🔐TPM and Secure Boot

📌 How to Disable TPM and Secure Boot in BIOS

Disabling TPM and Secure Boot may make your system less secure and can prevent Windows 11 from working properly. Only do this if needed (e.g., for dual-booting Linux, modding, virtualization, or legacy booting).

---

🖥 Step 1: Check the Current Status of TPM and Secure Boot

✅ Check TPM Status

1. Press Windows + R, type tpm.msc, and press Enter.

2. If TPM is enabled, you’ll see:

   • "The TPM is ready for use"

   • Manufacturer Info (like Intel or AMD)

✅ Check Secure Boot Status

1. Press Windows + R, type msinfo32, and press Enter.

2. Look for:

   • Secure Boot State → Should say On or Enabled

   • BIOS Mode → UEFI (Secure Boot requires UEFI)

---

🖥 Step 2: Enter BIOS/UEFI Settings

1. Restart your PC.

2. Immediately begin pressing the correct key for BIOS setup. Common keys:

   • Del, F2, F10, F12, or Esc

   • Look for a prompt like “Press F2 to enter Setup”

3. You’ll now be inside your BIOS or UEFI firmware interface.

---

🖥 Step 3: Disable TPM (Trusted Platform Module)

🔐 TPM is usually found under security-related menus.

In BIOS/UEFI:

1. Go to the Security, Advanced, or Trusted Computing tab.

2. Look for one of the following:

   • TPM Device

   • Intel Platform Trust Technology (PTT)

   • AMD fTPM

3. Set it to:

   • Disabled

   • Or TPM Device Selection → Discrete TPM or None

💡 On Intel systems, disable PTT; on AMD systems, disable fTPM.

1. Save and exit (usually by pressing F10, then selecting Yes).

---

🖥 Step 4: Disable Secure Boot

🔐 Secure Boot is found under boot settings, and requires UEFI mode to be active.

In BIOS/UEFI:

1. Go to the Boot, Security, or Authentication tab.

2. Look for Secure Boot or Secure Boot Control.

3. Set Secure Boot to Disabled.

🛑 If the setting is greyed out, you may need to:

• Change Boot Mode to Custom or Legacy/CSM first.

• Clear Secure Boot Keys:

  • Option: Clear Secure Boot Keys → Yes

  • Then, Secure Boot should become editable.

1. Save changes and exit BIOS (F10 → Yes).

---

🖥 Step 5: Reboot and Confirm Changes

After restarting:

• Press Windows + R, type tpm.msc → Should now say “Compatible TPM not found”

• Press Windows + R, type msinfo32 → Secure Boot State should say Off