# TPM and Secure Boot

### 📌 How to Disable TPM and Secure Boot in BIOS

Disabling **TPM** and **Secure Boot** may make your system less secure and can prevent Windows 11 from working properly. Only do this if needed (e.g., for dual-booting Linux, modding, virtualization, or legacy booting).

***

### 🖥 Step 1: Check the Current Status of TPM and Secure Boot

**✅ Check TPM Status**

1. Press `Windows + R`, type `tpm.msc`, and press Enter.
2. If TPM is enabled, you’ll see:
   * **"The TPM is ready for use"**
   * **Manufacturer Info** (like Intel or AMD)

**✅ Check Secure Boot Status**

1. Press `Windows + R`, type `msinfo32`, and press Enter.
2. Look for:
   * **Secure Boot State** → Should say **On** or **Enabled**
   * **BIOS Mode** → UEFI (Secure Boot requires UEFI)

***

### 🖥 Step 2: Enter BIOS/UEFI Settings

1. Restart your PC.
2. Immediately begin pressing the correct key for BIOS setup. Common keys:
   * `Del`, `F2`, `F10`, `F12`, or `Esc`
   * Look for a prompt like “Press F2 to enter Setup”
3. You’ll now be inside your BIOS or UEFI firmware interface.

***

### 🖥 Step 3: Disable TPM (Trusted Platform Module)

> 🔐 TPM is usually found under security-related menus.

In BIOS/UEFI:

1. Go to the **Security**, **Advanced**, or **Trusted Computing** tab.
2. Look for one of the following:
   * **TPM Device**
   * **Intel Platform Trust Technology (PTT)**
   * **AMD fTPM**
3. Set it to:
   * **Disabled**
   * Or **TPM Device Selection** → **Discrete TPM** or **None**

> 💡 On Intel systems, disable **PTT**; on AMD systems, disable **fTPM**.

1. Save and exit (usually by pressing `F10`, then selecting **Yes**).

***

### 🖥 Step 4: Disable Secure Boot

> 🔐 Secure Boot is found under boot settings, and requires UEFI mode to be active.

In BIOS/UEFI:

1. Go to the **Boot**, **Security**, or **Authentication** tab.
2. Look for **Secure Boot** or **Secure Boot Control**.
3. Set **Secure Boot** to **Disabled**.

> 🛑 If the setting is greyed out, you may need to:

* Change **Boot Mode** to **Custom** or **Legacy/CSM** first.
* Clear Secure Boot Keys:
  * Option: **Clear Secure Boot Keys** → Yes
  * Then, Secure Boot should become editable.

1. Save changes and exit BIOS (`F10` → Yes).

***

### 🖥 Step 5: Reboot and Confirm Changes

\
After restarting:

* Press `Windows + R`, type `tpm.msc` → Should now say **“Compatible TPM not found”**
* Press `Windows + R`, type `msinfo32` → **Secure Boot State** should say **Off**