TL; DR: Windows 11’s TPM 2.0 requirement left some users wondering if their systems would be compatible when the new operating system launches later this year. Now people who have built custom rigs with Asus or Asrock motherboards can download BIOS updates that will enable TPM by default if they haven’t manually enabled it already.
Last month TechSpot provided a lengthy explanation of what TPM is and why Microsoft requires it in Windows 11. The security feature is something that most laptops or off-the-shelf desktops should have already been enabled by default. However, some users with custom builds may still face an issue that motherboard manufacturers are starting to fix.
TPM started out as a dedicated chip for additional hardware security on motherboards, but in recent years motherboards have started to include firmware-based TPM (fTPM). If your newly built computer does not pass the Windows 11 readiness test, or if TPM does not appear as enabled in the security section of Windows 10 settings, you probably need to change the setting in the BIOS. This is different for every BIOS, be it Asus, Asrock, Gigabyte, or MSI.
Asus recently added a section to its website with download links to the latest BIOS, which by default includes fTPM for all motherboards that confirm Windows 11 support. Those who are not downloading the update and have not yet enabled fTPM can read Asus’s instructions on how to do it manually. on the same site.
Asrock also released BIOS updates today, which automatically turns on fTPM. At the time of this writing, Gigabyte and MSI have yet to follow suit, but for a while they had lists of their motherboards that should be compatible with Windows 11. MSI List as well as their instructions to enable fTPM. Gigabyte published a press release in July detailing the range of fTPM compatibility.
After enabling fTPM in BIOS, Windows 10 users should see TPM showing up in Settings under Windows Security> Device Security> Security Processor.