How to Fix “This PC Can’t Run Windows 11” TPM 2.0 Error

Yes, this is often fixable without buying a new computer. The message usually means TPM 2.0 is disabled in firmware or is not being detected, but Secure Boot, UEFI mode, the processor, RAM, or storage can trigger the same warning. Check Windows first, enable Intel PTT or AMD fTPM in UEFI/BIOS when available, and rerun PC Health Check before upgrading.

First, find out whether TPM 2.0 is missing or just turned off

This troubleshooting applies to Windows 10 PCs being checked for a Windows 11 upgrade. Opening the diagnostic tools normally does not require an Administrator account, but firmware changes and some repairs do. Save your work before restarting, make a backup before changing boot settings, and have your BitLocker recovery key available if device encryption is enabled.

The warning appears during a Windows 11 compatibility or upgrade check. If the exact message is the one in the draft, it appears as follows:

This PC can’t run Windows 11

The PC must support TPM 2.0.

1. Press Windows key + R, type tpm.msc, and press Enter.
2. Read the status at the top of the window. A working TPM normally says that it is ready for use. Under TPM Manufacturer Information, check Specification Version. Windows 11 requires version 2.0.
3. Use the result to identify the problem:

• If the console says a compatible TPM cannot be found, the TPM may be disabled in UEFI/BIOS, unavailable because of an old firmware version, or absent from the computer.
• If the TPM is ready but the specification is 1.2, it does not meet the Windows 11 requirement.
• If it says the TPM is ready and shows 2.0, TPM itself is probably not the remaining problem.

4. Open Windows Security from the Start menu and select Device security. Under Security processor, choose Security processor details. Confirm that a security processor is listed and that its specification is 2.0.
5. Download and run Microsoft's PC Health Check app from the official Microsoft website. Select Check now under the Windows 11 eligibility panel. Its result can identify a processor, Secure Boot, memory, storage, or TPM problem that tpm.msc does not explain.

If tpm.msc reports a TPM but PC Health Check still flags the computer, do not clear the TPM. Check the other Windows 11 requirements and install available firmware and Windows updates first.

Does your computer actually support Windows 11?

This fix applies to supported Windows 10 PCs that have a TPM capable of version 2.0 but have it disabled or are not exposing it to Windows. It does not make an unsupported processor or an old, TPM-less motherboard meet Microsoft's requirements.

Before changing firmware, run PC Health Check and check the computer manufacturer's specifications. Confirm these requirements:

• A processor on Microsoft's supported Windows 11 list. Processor generation and model matter, not just clock speed.
• At least 4 GB of RAM.
• At least 64 GB of storage.
• UEFI firmware rather than legacy BIOS mode.
• Secure Boot capability, with Secure Boot normally enabled for an approved installation.
• TPM 2.0, provided by a discrete chip or by the processor's firmware.

You can check the current boot mode without changing anything. Press Windows key + R, type msinfo32, and press Enter. In System Information, find BIOS Mode. UEFI is the expected value. Also check Secure Boot State; On is the expected value for a fully compliant configuration.

A PC can have TPM 2.0 enabled and still show the same general warning if it boots in Legacy or Compatibility Support Module mode, has Secure Boot disabled, uses an unsupported CPU, or falls below the RAM or storage minimum. Do not switch a working installation from Legacy to UEFI casually. Changing boot mode without preparing the system can make Windows fail to start, so deal with that separately and make a backup first.

Enable Intel PTT or AMD fTPM in UEFI/BIOS

On many recent PCs, there is no separate TPM chip to install. The processor platform provides firmware TPM, which may be disabled by default. Intel commonly labels it Intel Platform Trust Technology, Intel PTT, or PTT; AMD commonly labels it AMD fTPM, Firmware TPM, or AMD CPU fTPM.

Before entering firmware, close applications, connect a laptop to power, and make sure you can find your BitLocker recovery key. A firmware change usually does not erase files, but a boot or security change can trigger BitLocker recovery.

1. In Windows, open Settings, select Update & Security, choose Recovery, and select Restart now under Advanced startup.
2. Select Troubleshoot, then Advanced options, then UEFI Firmware Settings, and choose Restart.
3. In UEFI/BIOS, open a menu named Security, Advanced, Trusted Computing, or a similar section. The exact layout depends on the motherboard or PC manufacturer.
4. Enable the setting that corresponds to your platform:

Security or Advanced > Trusted Computing > Security Device Support > Enabled
Security or Advanced > Intel Platform Trust Technology (PTT) > Enabled
Security or Advanced > AMD fTPM or Firmware TPM > Enabled

5. Save the change and exit. Do not change SATA mode, boot drive order, overclocking settings, or other unrelated options. If several TPM choices appear, enable the firmware TPM option recommended by the manufacturer rather than switching between modes at random.
6. Let Windows start normally.

