Where to find TPM 2.0 in MSI BIOS and why you might need it

TPM 2.0 (Trusted Platform Module 2.0) is a security chip on your motherboard that Windows 11 requires, and some security software also demands it. MSI hides the TPM setting several menus deep in BIOS, but the path is consistent across most MSI boards made in the last five years. You will need to restart your computer, enter BIOS setup, navigate to the Security menu, and toggle TPM from disabled to enabled — then save and exit.

The setting exists because TPM 2.0 is optional hardware that manufacturers can disable by default. Your motherboard likely has the chip already; you are just telling BIOS to use it. This takes about five minutes and requires no special tools or knowledge beyond the ability to restart and press a key during startup.

Key Takeaways

  • Restart your computer and press Delete (or F2 on some MSI boards) during the boot screen to enter BIOS setup.
  • Navigate to Settings > Security > Security Chip and change the setting from Disabled to Enabled.
  • Some MSI boards label it "PTT" (Platform Trust Technology) instead of TPM, but it is the same thing.
  • Save your changes by pressing F10, then allow the computer to restart — Windows will recognize TPM 2.0 when ready.
  • If you cannot find the setting, your motherboard may not have a TPM chip, or you may have an older BIOS version that needs updating first.

Step-by-step: entering BIOS and finding the TPM setting

Power off your computer completely. Press the power button to turn it back on, then when ready begin pressing Delete repeatedly — about once per second — until you see the BIOS setup screen. On some older MSI boards, the key is F2 instead; the boot screen will tell you which one. If you miss the window, the computer will boot into Windows normally; straightforward restart and try again.

Once you are in BIOS, you will see a menu with tabs or options at the top. Look for a tab labeled "Settings" (sometimes called "Advanced" on older boards). Press the right arrow key or click on Settings. Inside that menu, find "Security" and press Enter or click it. You should now see a list that includes "Security Chip" or "PTT" — this is the TPM setting.

Highlight "Security Chip" (or "PTT") and press Enter. A small menu will appear with two options: Disabled and Enabled. Select Enabled, then press Enter to confirm. The setting should now show Enabled next to the option name.

Saving your changes and restarting

After you enable TPM, you must save the changes before exiting BIOS. Press F10 on your keyboard — this is the standard save-and-exit command on MSI boards. A confirmation dialog will appear asking whether you want to save changes and exit. Select "Yes" and press Enter. The computer will restart automatically.

Windows will boot normally after the restart. You do not need to do anything else; Windows 11 and most security software will detect TPM 2.0 automatically within a few seconds. If you want to verify that TPM is now active, you can open Windows Settings, go to System > About, and scroll down to look for "TPM version 2.0" listed under Device specifications. Some versions of Windows show this information; others do not display it visibly, but the system will still use it.

What to do if you cannot find the TPM setting

If you navigate to Settings > Security and do not see "Security Chip" or "PTT", your motherboard may not have a TPM chip installed. This is rare on boards made after 2018, but it does happen on budget models. You can check your motherboard's manual or the MSI website by searching for your specific board model — the manual will list whether TPM is included.

Another possibility is that your BIOS version is too old to display the TPM option. MSI added TPM support to BIOS in stages, and some older versions do not show the setting even if the chip exists. If your board supports TPM but the setting is missing, you may need to update BIOS first. This is a more involved process; see the BIOS update guide for your specific board on the MSI support website.

If you are unsure whether your board has TPM, the safest approach is to check the product page on MSI's website. Search for your motherboard model, go to the specifications section, and look for "TPM" or "Security Chip" listed. If it is there, the setting exists in BIOS and you straightforward need to find it or update BIOS. If it is not listed, your board does not have TPM hardware.

Differences between TPM and PTT on MSI boards

PTT (Platform Trust Technology) is Intel's name for TPM when it is built into the CPU or chipset rather than a separate chip. MSI boards with Intel processors sometimes label the setting "PTT" instead of "Security Chip" or "TPM". They are functionally identical — both provide TPM 2.0 to Windows and security software. If you see PTT in your Security menu, enable it the same way you would enable Security Chip.

AMD-based MSI boards typically use "Security Chip" as the label, but some newer models also support PTT. The location in the BIOS menu is always the same: Settings > Security. If your board has both options, enable whichever one is present; you do not need both.

Common issues after enabling TPM

In rare cases, enabling TPM can cause Windows to ask for a PIN or password on startup, or to display a "BitLocker" recovery screen. This happens when Windows detects that TPM has been newly enabled and wants to find your drive. If this occurs, follow the on-screen prompts — you can usually skip the BitLocker setup or choose to set it up later. The TPM itself is working correctly; Windows is straightforward offering additional security features now that TPM is available.

If your computer becomes very slow after enabling TPM, or if programs begin crashing, the issue is almost certainly not TPM itself — TPM uses minimal resources. The problem is more likely a BIOS setting that was accidentally changed, or a hardware conflict unrelated to TPM. Restart, re-enter BIOS, and verify that only the TPM setting was changed. If you changed anything else by mistake, change it back.

Verifying TPM 2.0 is working

The most reliable way to confirm TPM 2.0 is enabled is to open the Windows Run dialog (press Windows key + R), type "tpm.msc", and press Enter. This opens the TPM Management Console, which will display "TPM 2.0" at the top if the module is active. If it says "TPM is not ready" or shows no version number, TPM is either not enabled in BIOS or not present on your motherboard.

Another method is to open PowerShell as Administrator (right-click the PowerShell icon and select "Run as Administrator") and type the command: Get-WmiObject -Namespace "root\cimv2\security\microsofttpm" -Class Win32_Tpm. Press Enter. If TPM is working, the output will include "IsActivated : True" and "SpecVersion : 2.0". If the command returns an error or shows "IsActivated : False", TPM is not yet active.

Frequently Asked Questions

Will enabling TPM 2.0 slow down my computer?

No. TPM 2.0 is a dedicated security chip that operates independently and uses negligible system resources. You will not notice any performance difference after enabling it. If your computer becomes slow after enabling TPM, the cause is something else — restart and check that no other BIOS settings were accidentally changed.

Do I need TPM 2.0 if I am not using Windows 11?

Not necessarily. Windows 10 does not require TPM 2.0, though some security software and enterprise policies may request it. If you are running Windows 10 and have no specific reason to enable TPM, you can leave it disabled. However, enabling it does no harm and prepares your system for Windows 11 if you upgrade later.

What if I enable TPM and then want to disable it again?

You can disable TPM at any time by following the same steps: enter BIOS, navigate to Settings > Security > Security Chip, select Disabled, save with F10, and restart. Windows will continue to work normally. Some security software may warn you that TPM is no longer available, but this is informational only.

Is TPM 2.0 the same as a TPM chip?

TPM 2.0 is the current version of the Trusted Platform Module standard. Some motherboards have a separate TPM chip soldered to the board; others have TPM built into the CPU or chipset. Either way, when you enable "Security Chip" or "PTT" in BIOS, you are activating TPM 2.0. The physical location does not matter — the function is the same.

Can I enable TPM if my motherboard is very old?

If your motherboard was made before 2015, it likely does not have TPM hardware at all. Check the MSI support page for your specific board model to see if TPM is listed in the specifications. If it is not listed, your board cannot support TPM 2.0 no matter what BIOS settings you change. Older boards may have TPM 1.2 instead, which is not sufficient for Windows 11.