Privacy and Security Check TPM version in Windows 10 and Windows 11

This tutorial will show you how to check which Trusted Platform Module (TPM) version you have on your Windows 10 and Windows 11 PC.

Windows 11 requires a Trusted Platform Module (TPM) version 2.0 or higher.

Trusted Platform Module (TPM) technology is designed to provide hardware-based, security-related functions. A TPM chip is a secure crypto-processor that is designed to carry out cryptographic operations. The chip includes multiple physical security mechanisms to make it tamper resistant, and malicious software is unable to tamper with the security functions of the TPM. Some of the advantages of using TPM technology are:

• Generate, store, and limit the use of cryptographic keys.
• Use it for device authentication by using the TPM's unique RSA key, which is burned into the chip.
• BitLocker Drive Encryption or Device Encryption: Automatically encrypts the computer drive to keep your data safe.
• Data Execution Prevention: Prevents unauthorized applications like malware from running in memory.
• Windows Hello: Secure user authentication without a password.
• Secure Boot and Measured Boot: Block malicious drivers and rootkits from intercepting the boot process of the Operating System. Help ensure platform integrity by taking and storing security measurements of the boot process.

The most common TPM functions are used for system integrity measurements and for key creation and use. During the boot process of a system, the boot code that is loaded (including firmware and the operating system components) can be measured and recorded in the TPM. The integrity measurements can be used as evidence for how a system started and to make sure that a TPM-based key was used only when the correct software was used to boot the system.

References:







1 Open Windows Security.

2 Click/tap on Device security. (see screenshot below)


3 Under Security processor, click/tap on the Security processor details link. (see screenshot below)


4 You will now see the TPM version (ex: "2.0") next to Specification version. (see screenshot below)






1 Open Trusted Platform Module (TPM) Management (tpm.msc).

2 You will now see the TPM version (ex: "2.0") next to Specification Version. (see screenshot below)







1 Open Device Manager (devmgmt.msc).

2 Expand open Trusted Platform Module. (see screenshot below)

3 You will now see the TPM version (ex: "2.0") at the end of the Trusted Platform Module 2.0 device name.








1 Open Windows Terminal, and select either Windows PowerShell or Command Prompt.

2 Copy and paste the command below into Windows Terminal, and press Enter. (see screenshot below)


3 You will now see the TPM Version (ex: "2.0") listed in the details.







1 Open Windows Terminal (Admin), and select Command Prompt.

2 Copy and paste the command below into Windows Terminal (Admin), and press Enter. (see screenshot below)


3 You will now get the TPM version (ex: "2.0") as the output.




That's it,
Shawn Brink