>

Check TPM State With Get-Tpm

Verify TPM presence, readiness and ownership for BitLocker or attestation.

WindowshardwaresecurityencryptionLow risk
Run Get-Tpm to print TPM presence, enabled, activated and owned flags.

01Command

Command
$ Get-Tpm

02What it does

TPM readiness is a prerequisite for BitLocker and device attestation, and Get-Tpm returns that state as an object for automated pre-checks. Testing dozens of machines before enabling encryption is a scripted readiness audit, not a per-machine GUI task.

03Risk

RiskLow risk
RequirementsRun PowerShell as Administrator
!Warning: Clearing or taking ownership of a TPM can invalidate keys and lock the drive; never do so casually.

04Undo

✓No undo needed — this command does not change persistent state.

05Sources

  • Get-Tpm
    Microsoft Learn · vendor-doc · 2026-09-20
    Evidence: Reports TPM presence, readiness and ownership information.

Last verified: 2026-10-13 · Category: Security & Privacy

06Related solutions

Fix 'scripts is disabled on this system' with Set-ExecutionPolicy
WindowsTerminaldevelopersecurity

Understand PowerShell's execution policy scopes and set the one that lets you run your own local scripts without gutting the security model.

Medium risk ✓ 2026-09-17
Get a Full System Summary with systeminfo
WindowshardwarecmdDiagnostics

One command that shows OS version, install date, boot time, memory, network adapters and installed hotfixes.

Low risk ✓ 2026-09-17
Take ownership of a file or folder with takeown and icacls
WindowsFilessystemsecurity

Two-step command sequence that makes you the owner of a locked file tree and grants yourself full control — the standard fix for 'Access is denied' on old profiles and OS reinstall leftovers.

High risk ✓ 2026-09-17