有没有想过哪些设备支持Windows Hello、指纹^{(Fingerprint)}验证和关键生物特征数据 - 以及它们存储这些数据的位置？将这些数据存储在您的计算机或手机上可能会有风险。这就是TPM或可信平台模块^{(Trusted Platform Module)}出现的地方。在这篇文章中，我们将了解可信平台模块^{(Trusted Platform Module)}并学习如何检查您是否有TPM芯片。

什么是可信平台模块

可信平台模块^{(Platform Module)}或TPM是存储加密密钥的专用芯片。它充当支持它的设备的端点安全性。

当某人拥有一台设备时，它会生成两个密钥——

1. 背书密钥
2. 存储根密钥。

这些键只能在硬件级别访问。没有软件程序可以访问这些密钥。

除了这些密钥之外，还有一个称为Attestation Identity Key或AIK的密钥。它保护硬件免受未经授权的固件和软件修改。

相关：^(Related:) 如何清除和更新 TPM 固件^{(How to clear and update TPM firmware)}。

如何检查您是否有 TPM 芯片

有多种方法可以检查TPM芯片的可用性。但是，您应该知道它应该在硬件级别启用，以便像Bitlllocker^(Bitllocker)这样的安全软件安全可以使用它。

1. 使用 TPM 管理
2. 在 BIOS 或 UEFI 中启用它
3. 在设备管理器^{(Device Manager)}中使用安全节点^{(Security Node)}
4. 使用 WMIC 命令。

1]开放可信管理模块管理^{(Open Trusted Management Module Management)}

在运行^(Run)提示中键入tpm.msc，然后按 Enter。它将启动可信管理模块管理^{(Trusted Management Module Management)}。

如果它说：

Compatible TPM cannot be found on this computer. Verify that this computer has 1.2 TPM or later and it’s turned on in the BIOS.

或类似的东西，那么你不要在计算机上进行 TPM。

如果它说：

The TPM is ready to use

你拥有了它！

您可以使用Windows 11 中的 TPM 诊断工具^{(TPM Diagnostics Tool in Windows 11)}来查找系统的可信平台模块^{(Trusted Platform Module)}芯片信息。

2]签入BIOS或UEFI

重新启动计算机并引导至BIOS 或 UEFI。找到安全部分，并检查是否有类似于 TPM Support或Security Chip或其他任何设置。启用它，并在保存设置后重新启动计算机。

阅读^(Read)：TPM 与 PTT^{(TPM vs PTT)}：主要区别是什么？

3]检查设备管理器

Use Win+X+M打开设备管理器^{(Device Manager)}。查找是否有安全^(Security)设备节点。如果是，则扩展它并使用模块号扩展TPM 。

4]在命令提示符中使用WMIC

在提升的命令提示符下，执行以下命令：

wmic /namespace:\\root\cimv2\security\microsofttpm path win32_tpm get * /format:textvaluelist.xsl

它将显示键值对列表。

如果您在结果中看到True，则表示启用了TPM ；否则，您将看到No instances available。

我们希望该指南足够简单明了，让您能够确定计算机是否具有 TPM 芯片组。^{(We hope the guide was straightforward and easy enough for you to figure out if the computer has TPM chipset.)}

阅读^(Read)：如何绕过 TPM 要求并安装 Windows 11^{(How to bypass TPM requirement and install Windows 11)}？

What is Trusted Platform Module? How to check if you have TPM chip?

Ever wondered which devices supрort Windows Hello, Fingerprint verification, and critical biomеtric data – and where they store that data? Storing this data оn your computer or phone can be risky. This is where TPM or Trusted Platform Module comes into the picture. In this post,  we will learn about the Trusted Platform Module and learn how to check if you have a TPM chip.

What is Trusted Platform Module

Trusted Platform Module or TPM is a specialized and dedicated chip which stores cryptographic keys. It acts as endpoint security for the devices which support it.

When someone owns a device, it generates two keys —

1. Endorsement Key
2. Storage Root Key.

These keys can only be accessed on the hardware level. No software program can access those keys.

Apart from these keys, there is another key called as Attestation Identity Key or AIK. It protects the hardware from unauthorized firmware and software modification.

Related: How to clear and update TPM firmware.

How to check if you have TPM chip

There are multiples ways to check TPM chip availability. However, you should know that it should be enabled at the hardware level so that security software security like Bitllocker can use it.

1. Using TPM Management
2. Enable it in BIOS or UEFI
3. Using the Security Node in Device Manager
4. Using WMIC command.

1] Open Trusted Management Module Management

Type tpm.msc in the Run prompt, and hit enter. It will launch the Trusted Management Module Management.

If it says:

Compatible TPM cannot be found on this computer. Verify that this computer has 1.2 TPM or later and it’s turned on in the BIOS.

or anything similar, then you do not TPM on the computer.

If it says:

The TPM is ready to use

You have it!

You can use TPM Diagnostics Tool in Windows 11 to find out the Trusted Platform Module chip information of your system.

2] Check-in BIOS or UEFI

Restart the computer and boot into BIOS or UEFI. Locate the security section, and check if there is a setting similar to TPM Support or Security Chip or anything else. Enable it, and restart the computer after saving the settings.

Read: TPM vs PTT: What are the main differences?

3] Check with Device Manager

Use Win+X+M to open the Device Manager. Find if there is a Security devices node. If yes expand it and TPM with module number.

4] Use WMIC in the Command Prompt

In an elevated command prompt, execute the command:

wmic /namespace:\\root\cimv2\security\microsofttpm path win32_tpm get * /format:textvaluelist.xsl

It will display a list of key-value pairs.

If you see True in the result, it means that TPM is enabled; else you will see No instances available.

We hope the guide was straightforward and easy enough for you to figure out if the computer has TPM chipset.

Read: How to bypass TPM requirement and install Windows 11?

Related posts

• 修复启用 BitLocker 时“此设备无法使用受信任的平台模块”

• 什么是可信平台模块 (TPM) 以及它是如何工作的？

• 修复 Windows 10 中的受信任平台模块 80090016 错误

• 如何修复 Windows 中的“受信任的平台模块发生故障”错误

• 如何使用Windows 10的Charmap and Eudcedit内置工具

• 什么是Codec - 概述，Features，Download，FAQ

• 如何在Windows 11/10中运行Windows Memory Diagnostics Tool

• 什么是Fast Startup以及如何在Windows 10中启用或禁用它

• 如何共享web page URL使用Microsoft Edge browser

• 如何启用或Windows 10 Disable Automatic Learning

• 如何格式化Windows 10计算机

• Access & use Microsoft Edge有关在Windows 10 flags页面

• 如何在Windows 10启用或Disable Archive Apps feature

• 如何在Windows 10中减少News & Interests的Taskbar Updates

• 什么是USB Selective Suspend feature？如何启用或禁用它？

• 如何在Windows 11/10中禁用Automatic Screen Rotation

• 在Windows 10打开或Off Caret Browsing Support

• 在Windows 10禁用Telemetry & Data Collection使用Task Scheduler

• 在Windows Mixed Reality中打开或Off Use Speech Recognition

• Windows 11为Business and Enterprise - New功能