Fix TPM and Secure Boot Issues

Medium15-30 minutesSecurity & Privacy

Last updated: January 3, 2026

Check and enable TPM and Secure Boot for Windows 11, get a BitLocker recovery key after BIOS changes and clear the TPM safely without a lockout.

Not sure this is your exact issue? Every WindowsHelper guide is scoped to one specific problem — not a generic troubleshooting checklist — so if the title above matches what you're seeing, this is the right guide.

What TPM and Secure Boot actually check for

Before Windows even starts loading, your PC has a couple of low-level checks that confirm the startup process hasn’t been tampered with, and that a small security chip is present to back certain protections, like drive encryption. Most people never think about either one — until a message appears saying the PC “doesn’t meet requirements” for something, and one of these two names shows up in the explanation.

Seeing that message doesn’t automatically mean anything is actually missing from your PC. It often means the capability is there but simply isn’t currently recognized as active — a very different situation from hardware that genuinely doesn’t exist, though the message looks identical either way.

How to tell this is what’s going on

How serious is it?

Usually minor

Seeing this message alone doesn’t mean anything is broken — many PCs already have what’s needed; it simply isn’t always active in a way Windows can currently detect.

Worth taking seriously

If the capability is genuinely absent on older hardware, that’s a different, less easily worked-around situation — worth knowing clearly before assuming it’s a quick fix.

Why guessing here goes wrong in two different directions

People tend to land on one of two mistaken conclusions: assuming they need an entirely new PC when they don’t, or poking around low-level system settings without being sure what they’re actually looking at — which is riskier territory to guess in than most everyday settings.

Working out which situation you’re actually in — present but inactive, or genuinely absent — before anything gets touched is what WindowsHelper is being built to do.

What this helps with

What to expect: Medium difficulty • usually about 15-30 minutes.

Topics covered
fixtpmandsecurebootissues

This is one of 30 Security & Privacy fixes in the WindowsHelper library. The full step-by-step fix for this is in the WindowsHelper app.

Coming soon in the app

The full step-by-step fix for this is in the WindowsHelper phone app — coming soon, no price announced yet. The free PC Companion (available now) is the piece that connects your phone to your PC.

🔔 Get notified at launch
Share: Share on X Share on Facebook Share by email

Common questions

Do I need to buy a new PC because of this message?
Not necessarily — a large share of PCs showing this message already have what’s needed; it just isn’t currently recognized as active. Genuinely lacking it is a smaller, separate case.
Is this risky to sort out myself?
It touches lower-level settings than most everyday fixes, which is exactly why knowing precisely what you’re dealing with first matters more here than usual.
Why does my PC work fine otherwise?
These checks only matter for specific things, like certain upgrades or certain protections — the rest of the PC runs independently of them, which is why everything else can feel completely normal.
Is this the same thing as drive encryption?
They’re related but distinct — encryption can rely on this security chip being present, but the chip itself is a separate piece from the encryption feature that uses it.
Will sorting this out affect my files?
On its own, no — this is about a low-level check the PC performs before Windows even starts, not about anything stored on the drive.

Related fixes in Security & Privacy

You might also run into

Browse all 1,000+ fixes →