Check TPM 2.0 Status with Get-Tpm

See whether the Trusted Platform Module exists, is enabled, and is ready — the other half of the Windows 11 hardware check.

WindowshardwaretpmpowershellLow risk
Run Get-Tpm in an elevated PowerShell and read TpmPresent, TpmReady, and TpmEnabled; SpecVersion starting with 2.0 confirms TPM 2.0.

01Command

Command
$ Get-Tpm
Get-CimInstance -Namespace root\cimv2\security\microsofttpm -ClassName Win32_Tpm | Select-Object SpecVersion

02What it does

Besides Secure Boot, Windows 11 requires TPM 2.0, and BitLocker, Windows Hello, and credential guard lean on it too. Get-Tpm reports the three flags that matter: TpmPresent (a chip exists), TpmEnabled (firmware turned it on), and TpmReady (the OS can use it). The SpecVersion via the Win32_Tpm class tells you the version — 2.0 satisfies Windows 11; a 1.2 chip does not, even if everything else checks out. Older desktops may simply lack a TPM, or have it disabled in UEFI settings (often labelled "PTT" on Intel boards, "fTPM" on AMD), which is the most common fixable cause of a failed Windows 11 check.

03Risk

RiskLow risk
RequirementsPowerShell as Administrator
!Warning: Do not clear or reset the TPM on a BitLocker-encrypted machine without your recovery key — encrypted data can become unrecoverable.

04Undo

✓No undo needed — this command does not change persistent state.

05Sources

  • Get-Tpm
    Microsoft Learn · vendor-doc · 2026-09-17
    Evidence: Documents Get-Tpm returning TpmPresent, TpmReady, and TpmEnabled properties from the WMI TPM provider.

Last verified: 2026-09-18 · Category: System & Settings

06Related solutions