🔐TPM and Secure Boot

🧷 How to Disable TPM and Secure Boot in BIOS

⚠️ Warning: Disabling TPM and Secure Boot may make your system less secure and can prevent Windows 11 from working properly. Only do this if needed (e.g., for dual-booting Linux, modding, virtualization, or legacy booting).

---

📌 Step 1: Check the Current Status of TPM and Secure Boot

✅ Check TPM Status

1. Press Windows + R, type tpm.msc, and press Enter.

2. If TPM is enabled, you’ll see:

   • "The TPM is ready for use"

   • Manufacturer Info (like Intel or AMD)

✅ Check Secure Boot Status

1. Press Windows + R, type msinfo32, and press Enter.

2. Look for:

   • Secure Boot State → Should say On or Enabled

   • BIOS Mode → UEFI (Secure Boot requires UEFI)

---

🖥 Step 2: Enter BIOS/UEFI Settings

1. Restart your PC.

2. Immediately begin pressing the correct key for BIOS setup. Common keys:

   • Del, F2, F10, F12, or Esc

   • Look for a prompt like “Press F2 to enter Setup”

3. You’ll now be inside your BIOS or UEFI firmware interface.

---

🛑 Step 3: Disable TPM (Trusted Platform Module)

🔐 TPM is usually found under security-related menus.

In BIOS/UEFI:

1. Go to the Security, Advanced, or Trusted Computing tab.

2. Look for one of the following:

   • TPM Device

   • Intel Platform Trust Technology (PTT)

   • AMD fTPM

3. Set it to:

   • Disabled

   • Or TPM Device Selection → Discrete TPM or None

💡 On Intel systems, disable PTT; on AMD systems, disable fTPM.

1. Save and exit (usually by pressing F10, then selecting Yes).

---

🔐 Step 4: Disable Secure Boot

Secure Boot is found under boot settings, and requires UEFI mode to be active.

In BIOS/UEFI:

1. Go to the Boot, Security, or Authentication tab.

2. Look for Secure Boot or Secure Boot Control.

3. Set Secure Boot to Disabled.

🛑 If the setting is greyed out, you may need to:

• Change Boot Mode to Custom or Legacy/CSM first.

• Clear Secure Boot Keys:

  • Option: Clear Secure Boot Keys → Yes

  • Then, Secure Boot should become editable.

1. Save changes and exit BIOS (F10 → Yes).

---

🔁 Step 5: Reboot and Confirm Changes

1. After restarting:

   • Press Windows + R, type tpm.msc → Should now say “Compatible TPM not found”

   • Press Windows + R, type msinfo32 → Secure Boot State should say Off