🔐TPM and Secure Boot

🧷 How to Disable TPM and Secure Boot in BIOS

⚠️ Warning: Disabling TPM and Secure Boot may make your system less secure and can prevent Windows 11 from working properly. Only do this if needed (e.g., for dual-booting Linux, modding, virtualization, or legacy booting).

📌 Step 1: Check the Current Status of TPM and Secure Boot

✅ Check TPM Status

  1. Press Windows + R, type tpm.msc, and press Enter.

  2. If TPM is enabled, you’ll see:

    • "The TPM is ready for use"

    • Manufacturer Info (like Intel or AMD)

✅ Check Secure Boot Status

  1. Press Windows + R, type msinfo32, and press Enter.

  2. Look for:

    • Secure Boot State → Should say On or Enabled

    • BIOS Mode → UEFI (Secure Boot requires UEFI)

🖥 Step 2: Enter BIOS/UEFI Settings

  1. Restart your PC.

  2. Immediately begin pressing the correct key for BIOS setup. Common keys:

    • Del, F2, F10, F12, or Esc

    • Look for a prompt like “Press F2 to enter Setup”

  3. You’ll now be inside your BIOS or UEFI firmware interface.

🛑 Step 3: Disable TPM (Trusted Platform Module)

🔐 TPM is usually found under security-related menus.

In BIOS/UEFI:

  1. Go to the Security, Advanced, or Trusted Computing tab.

  2. Look for one of the following:

    • TPM Device

    • Intel Platform Trust Technology (PTT)

    • AMD fTPM

  3. Set it to:

    • Disabled

    • Or TPM Device Selection → Discrete TPM or None

💡 On Intel systems, disable PTT; on AMD systems, disable fTPM.

  1. Save and exit (usually by pressing F10, then selecting Yes).

🔐 Step 4: Disable Secure Boot

Secure Boot is found under boot settings, and requires UEFI mode to be active.

In BIOS/UEFI:

  1. Go to the Boot, Security, or Authentication tab.

  2. Look for Secure Boot or Secure Boot Control.

  3. Set Secure Boot to Disabled.

🛑 If the setting is greyed out, you may need to:

  • Change Boot Mode to Custom or Legacy/CSM first.

  • Clear Secure Boot Keys:

    • Option: Clear Secure Boot Keys → Yes

    • Then, Secure Boot should become editable.

  1. Save changes and exit BIOS (F10 → Yes).

🔁 Step 5: Reboot and Confirm Changes

  1. After restarting:

    • Press Windows + R, type tpm.msc → Should now say “Compatible TPM not found”

    • Press Windows + R, type msinfo32 → Secure Boot State should say Off

PreviousNecessary InstallsNextVulnerable Driver Blocklist

Last updated