TPM issues

Question

Hi, I needed tpm 2.0 for a game a play so I updated my bios to the newest version, before it said I had a compatible tpm but didn't work thats why I did this. Then I made sure secure boot was on csm support is off and made sure secure boot was fully active. I'm having no issues with it but ftpm is enabled yet won't show in my tpm.msc nor will it show in security devices in device manager. Its acting like I just don't have one. I have a b550M K gigabyte with a amd ryzen 5 5500. Like I said before it showed I had one but didn't work then updated my bios did full shut downs resets everything I could find on Google and YouTube and reddit but it shows in trusted computing there's no security devices found nor will it show it in windows anywhere. Please help!!

Answer 1

Boot your PC into BIOS.

Find the Secure Boot and TPM settings.

You should see an option to reset TPM and Secure Boot Keys to Factory keys, apply that and restart your PC, Windows should then see the TPM on your motherboard.

Answer 2

Follow these steps in order, checking after each major step whether TPM appears in tpm.msc and in Windows Security → Device security.

1. Confirm Windows is looking for TPM 2.0

• In Windows 11, open Settings → Update & Security → Windows Security → Device Security.
• If there is no Security processor section, Windows currently does not see any TPM.
• If it appears later, select Security processor details and confirm Specification version is 2.0.

2. Check if the board/CPU combo supports fTPM 2.0 and that only one TPM is exposed

• The AMD Ryzen 5 5500 supports firmware TPM (fTPM) via the CPU.
• Some systems can expose more than one TPM implementation; Windows does not support switching between multiple TPMs after the OS is installed and may fail to detect a newly toggled TPM.
• If the BIOS has any option to choose between different TPM types (for example, discrete vs firmware), select only the firmware TPM, then keep that setting and do not switch again. If it was changed, set it to the desired TPM, clear it in firmware, and then reinstalling Windows is the fully supported path if detection remains broken.

3. Verify TPM 2.0 is enabled and UEFI-only boot is configured

• TPM 2.0 is not supported in Legacy/CSM BIOS modes. Ensure:
  • CSM/Legacy/Compatibility Support Module is disabled.
  • Boot mode is Native UEFI only.
  • Secure Boot is enabled for added security (not required for TPM detection but recommended).
• If Windows was originally installed in legacy (MBR) mode and BIOS was later switched to UEFI, the OS may not boot correctly or may behave inconsistently. In such cases, use the MBR2GPT tool to convert the disk and OS properly before switching to UEFI.

4. Use Windows tools to see if a TPM is present but disabled

• Option 1 (Windows Security app):
  1. Open Settings → Update & Security → Windows Security → Device Security.
  2. If Security processor is missing, the TPM may be disabled in firmware.
• Option 2 (MMC snap-in):
  1. Press Windows key + R, type tpm.msc, press OK.
  2. If the message is “Compatible TPM cannot be found”, Windows sees no active TPM. This usually means it is disabled or not exposed correctly in BIOS/UEFI.

5. Use Security processor troubleshooting (if it appears later)

• Once the Security processor section shows up, open Device security → Security processor details → Security processor troubleshooting.
• Check for messages such as:
  • “TPM is disabled and requires attention.” → Turn TPM on in BIOS/UEFI.
  • “A firmware update is needed for your security processor (TPM).” or “Your TPM isn't compatible with your firmware and may not be working properly.” → Update the motherboard firmware/BIOS again or apply any TPM-related firmware update from the board vendor.
  • “TPM storage is not available. Please clear your TPM.” → Use Clear TPM on that page after backing up data.

6. Initialize the TPM once firmware exposes it

• Starting with Windows 10, Windows normally initializes and takes ownership of the TPM automatically.
• If the TPM shows as present but not ready (for example, in PowerShell or management tools), run TPM initialization (for example, via the Initialize-Tpm PowerShell cmdlet as documented) and then reboot.

7. If the TPM disappeared after switching implementations

• If the system previously showed a TPM, then BIOS was updated and TPM type or settings were changed, Windows may be bound to the old TPM state.
• On systems where multiple TPMs can be toggled, the supported guidance is:
  • Select the TPM to use in UEFI.
  • Clear that TPM in UEFI.
  • Reinstall Windows so it provisions against that single, consistent TPM.

If, after confirming UEFI-only boot, disabling CSM, enabling fTPM in BIOS, and rebooting, tpm.msc still reports that a compatible TPM cannot be found and Windows Security shows no Security processor section, the remaining steps are:

• Check the motherboard vendor’s support site for a newer BIOS or TPM-related firmware update.
• Reset BIOS/UEFI to defaults, then re-enable UEFI-only boot, Secure Boot, and fTPM.
• If the firmware still reports “no security devices found” in its own TPM/Trusted Computing page, contact the motherboard manufacturer for board-specific TPM support or RMA options.

---

References:

• TPM recommendations
• What's a Trusted Platform Module (TPM)?
• Enable TPM 2.0 on your PC
• Device Security in the Windows Security App
• Troubleshoot the TPM
• Trusted Platform Module 2.0