifying if your device is equipped with TPM, from using the TPM Management console to visiting the Windows Security app.

For a visual guide, watch our video on how to check if a Windows PC has a TPM chip.

What is a Trusted Platform Module (TPM)?

A Trusted Platform Module (TPM) is a security processor that creates and stores encryption keys and helps confirm that your PC starts with unaltered firmware and operating system files. A TPM can be

• a separate chip on the motherboard (a discrete TPM) or
• a firmware TPM (fTPM) that runs inside the processor, such as AMD fTPM or Intel Platform Trust Technology (PTT).

Windows features such as BitLocker and Windows Hello use the TPM to protect keys and credentials. Windows 11 accepts either type as long as it provides TPM 2.0.

Windows 11 TPM requirements

Windows 11 requires TPM 2.0. TPM is one of several hardware requirements, so a PC with TPM 2.0 can still fail the upgrade check.

• Processor: A supported 64-bit processor with at least two cores at 1 GHz or faster
• Firmware: UEFI with Secure Boot capability
• Memory: 4 GB of RAM or more
• Storage: 64 GB or more
• TPM: Version 2.0

The hardware requirements are the same for Windows 11 versions 24H2, 25H2, and 26H2.

Some methods below require administrator privileges, such as running PowerShell and Command Prompt.

How to check for the TPM chip

If you want to verify whether or not you have a TPM chip installed, you can choose to do so via the TPM Management console, PowerShell, Device Manager, Windows Security, or Command Prompt.

Which method should you use?

Method 1: Use the TPM Management console

One of the most basic methods is to use the TPM Management console. It’s a GUI-based manual check that you can do quickly.

Note: Admin privileges may be required.

1. Press Windows key + R to open Run.
2. Type “tpm.msc” and hit Enter. (If it requires admin rights to access the information, press Ctrl + Shift + Enter instead after typing “tpm.msc.”)
3. Review TPM information.

If a TPM is present, you should see:

• Status: “The TPM is ready for use.”
• Manufacturer information: Manufacturer ID and version (e.g., 2.0 or 1.2)
• Other available options

If there is no TPM, you’ll get a message stating “Compatible TPM cannot be found.”

Method 2: Use PowerShell

This method is scriptable for checking multiple systems and can return rich TPM data, so it’s ideal for remote audits or inventory tools.

Note: Admin privileges are required.

1. Open an elevated PowerShell. Press Windows key + R, type “powershell,” and press Ctrl + Shift + Enter.
2. Type this command and hit Enter for a detailed list of TPM properties:
   • get-tpm
3. Alternatively, you can type this command for a non-detailed version:
   • get-tpm | select -ExpandProperty tpmpresent
4. Review the results. If TPM is installed, the value for TpmPresent is True. If not, it’ll be False. Get-Tpm confirms that a TPM is present and ready. The command in step 5 returns more details about the TPM.
5. To read the TPM specification version, run this command:
   • Get-WmiObject -Namespace "Root\CIMV2\Security\MicrosoftTpm" -Class Win32_Tpm

Method 3: Use Device Manager

Using the Device Manager is another easy method to confirm hardware-level TPM presence quickly.

1. Press Windows key + X or right-click the Start button to open the Quick Link menu.
2. Select Device Manager from the list.
3. Find and expand Security devices.
4. If you see the Trusted Platform Module device with its version information at the end, your PC is equipped with TPM. If you can’t find the Security devices or Trusted Platform Module entry, it’s not installed or enabled.

Method 4: Use the Windows Security app

Windows Security has a user-friendly interface that can help end users check for TPM and its version on their systems.

1. Open Settings by pressing Windows key + I.
2. Navigate to Privacy & Security → Windows Security → Device Security → Security processor details.
3. If TPM is installed, you should see the TPM version, manufacturer information, and other general specifications. If not, you won’t find the Security processor section.

Method 5: Use Command Prompt

Command Prompt can report basic TPM details through the built-in TpmTool utility.

Note: Admin privileges are required.

1. Open Command Prompt as an administrator. Type cmd in the Start menu search bar, right-click Command Prompt, and choose Run as administrator. Alternatively, press Windows key + R, type cmd, and press Ctrl + Shift + Enter.
2. Type tpmtool getdeviceinformation and press Enter.
3. Review the output and confirm that the TPM version reads 2.0.

Note: The older WMIC command no longer works on Windows 11. Microsoft has removed WMIC from Windows 11 versions 24H2, 25H2, and 26H1, and it’s no longer available as a Feature on Demand. Use PowerShell (Method 2) for scripted checks.

Why check for TPM?

TPM has become a foundation for security architecture in modern PCs, so verifying its presence is crucial for various reasons:

• BitLocker drive encryption: TPM is a key enabler of BitLocker. Without a TPM, this built-in full disk encryption solution will need an alternative method to unlock the drive, like a password or a USB flash drive, which isn’t always secure.
• Windows 11 compatibility: Windows 11 requires TPM 2.0, and the requirement is the same for versions 24H2, 25H2, and 26H2. Windows 10 support ended on October 14, 2025. A PC without TPM 2.0 can’t upgrade to Windows 11 and needs ESU coverage or replacement.
• Support for modern security features: TPM is useful in secure environments that use certificates, Secure Boot, or credential guards.
• Compliance and auditing requirements: Hardware-backed key protection can support security audits in regulated industries such as healthcare, government, and finance. Confirm the exact TPM requirements with your compliance framework or auditor.

Notes and considerations

System administrators, IT professionals, and power users should keep these pointers in mind when checking for TPM in Windows environments.

• TPM 2.0 is required for Windows 11 installations, so checking for the TPM version may be more beneficial than only checking for TPM presence.
• TPM 1.2 supports BitLocker but is limited to the SHA-1 hash algorithm and RSA keys. TPM 2.0 adds SHA-256 and elliptic curve cryptography, and it’s the version that Windows 11 requires.
• A TPM chip might be present, but it’s not always enabled by default. Therefore, you may need to enable TPM manually in the BIOS/UEFI firmware on some systems. Here’s a video guide on how to enable TPM 2.0 on a Windows 11 PC.

Troubleshooting

TPM not visible in Windows

If you get a False value, see a “TPM not found” message, or can’t find the TPM entry under Security Devices, it may be because your TPM is disabled in BIOS/UEFI. To fix this, reboot your PC and enter BIOS/UEFI settings. Look for an entry related to TPM (usually under Security), enable it, and then save and exit.

If TPM isn’t visible, it might be because your firmware is outdated. Check your BIOS/UEFI firmware version to see if you need an upgrade from your motherboard or PC manufacturer.

If your device doesn’t have a physical TPM chip, it may use firmware TPM (fTPM), which provides similar protection via the CPU.

The TPM Management console won’t open

Insufficient permissions can prevent you from opening the TPM Management console. Try logging in using an administrator account or running the console as an administrator.

Incorrect TPM version

If you have an incorrect TPM version (1.2 instead of 2.0), look into updating your TPM firmware or changing the version in BIOS/UEFI (if it’s an available feature). However, this isn’t always possible as the problem may be with your hardware. Make sure to check the upgradability of your TPM firmware.

Securing the future with TPM

Verifying the presence and version of a TPM is a core step in securing Windows PCs and preparing for Windows 11. Choose the method that fits your workflow, from a quick tpm.msc check on one PC to a script that audits every Windows device you manage.