Most modern desktops and laptops include a Trusted Platform Module (TPM) chip, which enhances security through hardware encryption and system integrity checks. TPM is a minimum requirement for installing Windows 11, and your system must have TPM 2.0 or higher to upgrade or update to its newer versions.
To ensure compatibility with Windows 11 or its updates, it’s essential to check if your computer has TPM and verify its version. In this quick and simple tutorial, I will show you two ways to check the TPM version on Windows 10 and Windows 11.
Before You Begin
- Administrator rights are required to find the TPM version on your Windows computer.
Check the TPM Version Using Run Command
Windows has a built-in tool called Trusted Platform Module Management (tpm.msc) that lets you check the currently installed TPM version. Here’s how to use it.
- Press “Windows key + R” to open the Run dialog.
- Enter “tpm.msc” in the blank field.
- Click the “OK” button.
- The TPM Management Console will open, showing details about the TPM on your system, including the Specification Version, which indicates the TPM version (e.g., 2.0).
Detailed Steps (With Screenshots)
First, open the Run dialog by pressing the keyboard shortcut “Windows key + R“. In it, enter “tpm.msc” in the blank field and click the “OK” button.
The above action opens the TPM Management Console. Under the “TPM Manufacturer Information” section, check the “Specification Version” field to see the TPM version (e.g., 2.0).
If the console doesn’t open or displays the error message “Compatible TPM cannot be found”, it means your computer does not have a TPM module or it is disabled in BIOS/UEFI.
That is it. It is that simple to check the TPM version on Windows. You close the TPM Management Console window by clicking the “X” icon on the title bar.
PowerShell Command to Check the TPM version on Windows
Alternatively, you can also use a simple PowerShell command to check the installed TPM version on Windows. Here’s how:
- Press the “Start” button on your keyboard.
- Search for “Windows PowerShell“.
- Select the “Run as Administrator” option.
- Run the below command in the PowerShell window.
Get-WmiObject -Namespace "Root\CIMv2\Security\MicrosoftTpm" -Class Win32_Tpm - You will find the TPM version next to “SpecVersion” (e.g., 2.0, 0, 1.38).
- The first number is your specific TPM version (e.g., 2.0).
Detailed Steps (With Screenshots)
First, open the PowerShell window as an admin. To do that, open the Start menu, search for “PowerShell” and select the “Run as Administrator” option.
In the PowerShell window, run the following command.
Get-WmiObject -Namespace "Root\CIMv2\Security\MicrosoftTpm" -Class Win32_Tpm
After running the command, the PowerShell window displays all the details related to your TPM. Look for the “SpecVersion” field in the list—it indicates the current TPM version (e.g., 2.0, 0, 1.38).
The first number (e.g., 2.0) represents the TPM specification version. The following numbers (0, 1.38) provide additional details about the revision and sub-revision of the TPM version.
If you see an error message, your computer doesn’t have TPM or it is disabled in BIOS/UEFI.
Check If TPM is Disabled in BIOS/UEFI
Sometimes, the TPM module might be disabled in the BIOS/UEFI, which could result in an error indicating your computer doesn’t have TPM. To make sure that’s not the case, check your UEFI settings and enable the TPM module if needed.
Since each manufacturer implements UEFI differently, consult the motherboard or laptop manual or go through the manufacturer documentation for specific instructions.
While it’s tempting to follow the general guidance you find on the internet, when it comes to UEFI/BIOS, it’s safer to follow your manual to avoid inadvertently changing critical settings and potentially bricking your system.
What is a Trusted Platform Module (TPM)?
A Trusted Platform Module (TPM) is a specialized security chip built into your computer by the manufacturer. It is designed to provide hardware-based security features, such as system integrity checks and encryption, making it an essential component in modern computers.
For instance, Windows automatically uses the TPM to encrypt your disk if you sign in with a Microsoft account or enable BitLocker.
The TPM chip is also designed to be tamper-resistant, meaning malicious programs cannot interfere with its operation or modify the system in any way. By functioning independently of the software, it provides an additional layer of security that’s difficult for attackers to bypass.
Wrapping Up — Checking TPM Version on Windows
On both Windows 10 and Windows 11, there are two methods to check the installed TPM version: the TPM Management Console and the PowerShell command. If you’re using the TPM Management Console, check the “Specification Version” heading. If you’re using the PowerShell command, look for the first number next to the “SpecVersion” heading. This number should be 2.0 or higher to install or upgrade to Windows 11.
If your system doesn’t have TPM or if the version is lower than 2.0 but you still want to install or upgrade to Windows 11, you can use Rufus to create a bootable Windows 11 drive and bypass the TPM requirement.
If you have any questions or need help, comment below. I’ll be happy to assist.
