How do I enable TPM BitLocker protection mode?

For your error message, it’s because that your computer doesn’t support or haven’t enabled the embedded TPM chip. However, you can still enable BitLocker without TPM, or you can add a TPM security chip to your computer. Keep reading to know more about TPM mode.

TPM (Trusted Platform Module) is an important part of BitLocker encryption and one of the BitLocker password protection methods. Next, I will give you detailed instructions about the problems possibly encountered when using TPM BitLocker encryption.

What is TPM?

Firstly, we need to figure out what TPM is. TPM, which can be regarded as the "security processor" of computer, has its functions mainly focus on two aspects:

On the one hand, it’s able to generate and verify the password in the computer with its built-in encryption algorithms. On the other hand, it’s used for storing vital keys. TPM is an encrypted storage unit. With its fully dedicated circuits, it allows the password storage process to bypass both the memory and the hard drive, which greatly enhances the safety of stored data with TPM embedded security.

Why BitLocker needs TPM?

TPM computer plays a crucial role in BitLocker encryption as it can not only securely store the BitLocker encryption keys but also ensure system integrity during Windows startup. If the system is tampered with, the BitLocker TPM chip will immediately prevent the system from booting, thus safeguarding the safety of BitLocker encrypted files.

When used in conjunction with BitLocker, TPM can provide hardware-level security. Through TPM, BitLocker can utilize hardware validation during the system boot process to ensure the security of data during encryption and decryption.

How to Enable TPM BitLocker Protection Mode?

Step 1 Check if your computer support TPM and confirm your TPM version is 1.2 or higher.

Step 2 Ensure TPM is Enabled in BIOS/UEFI to meet BitLocker TPM requirement.

Step 3 Enter into BitLocker Drive Encryption panel, then click on "Turn on BitLocker" option besides system drive.

Step 4 When it occurs the option to "Run BitLocker system check", check it and click "Continue" to go on the TPM security hardware.

Step 5 Follow the guidelines to complete the initialization of TPM. Then it will prompt you to restart computer.

Step 6After your computer shuts down, waitting for its restart, until it display a BitLocker Recovery key screen. Enter the BitLocker password, then log into the Windows. The system drive will resume the BitLocker Encryption process.

Step 7Follow the wizard step by step until you complete the BitLocker encryption process.

How to Enhance the Security of BitLocker without TPM?

Once your computer has TPM drive encryption, it can provide more hardware-bases security features. However, you can also leverage a password, USB startup key, or other methods to unlock BitLocker during startup. Though less secure than TPM, they can also protect your personal data to a certain extent.