In this guide, we will explain how to prepare your computer for Windows 11 by enabling TPM 2.0 and Secure Boot on an MSI motherboard equipped with an AMD Ryzen CPU. It’s important to note that on AMD platforms, TPM is referred to as FTPM or Firmware-based Trusted Platform Module.
Please follow us on Twitter and Facebook.
The motherboard we have used is the MSI MEG X570S, coupled with a 3rd generation Ryzen CPU. The steps we will explain should apply uniformly across all MSI boards with an AMD chipset. So, even if you possess a non-X570 board, you can still follow along with the steps to enable FTPM on your computer.
How To Enable TPM 2.0 in BIOS MSI
To enable TPM 2.0 in BIOS on an MSI motherboard, follow these steps:
- Restart your computer to enter the BIOS settings.
- Upon seeing the startup screen, press the “Del” key on your keyboard to access the BIOS settings.
- Once in the BIOS settings, navigate to the “Settings” menu.
- Go to “Security” settings.
- Tap on “Trusted Computing.”
- Enable “Security Device Support” to activate TPM (AMD refers to this as FTPM).
- Save the changes and exit the BIOS by selecting “Save Configuration and Exit.”
- After restarting and re-entering the BIOS, revisit the “Trusted Computing” section.
- Confirm that TPM is enabled by verifying that the settings display as expected.
With TPM now enabled, proceed with additional steps as needed.
How to Enable Secure Boot in BIOS MSI
To turn on Secure Boot on your system, follow these steps:
- Access the BIOS settings by restarting your computer and pressing the “Del” key during startup.
- Navigate to the “Settings” menu and select “Advanced.”
- Choose “Windows OS Configuration.”
- Change the option from “CSM” to “UEFI.”
- Save the changes and allow the computer to restart.
- Upon returning to the BIOS, access the “Settings” menu again.
- Tap on “Advanced” and then select “Windows OS Configuration.”
- Locate the “Secure Boot” option and enable it.
- Note the prompt indicating the system is in setup mode and secure boot can only be enabled in user mode.
- To resolve this, click on “Secure Boot Mode” and change it from “Standard” to “Custom.”
- After restarting your PC, return to the Secure Boot Mode and switch it back to “Standard.”
- Upon receiving the prompt, select “Install Factory Default” and confirm by clicking “Yes.”
- If prompted to reset without saving, choose “No” to change the system mode from setup to user.
Finally, exit the BIOS, saving all settings, and wait for Windows to restart.
How to Check if TPM and Secure Boot are Enabled
To check if TPM and Secure Boot are enabled, follow these steps:
- Press and hold the Start menu button, then press “R” to open the Run dialog box.
- In the Run dialog box, type “tpm.msc” and hit “Enter.”
- In the TPM Management window that opens, verify that TPM is ready for use. You should see the specification version listed as 2.0, indicating TPM 2.0, with the manufacturer specified (e.g., AMD).
- To check Secure Boot status, again press the Start button and hit “R” to open the Run dialog box.
- In the Run dialog box, type “msinfo32” and hit “Enter.”
- In the System Information window that appears, look for the “Secure Boot State” entry. It should display “On,” confirming that Secure Boot is enabled on your system.
With both TPM and Secure Boot confirmed as enabled, your system is now ready for installing Windows 11 or other compatible operating systems.
Read Also:
What is MSI Center? What can it do for You?
How To Use MSI Afterburner: Download, Installation, Setup, On Screen Display and Overclocking of GPU