How to Enable TPM and Secure Boot in BIOS HP for Windows 11

If you have an HP laptop and want to install or upgrade to Windows 11 but you face this problem “This PC can’t run Windows 11”. This error is mainly because of TPM 2.0 and Secure Boot. However, if you don’t know how to fix this error or how to enable TPM and Secure Boot on your HP laptops from BIOS then don’t worry! In this guide, you’re going to learn how to enable TPM and Secure Boot in BIOS HP for Windows 11.

What Is a TPM Chip?

A Trusted Platform Module (TPM) is a little chip on the motherboard of your computer that performs security-related activities at the hardware level. It’s essentially a tamper-resistant crypto-processor capable of doing tasks such as creating encryption keys and delivering a mix of software and hardware-based authentication.

A standalone TPM chip is generally soldered to the motherboard of modern off-the-shelf computers. You may buy one individually as an add-on module for any motherboard that supports it if you’re constructing your own PC. However, as we’ll see later, not all motherboards accept TPM chips or have the necessary connection.

What’s the Difference Between TPM 1.2 and TPM 2.0?

“The TPM 1.2 standard only allows for the use of RSA and the SHA-1 hashing algorithm,” Microsoft says. “TPM 2.0 provides more crypto agility by being more adaptable with respect to cryptographic algorithms,” the document continues. TPM 2.0 provides improved algorithms that can enhance the performance of drive signing and key generation.”

Simply said, TPM 2.0 technology is more recent than TPM 1.2, which has been in use since 2011. Its encryption is more powerful and safe, and it can support newer algorithms better. And, like with most things in technology, the newer the better. For more information kindly visit ReviewGeek.

Enable TPM & Secure Boot from BIOS HP

So, here are the steps to enable both TPM and Secure Boot on HP from BIOS:

Enable TPM From BIOS on HP:

Because you’ll need to press the hotkeys before your machine starts booting up your OS, you’ll only have a few seconds to respond when trying to access your BIOS settings. You may always restart your computer and try again if you miss the timing the first time.

• Power on your HP laptop and then press the ESC key immediately.
• Now, press the F10 key to Go to BIOS Setup.
• Go to the Security tab and select TPM State.

• Once you locate the option that controls your system’s TPM status, enable it by using your arrow keys.

• After enabling TPM, exit your BIOS settings by pressing the F10 key and selecting Yes.

By signing up for the Insider program after turning on TPM 2.0, you can install Windows 11’s preview build. If your system doesn’t support TPM 2.0, it’s a good reason to update, as most builds that aren’t more than five years old should include the functionality.

Enable Secure Boot From BIOS on HP:

• Power on your HP laptop and then press the ESC key immediately.
• Now, press the F10 key to Go to BIOS Setup.

F10

• Go to the System Configuration tab and select Boot Options using the arrow keys and press enter.
• Go to the Secure Boot option and press enter.

• Now, make sure it’s enabled and press enter.

• After enabling Secure Boot, exit your BIOS settings by pressing the F10 key and select Yes.

How to Check if Your System Has TPM

On Windows 10 computers, the TPM chip is needed to enable features like device encryption and BitLocker. The TPM chip is required for upgrading to Windows 11, and it will also be utilized to configure security features. There are several techniques to determine whether or not your system contains a TPM 2.0 chip.

Method 1. Check TPM Using tpm.msc

Step 1. Press Windows key + R to open Run.

Step 2. Now, type tpm.msc and press enter.

Step 3. When the TMP Management window appears, you’ll be able to check whether or not the TPM is installed on your device. These are the requirements to check for, and they MUST be present in order to enable device encryption:

You’ll notice this under Status: Compatible TPM cannot be found if the TPM isn’t found or deactivated in the BIOS or UEFI.

Method 2. Check TPM via Device Manager

Step 1. Press Windows key + X and select Device Manager.

Device Manager

Step 2. Click on Security devices to expand the option.

Step 3. It will display the type of TPM chip you have. You’re fine to proceed if it reads Trusted Platform Module 2.0.

That’s it. This is how you can enable TPM and Secure Boot in HP from BIOS setup.

Read More:

• How to Disable Secure Boot on HP Laptop