To install Windows 11, TPM 2.0 (Trusted Platform Module) must be actively available on your computer. In certain cases you may need to manually enable TPM2.0 by going to BIOS/UEFI settings.
Enable TPM 2.0 (Trusted Platform Module)
Trusted Platform Module or TPM is basically a security chip that can implement hardware-based security features on computers using embedded cryptographic keys.
In addition to certain minimum hardware requirements, Microsoft requires Windows 11 computers to be equipped with TPM 2.0 to support advanced security features such as Windows Hello (Face ID, fingerprint and iris login), built-in BitLocker for privacy, and others.
If you bought your computer within the last 5 years, it should come with Trusted Platform Module (TPM) and be upgradable to Windows 11.
To check if your computer is ready for Windows 11, go to settings > Updates & Security > Windows security > Select device security in the left pane. In the right pane, click Security processor details Shortcut.
Note: If the security processor is not listed, you need to manually enable TPM on your computer (see steps as given below).
Make sure of this on the next screen Specification version is 2.0.
If the TPM specification version is 2.0, your computer is ready for Windows 11. If it is lower than 2.0, your computer does not qualify for Windows 11.
Enable TPM using UEFI settings
In certain cases, the computer is equipped with a TPM security chip, but it does not appear on the Device Security screen. This can be fixed by enabling TPM in BIOS/UEFI settings.
Go to settings > Updates & Security > select Restoration in the left pane. In the right pane, scroll down and click Restart now Button located in Advanced Startup section.
On the next screen navigate to Troubleshooting > Expanded options > UEFI firmware settings.
On the next screen, click Start anew to go to the UEFI Settings screen.
Search on the next screen TPM settings option and switch TPM device status to ON Position. Make sure you save the revised TPM settings and log out of UEFI.
Note: On the UEFI Settings screen, the TPM settings may be available under Advanced Security, Trusted Computing, Intel Software Guard, or other headings.
Also, the option to enable TPM may be referred to as Intel Platform Trust Technology, Intel PTT, Intel SGX Enable, Security Device or Security Device Support, AMD fTPM, or AMD PSP fTPM.
Check TPM in Device Manager
After enabling TPM in UEFI, you need to make sure that TPM 2.0 is detected by the system.
Right click on the Start button and select device manager. On the Device Manager screen, expand security devices entry and see if Trusted Platform Module 2.0. is listed.
If Trusted Platform Module 2.0 is not listed or you see a yellow triangle next to it, right-click on it Trusted Platform Module 2.0 and click update drivers Possibility.
On the next screen, click the Search automatically for updated driver version option and follow the on-screen instructions to install updated driver software on your computer.
Cannot install Windows 11
If you are unable to install Windows 11 even after enabling TPM 2.0, the problem may be that the processor or certain hardware components on your computer are not compatible with Windows 11.
The easiest way to confirm this is to download it PC health check app from microsoft.
Open the downloaded apartment and click Check now. On the next screen you will see whether your PC meets the Windows 11 requirements or not.
You will not install Windows 11 if the processor or any other hardware component on your computer does not meet the Windows 11 requirements.
In this case, you have the option to either buy a new Windows 11 compatible computer or continue using Windows 10. As you can see in the image above, you will continue to receive Windows 10 updates.