To enable TPM 2.0 on a Gigabyte motherboard, you need to activate the firmware-based Trusted Platform Module (AMD CPU fTPM for AMD processors or Intel Platform Trust Technology for Intel CPUs) directly in the BIOS. This process takes only a few minutes and is mandatory for Windows 11 compatibility, as well as for using features like BitLocker device encryption and Windows Hello biometric login.
Step 1: Enter the BIOS and switch to Advanced Mode
Restart your PC and immediately press the DEL key repeatedly as soon as the Gigabyte logo appears on screen. If your BIOS opens in the simplified "Easy Mode" interface, press the F2 key to switch to "Advanced Mode," which exposes all the configuration options you need for TPM.
Step 2: Enable TPM 2.0 for your processor
Once in Advanced Mode, use the arrow keys to navigate to the Settings tab. Depending on your specific Gigabyte motherboard model, you will find the TPM settings under either Miscellaneous or Peripherals submenu.
For AMD systems
Select AMD CPU fTPM and press Enter, then change the setting to Enabled. This activates the firmware TPM built into your Ryzen processor.
For Intel systems
Select Intel Platform Trust Technology (PTT) and press Enter, then set it to Enabled. This uses the integrated TPM functionality of your Intel CPU.
Most modern AMD Ryzen and Intel Core processors (roughly from 2012 onward) include this firmware TPM, so no separate hardware module is required. If you have a very old CPU that lacks fTPM/PTT, you would need a discrete TPM 2.0 module on the motherboard header, but this is rare for systems that can run Windows 11.
Step 3: Save, exit, and verify in Windows
Press F10 to open the save-and-exit prompt, confirm your changes, and let the system reboot. After Windows loads, verify that TPM 2.0 is active by pressing Win + R, typing tpm.msc, and pressing Enter, the status should read "TPM is ready for use" with the specification version showing 2.0. Alternatively, open Windows Security → Device security → Security processor details to see the same information.
Troubleshooting: TPM option missing or grayed out
If you cannot find the fTPM or PTT option in your BIOS, or if it appears grayed out and unselectable, the most common fix is updating your motherboard's BIOS to the latest version. Visit the official Gigabyte website, search for your exact motherboard model, download the newest BIOS file from the "Support" → "Downloads" section, and flash it using Gigabyte's @BIOS utility or Q-Flash tool. After the update, re-enter the BIOS, the TPM setting should now be visible and selectable.
Secure Boot considerations
While you're in the BIOS, you may also want to enable secure boot on gigabyte motherboard (How To Enable Secure Boot On Gigabyte Motherboard) since Windows 11 requires both TPM 2.0 and Secure Boot. For Secure Boot to work, your system disk must use the GPT partition style and Windows must be booting in UEFI mode (not Legacy BIOS/CSM). You can check this in Windows by running msinfo32, under "BIOS Mode" it should say "UEFI."
Motherboard series with confirmed TPM 2.0 support
Gigabyte's Intel motherboards from the X299, B250, 300, 400, and 500 series, as well as AMD boards from the AM4, TRX40, 300, 400, and 500 series, are all TPM 2.0 ready via BIOS settings. Newer AM5 and sTR5 platforms running Windows 11 typically have TPM 2.0 enabled by default from the factory. If you have one of these boards and still don't see the option, a BIOS update is almost certainly the solution.
What if firmware TPM is not available?
In rare cases where your CPU lacks fTPM/PTT support (very old processors), you can install a discrete TPM 2.0 module (dTPM) onto the motherboard's TPM header. These modules are available from Gigabyte and third-party vendors. However, note that some security applications, including Windows 11's core features, may specifically require firmware-based TPM rather than a discrete module, so check compatibility before purchasing.
After successfully enabling TPM 2.0, your Gigabyte motherboard will provide hardware-level security for BitLocker encryption, Windows Hello, and other TPM-dependent features. The entire process, from entering the BIOS to verifying activation in Windows, takes under five minutes, and once enabled, the setting persists across reboots and system updates.
