Troubleshooting
How to Enable TPM 2.0 and Secure Boot in Windows
To enable TPM 2.0 and Secure Boot, turn on the corresponding options in your computer’s UEFI firmware. First check Windows, because both features may already be active; then save your BitLocker or device-encryption recovery key, enable firmware TPM, switch from Legacy/CSM to UEFI only when necessary,