Fix Windows 11 TPM 2.0 Requirement Error During Upgrade

What Causes This?

The TPM 2.0 requirement error appears when Windows 11 setup can’t detect a compatible Trusted Platform Module, or it finds that TPM is disabled in firmware. On many PCs, TPM 2.0 is built into the motherboard or CPU but turned off in BIOS/UEFI, often listed as Intel PTT or AMD fTPM instead of “TPM.” The error can also happen if Secure Boot is disabled, the system is using Legacy BIOS mode, or the PC genuinely doesn’t meet Windows 11 hardware requirements.

Common Symptoms

• Windows 11 Setup says “This PC can’t run Windows 11”
• PC Health Check reports TPM 2.0 is missing or not enabled
• tpm.msc shows “Compatible TPM cannot be found”
• Upgrade stops early even though the PC seems new enough
• BIOS/UEFI has TPM-related settings disabled or hidden

How to Fix It Manually

1. Check whether Windows can see a TPM

   • Press Windows + R, type tpm.msc, and press Enter.
   • If you see Compatible TPM cannot be found, TPM is disabled, missing, or unsupported.
   • If TPM is detected, check the Specification Version in the middle pane. Windows 11 needs 2.0.

2. Confirm your PC is using UEFI and not Legacy BIOS

   • Press Windows + R, type msinfo32, and press Enter.
   • In System Information, find BIOS Mode.
   • If it says UEFI, that part is fine.
   • If it says Legacy, Windows 11 may be blocked until you convert the system disk to GPT and switch firmware mode to UEFI.

3. Enter BIOS/UEFI and enable TPM

   • Click Start > Settings > System > Recovery.
   • Next to Advanced startup, click Restart now.
   • Go to Troubleshoot > Advanced options > UEFI Firmware Settings > Restart.
   • In BIOS/UEFI, look for one of these settings:
     • TPM
     • Security Device
     • Intel Platform Trust Technology (PTT)
     • AMD fTPM
   • Enable it, then save changes and exit. This is often under Security, Advanced, or Trusted Computing.

4. Enable Secure Boot if it’s off

   • Re-enter BIOS/UEFI if needed.
   • Find Secure Boot under Boot, Security, or Authentication.
   • Set it to Enabled.
   • If Secure Boot is grayed out, you may need to switch boot mode from Legacy/CSM to UEFI first.

5. Update BIOS/UEFI if TPM options are missing

   • Find your motherboard or laptop model in Settings > System > About.
   • Visit the manufacturer’s support page and download the latest BIOS/UEFI update.
   • Follow the vendor’s instructions carefully. A firmware update can add or expose TPM 2.0 settings that weren’t visible before.

6. Run Microsoft’s compatibility check again

   • After rebooting into Windows, press Windows + R, type tpm.msc, and confirm Specification Version 2.0 appears.
   • Then run PC Health Check or restart Windows 11 Setup.
   • If the error remains, your PC may not support TPM 2.0 in hardware, or another requirement such as CPU support or Secure Boot is still failing.

Fix It Automatically with Kudu

Kudu can scan your system for Windows 11 upgrade blockers, including TPM, Secure Boot, firmware mode, and other install-readiness issues. It helps you spot what’s misconfigured, clean up the PC before upgrading, and avoid chasing multiple setup errors by hand.

Download Kudu Free →