Fix "This Device Can't Use a Trusted Platform Module" (BitLocker Error) on Windows 11/10

Diagnose First and Choose the Right Guide

• Press Windows + R, type tpm.msc, and press Enter.

• Read Status and, if available, the specification version under TPM Manufacturer Information.

  

This checks whether Windows can currently access a trusted platform module, rather than merely whether the motherboard supports one.

• Compatible TPM cannot be found: inspect your manufacturer's firmware settings first. A disabled firmware TPM can look absent. Use Method 1 if available; otherwise, consider Method 2.
• TPM is present but not ready: follow Method 1 and check for firmware or provisioning problems.
• TPM is ready for use: jump to Advanced Checks before changing hardware settings.

On an already encrypted computer, locate your recovery key before changing firmware or TPM settings.

⚡ How to Fix This Device Can't Use a Trusted Platform Module

Method 1: Enable and Initialize TPM

Use this approach when your device supports TPM but Windows cannot access it. Modern systems may label the firmware implementation Intel PTT or AMD fTPM. Follow the PC manufacturer's instructions because menu names vary.

Note:

Back up important files. If encryption is already active, save the recovery key somewhere accessible without this computer and suspend BitLocker protection before planned firmware changes.

• Restart into BIOS or UEFI using your manufacturer's startup key or Windows Advanced startup options.

• Locate the security settings. Enable TPM. Do not select Clear TPM or switch between different TPM implementations casually.

  

• Save changes and restart Windows. Windows 10 and 11 normally initialize the TPM automatically.

• Run tpm.msc again. Once it reports readiness, open Manage BitLocker and retry encryption. Resume protection if you suspended an existing encrypted drive.

If the status remains unavailable, obtain firmware guidance from your device manufacturer.

Method 2: Allow BitLocker Without a Compatible TPM

Use this method on a supported Windows edition when no usable TPM is available and your organization's policy permits it. A USB startup key is a practical alternative, provided the firmware can read the USB device before Windows starts. Keep it separate from the computer when stored.

• Press Windows + R, enter gpedit.msc, and press Enter.

• Navigate to Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives.

  

• Open Require additional authentication at startup and set it to Enabled.

• Select Allow BitLocker without a compatible TPM, then choose Apply and OK.

• Restart or refresh computer policy. Open Manage BitLocker and select Turn on BitLocker for the Windows drive.

• Follow the wizard to configure the offered startup authentication method. Save the recovery key separately, then run the BitLocker system check before encryption proceeds.

A startup password may also be available, depending on policy and configuration. It is different from your Windows sign-in password. For trusted platform module BitLocker protection, restoring a working TPM remains preferable where possible because non-TPM startup does not provide the same integrity checks.

Stuck on the BitLocker Recovery Screen? Here's How to Bypass It Without the Recovery Key

The methods above usually fix the "This device can't use a Trusted Platform Module" error. However, if BitLocker is already enabled on your PC and the TPM becomes unavailable or gets cleared, Windows may lock you out and force you into the BitLocker recovery screen, asking for the 48-digit recovery key.

If you've lost the recovery key, can't find it, or can't even boot into Windows, the situation quickly becomes frustrating. In these cases, 4DDiG Partition Manager can help you bypass or remove BitLocker and regain access to your drive without the recovery key.

• Download and install 4DDiG Partition Manager on your computer.

  FREE DOWNLOAD

  Secure Download

  BUY NOW

• Launch the program and go to the left sidebar. Click Toolkit and select Remove BitLocker.

  

• The software will automatically detect any BitLocker-encrypted disks or partitions. Select the locked drive and click Unlock button.

  

• A confirmation window will appear. Click "Disable BitLocker."

  

• Wait for the decryption process to finish. The time required depends on the size of the drive.

  

Once completed, you can access your files normally.

Advanced Checks When TPM Is Already Ready

When the BitLocker this device can't use a trusted platform module error persists despite a ready TPM, check recognition and policy before resetting anything.

• Open Device Manager > Security devices. Investigate warning icons and install relevant updates from Windows Update or the PC manufacturer.

Microsoft notes that incompatible non-Microsoft TPM drivers can interfere with BitLocker detection.

• Review Require additional authentication at startup for conflicting requirements. On managed devices, ask IT to examine the applied policy instead of repeatedly changing local settings.
• Restart after firmware or driver updates and recheck tpm.msc. If Windows detects the TPM inconsistently, document the exact status and firmware version for manufacturer support.

More FAQs About TPM and BitLocker

Can I remove BitLocker without the key

If Windows already unlocks the drive normally, an administrator can turn off BitLocker without manually typing the recovery key. If the drive is locked and no valid unlock method remains, check your Microsoft account, work or school account, saved printout, or USB backup for the recovery key.

Can I enable BitLocker without TPM

Yes, on a supported Windows edition with the appropriate startup policy. Configure a USB startup key or another permitted authentication method using Method 2. Verify that the computer completes the startup check, and keep a separate recovery key backup.

How do I reset TPM to use BitLocker

Clearing TPM is a last resort because it removes TPM-associated keys. Back up recovery information first. In Windows Security, open Device security > Security processor details > Security processor troubleshooting > Clear TPM.

What is a trusted platform module

A trusted platform module is a security component that protects cryptographic material. It may be implemented through dedicated hardware or firmware. BitLocker uses TPM-backed protection to help release the drive's encryption key when the expected startup conditions are met.

Conclusion

Start with TPM status and Windows edition before applying a fix. Enable an available TPM, use approved non-TPM startup authentication when necessary, and investigate policy or driver problems if the TPM already appears ready. Keep recovery information accessible before changing security settings.

If the TPM issue has already triggered BitLocker protection and you're locked out of your drive (or you've lost the recovery key), 4DDiG Partition Manager offers a practical way to unlock or remove BitLocker without needing the recovery key. Matching the right tool to the actual problem helps you regain access and protect your data without making unnecessary changes to the system.