The expected result is that Windows detects a security processor after the restart. If no PTT, fTPM, TPM, or Trusted Computing option exists, check the exact model's firmware documentation and install an applicable manufacturer BIOS or UEFI update. Do not interrupt a firmware update or use firmware intended for a different model.

Confirm TPM 2.0 is working and try the upgrade again

After enabling the setting, verify it from Windows before starting the Windows 11 upgrade. This requires a restart but no command-line tool.

1. Press Windows key + R, enter tpm.msc, and press Enter.
2. Confirm that the status says the TPM is ready for use and that Specification Version is 2.0.
3. Open Windows Security > Device security > Security processor details. Confirm that a security processor is present and reports specification version 2.0.
4. Open Settings > Update & Security > Windows Update and install pending updates. Also apply the computer manufacturer's firmware updates if one is available for your model.
5. Restart Windows again, run PC Health Check, and select Check now. If it reports eligibility, retry the upgrade through Windows Update or Microsoft's approved installation method.

The expected result is a ready security processor with version 2.0, followed by a PC Health Check result that does not identify TPM as a blocker. If tpm.msc still says no compatible TPM is found, Windows is not receiving the firmware setting. Recheck that the setting was saved, install the correct UEFI update, and review the manufacturer's instructions. If TPM is visible but eligibility still fails, use PC Health Check's specific result to investigate Secure Boot, boot mode, CPU, RAM, or storage instead of repeatedly changing TPM settings.

What if TPM 2.0 still isn’t available?

If the firmware has no TPM, PTT, or fTPM option, first identify the exact PC or motherboard model and check its support page for a BIOS or UEFI update. Some systems expose firmware TPM only after an update. Follow the manufacturer's update procedure exactly; a failed firmware update can prevent the computer from starting.

If an update does not add the feature, contact the manufacturer or motherboard vendor and ask whether the model supports TPM 2.0, a compatible discrete TPM module, or a processor upgrade. A discrete module is not universally interchangeable: the connector, firmware support, and module type must match the board. Do not buy a generic module based only on its physical connector.

If the machine has TPM 1.2, Windows cannot turn it into TPM 2.0 through a normal Windows setting. A firmware update may help, but replacing hardware may be the only supported route. Back up important files before firmware or hardware work, and save the BitLocker recovery key before changing TPM, Secure Boot, or boot settings.

You may find instructions for installing Windows 11 by bypassing TPM, Secure Boot, or CPU checks. Microsoft warns that unsupported hardware may not receive support and is not guaranteed to receive updates. A bypass can also leave you with driver, feature, activation, or future upgrade problems. It is not a repair for the compatibility issue. If PC Health Check still marks the computer as unsupported after the manufacturer's options are exhausted, staying on a supported Windows version or replacing the PC is safer than forcing the installation.

Conclusion

Run `tpm.msc` and PC Health Check first. If the PC supports firmware TPM, enable Intel PTT or AMD fTPM, verify TPM 2.0, UEFI, Secure Boot, and the other requirements, then retry the upgrade. If the manufacturer provides no supported TPM 2.0 path, do not force the installation without accepting its support and update risks.

Frequently Asked Questions

Will enabling TPM 2.0 delete my files?

Enabling PTT or fTPM normally does not delete files. Security and boot changes can trigger BitLocker recovery, so save your recovery key before changing firmware settings. Do not choose an option to clear the TPM unless you understand its effect and have prepared for the consequences.

Why does Windows 11 still reject my PC after I enable TPM 2.0?

TPM is only one requirement. PC Health Check may still reject the PC because of an unsupported processor, Legacy boot mode, disabled Secure Boot, insufficient RAM or storage, or a firmware configuration Windows has not detected yet. Restart Windows, install pending updates, and check the specific failure it reports.

Can I add TPM 2.0 with a USB device?

A normal USB security key is not a replacement for the TPM required by Windows 11. Some desktop motherboards support a model-specific internal TPM module, but compatibility must be confirmed with the manufacturer. Many newer systems already provide TPM through Intel PTT or AMD fTPM.