How to Check Your TPM Version in Windows

Trusted Platform Module (TPM) became a household name practically overnight when Microsoft announced it as a hard requirement for Windows 11. Suddenly, millions of people needed to know not just whether their PC had a TPM chip — but which version. TPM 1.2 and TPM 2.0 are not interchangeable, and the difference matters more than most users initially realize.

Here's how to check your TPM version, what the results actually mean, and why the answer varies more than you'd expect.

What Is TPM and Why Does the Version Matter?

TPM is a dedicated security chip (or firmware-based equivalent) built into modern computers. It handles cryptographic operations, stores encryption keys, and supports features like BitLocker drive encryption, Windows Hello, and Secure Boot. Think of it as a tamper-resistant vault that your operating system trusts for sensitive security tasks.

TPM 1.2, released in the early 2000s, uses older cryptographic algorithms (SHA-1, RSA) and has a more limited feature set. TPM 2.0, standardized around 2014, supports stronger algorithms (SHA-256, ECC), is more flexible, and is required for Windows 11. The version number isn't cosmetic — it reflects fundamentally different capabilities under the hood.

Method 1: Windows TPM Management Console (Fastest for Most Users) 🔍

This is the simplest method on any Windows 10 or Windows 11 machine:

1. Press Windows + R to open the Run dialog
2. Type tpm.msc and press Enter
3. The TPM Management Console opens

Under the Status section, you'll see whether TPM is ready for use. Under TPM Manufacturer Information, look for the Specification Version field — this is your TPM version. It will display something like 2.0 or 1.2.

If the console shows "Compatible TPM cannot be found," TPM may be disabled in your BIOS/UEFI firmware, or your device may not have one at all.

Method 2: Device Manager

1. Right-click the Start button and select Device Manager
2. Expand the Security devices category
3. You'll see an entry like Trusted Platform Module 2.0 (or 1.2)

The version number is right in the device name. This method is quick but gives you less detail than the TPM Management Console.

Method 3: PowerShell (More Detail, More Control)

For users who want raw data or are managing multiple machines:

1. Open PowerShell as Administrator
2. Run the command: Get-TPM

The output includes fields like TpmPresent, TpmReady, and ManufacturerVersion. For the specification version specifically, run:

Get-WmiObject -Namespace "rootcimv2securitymicrosofttpm" -Class Win32_TPM | Select-Object SpecVersion 

This returns the full specification version string, which may look like 2.0, 0, 1.38 — the first number is the TPM version, and the remaining values indicate revision details from the manufacturer.

Method 4: BIOS/UEFI Firmware Settings

Some devices list TPM information directly in their firmware settings. This is especially relevant if Windows can't detect the TPM at the OS level — often because it's disabled.

To access UEFI firmware:

• Restart your PC and press the firmware key during boot (Del, F2, F10, or F12 — varies by manufacturer)
• Look for a section labeled Security, Advanced, or Trusted Computing

Here you can see TPM status, version, and toggle it on or off. On AMD systems, this may be listed as fTPM (firmware TPM). On Intel systems, it may appear as PTT (Platform Trust Technology). Both are firmware-based TPM 2.0 implementations rather than discrete chips — but they meet the same spec requirements.

TPM 1.2 vs. TPM 2.0 at a Glance

Variables That Affect What You'll Find

Not every machine behaves the same way, and several factors shape what you'll actually see when you check:

• PC age: Systems built before 2016 are more likely to have TPM 1.2 or no TPM at all
• Discrete vs. firmware TPM: Many modern systems use fTPM or Intel PTT instead of a physical chip — this is normal and fully functional
• BIOS settings: TPM can be present but disabled, causing Windows to report it as missing
• Enterprise or OEM configurations: Some business laptops ship with TPM disabled by default as a policy choice
• Virtualization: Virtual machines may present a virtual TPM, which behaves differently from hardware TPM in some edge cases

What If TPM Is Disabled or Not Found? 🛠️

If tpm.msc shows no TPM, the most common reason isn't a missing chip — it's a disabled setting in firmware. Before assuming your hardware lacks TPM:

• Enter your BIOS/UEFI and search for TPM, fTPM, or PTT settings
• Enable the feature and save changes
• Reboot and check tpm.msc again

AMD Ryzen systems (roughly 2016 onward) almost universally support fTPM 2.0. Intel systems from the 8th generation forward typically support PTT. Older hardware may genuinely lack TPM 2.0 support, which puts Windows 11 compatibility out of reach through standard means.

The Detail That Changes Everything

Knowing your TPM version is straightforward — the tools above will give you a definitive answer in under a minute. But what you do with that information depends entirely on your situation: whether you're upgrading to Windows 11, configuring BitLocker for the first time, troubleshooting a failed Windows Hello setup, or auditing machines in a business environment. The version number is just the starting point. What it unlocks — or blocks — depends on the rest of your setup.