Skip to main content

Enabling TPM 2.0

  • Updated

To improve system security and maintain fair play, Akros requires all Windows 10 and 11 users to have TPM 2.0 activated.

⚠️ Modifying BIOS/UEFI settings or converting your system disk can be risky. Always back up important data before proceeding.

1) Understanding TPM 2.0

TPM (Trusted Platform Module) 2.0 is a dedicated security chip on your motherboard that manages cryptographic keys, device attestation, and secure storage. Many Windows security features depend on TPM 2.0 for proper operation.

2) Verify Your Current TPM Status

  1. Press the Windows key, type tpm.msc, and hit Enter.
  2. In the TPM Management window:
    • Status should say "The TPM is ready for use."
    • Specification Version should read 2.0.
  3. Confirm security processor functionality:
    • Open Windows Security → Device Security → Security processor details.
    • Both Attestation and Storage should display "Ready."

3) Check UEFI Mode and Prepare for Disk Conversion

TPM 2.0 requires UEFI boot on certain systems. If your system disk is MBR and BIOS is in Legacy mode, you must convert the disk to GPT before enabling UEFI and TPM.

  1. Press the Windows key, type msinfo32, and press Enter.
  2. Check BIOS Mode. If it shows Legacy, switch to UEFI.
  3. Confirm your disk partition style:
    • Open Disk Management → right-click OS disk → Properties → Volumes → Partition style.
    • If it’s MBR, conversion is necessary.

4) Converting MBR to GPT (if needed)

Use Microsoft’s MBR2GPT.EXE utility: 

mbr2gpt /validate /disk:0
mbr2gpt /convert /disk:0
mbr2gpt /convert /disk:0 /allowFullOS  (if converting from full Windows)
  • Double-check you are using the correct disk number.
  • Stop if validation fails; back up data or fix the disk first.
  • After conversion, Windows can boot in UEFI mode.

5) Activating TPM 2.0 in BIOS/UEFI

  1. Enter BIOS/UEFI setup (common keys: Del, F2, F10, F12, Esc).
  2. Locate the TPM setting (may be labeled fTPM, PTT, or Security Device) and set it to Enabled.
  3. Save changes and reboot your system.
  4. Check in Windows via tpm.msc to ensure TPM 2.0 is active and functional.

6) Manufacturer-Specific Guidance

  • ASUS: Advanced → PCH-FW Configuration → fTPM.
  • Gigabyte: Advanced → Trusted Computing → Security Device Support → Enabled.
  • MSI: Security → Trusted Computing → TPM Device Selection → Enabled.
  • Dell/HP/Lenovo: Security → TPM Device → Enable; some systems require "Activate" or "Clear" first.

7) Troubleshooting

  • TPM not showing ready: Verify BIOS settings and update firmware if needed.
  • System still in Legacy/MBR mode: Ensure disk is GPT and BIOS is set to UEFI after conversion.
  • TPM version outdated: Confirm motherboard supports TPM 2.0 and update BIOS if necessary.
  • Ongoing issues: Contact your motherboard manufacturer for assistance enabling TPM 2.0.

Related articles