Recommended Free Tools
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Windows 11 requires TPM 2.0, but it does not require a separate, discrete TPM chip. A firmware TPM (fTPM) is still TPM functionality: it is implemented through platform firmware or a trusted execution environment rather than a dedicated chip. For Windows 11 eligibility, what matters is whether your PC exposes TPM 2.0 and meets the other system requirements—not whether the TPM is discrete or firmware-based.
What is the difference between a TPM and a firmware TPM?
A trusted platform module (TPM) provides hardware-based security functions, including generating and protecting cryptographic keys, recording boot measurements, and supporting attestation. Microsoft describes TPM technology as designed to provide “hardware-based, security-related functions.” Microsoft’s TPM 2.0 overview explains the component’s role.
“TPM” can refer to the security function generally or to a particular implementation. A discrete TPM (dTPM) is a dedicated chip, traditionally soldered to a motherboard. An integrated TPM is incorporated with other platform components. A firmware TPM implements TPM 2.0 functionality in platform firmware, often within a trusted execution environment. Microsoft recognizes discrete, integrated, and firmware implementations; a firmware TPM is not the same as having no TPM. See Microsoft’s TPM recommendations.
| Implementation | Where TPM functionality is provided | What to check |
|---|---|---|
| Discrete TPM (dTPM) | A dedicated chip integrated with the motherboard and system firmware. | Confirm the PC and firmware support it; a generic module is not automatically compatible. |
| Integrated TPM | Integrated with other platform components. | Check the device maker’s documentation for the implementation and supported configuration. |
| Firmware TPM (fTPM) | Platform firmware or a trusted execution environment. | Confirm that the system exposes TPM 2.0 and that its firmware settings are configured appropriately. |
These categories describe implementation, not a universal ranking. Microsoft’s documentation does not establish that firmware TPMs are always faster, slower, more or less secure, or more or less reliable than discrete TPMs. Those outcomes cannot be generalized from the implementation label alone.
#1 Best Overall
- Compatible with TPM-M R2.0
- Chipset: Infineon SLB9665
- PIN DEFINE:14Pin
- Interface:LPC
- Please check the Pinout of mainboard at the official website and make sure it compatible with the pinout of TPM module before purchasing, thank you.
Does Windows 11 require a discrete TPM?
No. Microsoft’s Windows 11 hardware requirements specify TPM 2.0 and separately require UEFI firmware that is Secure Boot capable; they do not say TPM 2.0 must come from a discrete chip. Microsoft’s Windows 11 OEM guidance also refers to discrete and firmware TPMs in the context of device encryption. Windows 11 BitLocker drive encryption guidance for OEMs
Having TPM 2.0 is only one part of Windows 11 eligibility. Your PC must also meet the other published requirements, including the relevant processor, memory, storage, graphics, and UEFI/Secure Boot conditions. Check the requirements for the specific Windows 11 release and verify your model’s specifications with its manufacturer.
Rank #2
- Nuvoton NPCT650
- TCG PC Client Platform TPM Profile (PTP) Specification; Family 2.0 (Trusted Platform Module Library; Family 2.0)
- TCG PC Client Specific TPM Interface Specification (TIS), Version 1.3 (TPM Main Specification; Family 1.2 Revision 116)
- Low Standby Power Consumption
What does a TPM do for Windows security?
A TPM can generate and protect keys, support encryption, record measurements of the boot process, and help attest that a system is in an expected state. Windows security features such as Windows Hello, BitLocker, and System Guard can use TPM capabilities. Microsoft’s Windows security book describes these hardware-root-of-trust functions.
Free tools Windows power users keep installed
One-click scans. No signup required.
BitLocker
BitLocker can use a TPM to check system integrity during startup and help protect encryption keys. If a device has no TPM, Microsoft says enabling BitLocker requires saving a startup key on removable storage. That is a separate configuration for systems without a TPM; it is not a reason to treat a firmware TPM as absent. See Microsoft’s BitLocker overview.
Rank #3
- Compatible with：TPM2.0(MS-4462)
- Chipset: INFINEON 9670 TPM 2.0
- PIN DEFINE:12-1Pin
- Interface:SPI
- Supports：MSI Intel 400 Series and 500 Series Motherboards,MSI AMD B550 and A520 Series Motherboards,Windows 10 TPM 2.0
Automatic device encryption
TPM 2.0 by itself does not guarantee that automatic device encryption is enabled. Microsoft’s OEM guidance lists additional requirements and configuration conditions, including PCR 7 support and UEFI Secure Boot being enabled. The actual result depends on the device and its configuration. Microsoft’s Windows 11 BitLocker drive encryption guidance for OEMs
How can you tell which TPM your PC uses?
Windows can show whether a TPM is available and its specification version, but a Windows status screen may not identify the implementation type. Use your PC or motherboard manufacturer’s specifications and support documentation to establish whether the system uses a discrete, integrated, or firmware TPM.
Rank #4
- TPM 2.0 module for Asus motherboard.
- TPM 2.0 module chip 2.0mm pitch, 2x7P, 14 pin security module
- LPC 14 Pin for AsusTPM chip is better compatible with DDR4 memory module of motherboard, built in support memory type higher than DDR3! Supported states may vary by motherboard specification.
- Note: Don't support laptops and motherboards prior to X99; Don't support DDR3 memory.
- Packing list:1x TPM 2.0 Module for ASUS
- Open the manufacturer’s support page for your exact PC or motherboard model and review its specifications or UEFI documentation for TPM 2.0 support and implementation.
- In Windows, open the TPM management console by pressing Windows+R, entering
tpm.msc, and pressing Enter. Check whether Windows reports that the TPM is ready and note the specification version. - If Windows does not detect a TPM, consult the manufacturer’s UEFI instructions before changing settings. The TPM option may be disabled or hidden, and its label and location vary by system.
Microsoft’s TPM troubleshooting guidance recommends checking whether TPM 2.0 is disabled or hidden in UEFI and using Microsoft-provided TPM drivers. Avoid guessing at firmware settings: the safe menu path depends on the device maker.
Should you buy a discrete TPM module?
Do not choose a generic TPM module based only on the fact that it is discrete. A module must work with the motherboard’s connector, firmware, and TPM implementation, and the system must be designed to integrate it correctly. Microsoft notes that TPM behavior depends on careful integration with system hardware and firmware. Verify exact support with the motherboard or PC manufacturer before buying anything; many systems expose TPM functionality through firmware instead.
Quick Recap
Best Value
- Product Color: Black
- Width: 0.6"
- Depth: 0.5"
- Additional Information: Interface: SPI Features: TPM IC: Nuvoton NPCT750 TPM Version: TPM 2.0 Pin Dimension: 14-1pin System Requirements: Windows® 10, UEFI OS
- Country of Origin: Vietnam
What should you check before changing TPM settings?
- Find the exact model’s manufacturer instructions for TPM and Secure Boot settings; names and menu locations vary.
- Make sure you have access to the recovery information for any encrypted drive before changing TPM, Secure Boot, or BitLocker configuration.
- Change only settings you understand and follow the device maker’s guidance. The effect of a setting change depends on the hardware, firmware, and encryption configuration.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
