What is a TPM?

chip_lock

TPM (Trusted Platform Module) is a hardware chip that’s responsible for protecting your PC from ransomware or any other kind of hacks and malware. It’s a cryptoprocessor that holds keys to sensitive information, including your PC’s PIN or password, Windows Hello authentication data, encryption keys for Bitlocker, security-critical keys, and more.

Since it’s a hardware-based module, it’s impossible for malware to manipulate it through traditional software methods. Hence, the TPM chip becomes an elevated, hardware-based “root-of-trust” that the OS can always trust.

To give a parallel example in the Android world, Samsung adds a separate Knox chip that does hardware-based authentication for passwords, payments, confidential files, etc. All this shows that hardware-based protection is the way to go, and Microsoft is right in including the TPM requirement for Windows 11.

The TPM module generally comes built-in with the CPU, but for custom-built PCs, you will find a TPM header on the motherboard where you can attach a compatible TPM module. At least since 2014, almost all the processors have come with the TPM module onboard. Intel started integrating TPM on its chips with the Haswell architecture (2013, 4th-Gen) except for the K-series, which got the integrated Trusted Platform Module with 6th-Gen (2015). The TPM security chip is integrated right into the CPU from Ryzen 2500 (2017) and onwards. Below, you can find out the steps for how to enable TPM on your Windows 10 PC.

Leave a comment