Check TPM 2.0 Status with Get-Tpm
See whether the Trusted Platform Module exists, is enabled, and is ready — the other half of the Windows 11 hardware check.
01Command
$ Get-Tpm
Get-CimInstance -Namespace root\cimv2\security\microsofttpm -ClassName Win32_Tpm | Select-Object SpecVersion02What it does
Besides Secure Boot, Windows 11 requires TPM 2.0, and BitLocker, Windows Hello, and credential guard lean on it too. Get-Tpm reports the three flags that matter: TpmPresent (a chip exists), TpmEnabled (firmware turned it on), and TpmReady (the OS can use it). The SpecVersion via the Win32_Tpm class tells you the version — 2.0 satisfies Windows 11; a 1.2 chip does not, even if everything else checks out. Older desktops may simply lack a TPM, or have it disabled in UEFI settings (often labelled "PTT" on Intel boards, "fTPM" on AMD), which is the most common fixable cause of a failed Windows 11 check.
03Risk
04Undo
✓No undo needed — this command does not change persistent state.
05Sources
- Get-TpmEvidence: Documents Get-Tpm returning TpmPresent, TpmReady, and TpmEnabled properties from the WMI TPM provider.
Last verified: 2026-09-18 · Category: System & Settings
06Related solutions
PowerShell cmdlet that exposes BIOS, firmware, RAM and OS properties as a filterable object.
Search inside text files and logs with regex, returning file, line number and match.
One command that shows OS version, install date, boot time, memory, network adapters and installed hotfixes.