The TPM 2.0 not found error on the Lenovo ThinkPad X1 Carbon Gen 8 occurs because the Trusted Platform Module is disabled in the BIOS or lacks a firmware update. You can resolve this by entering the BIOS setup, enabling the security chip, and installing the latest BIOS version from Lenovo’s support site to ensure full Windows 11 compatibility.
Verify TPM Status in Device Manager
Before modifying system settings, confirm whether the operating system detects the hardware at all. Many users assume the TPM is missing when it is actually present but inactive. Open the Start menu, type
Device Manager, and launch the utility. Navigate to the
Security devices category and expand it. If you see
Trusted Platform Module 2.0, the hardware is detected. Right-click it and select
Properties. Under the
Device status section, check for any error codes. If the device is working properly, the issue lies within the BIOS configuration rather than hardware failure. If the entry is missing entirely, proceed to the BIOS checks below.
Enable TPM in BIOS/UEFI Settings
Lenovo laptops often ship with TPM disabled by default to maintain legacy boot options. To fix this, restart your ThinkPad and repeatedly press
F1 as soon as the Lenovo logo appears. This enters the BIOS Setup Utility. Use the arrow keys to navigate to the
Security tab. Look for an option labeled
Security Chip or
TPM Device. Change the setting from
Disabled to
Enabled. Some newer BIOS versions may label this under
Access Control. After making the change, press
F10 to save and exit. The system will reboot into Windows. Check the TPM status again in Device Manager to confirm activation.
Handling Fingerprint Reader Conflicts
On some ThinkPad models, enabling the TPM can temporarily disable the fingerprint reader due to shared resources. If your fingerprint sensor stops working after enabling the TPM, do not disable the TPM again. Instead, open
Windows Hello Face, Fingerprint & Other Devices in Settings. Remove the existing fingerprint data and re-register your finger. This re-initializes the secure connection between the OS and the TPM-backed hardware.
Update BIOS Firmware
Outdated BIOS versions are a primary cause of the "TPM Not Found" error during Windows 11 installation. Even if the TPM is enabled, older firmware may not expose it correctly to the Windows installer. Visit the official Lenovo Support website and enter your service tag or model number
20U9. Download the latest BIOS Update file for the ThinkPad X1 Carbon Gen 8. Run the executable while connected to AC power. The system will reboot automatically and flash the new firmware. This process takes several minutes; do not interrupt the power supply. Once complete, verify that the BIOS version matches the latest release listed on the support page.
Resetting TPM Configuration
If updating the BIOS does not resolve the issue, clear the existing TPM state. In the BIOS
Security tab, locate
Clear TPM or
Security Chip Reset. Select this option and confirm the action. Note that this erases any encryption keys stored on the chip, such as BitLocker keys. Ensure you have your BitLocker recovery key backed up before proceeding. After clearing, re-enable the Security Chip if it was toggled off during the reset process. Save changes and exit.
Alternative Installation Methods
If the standard Windows 11 upgrade assistant still fails, use the Media Creation Tool. Download the tool from Microsoft’s official site and create a bootable USB drive. Boot from the USB drive and perform a clean installation. During the partitioning step, the installer will detect the TPM more reliably than the in-place upgrade method. For detailed guidance on handling specific TPM errors during updates, refer to our guide on
Lenovo ThinkPad X1 Carbon Gen 8 (20U9) Can't Update to Windows 11: TPM 2.0 Not Found Error. This resource covers advanced registry tweaks and bypass methods if hardware enablement fails completely.
Checking Secure Boot Requirements
Windows 11 requires Secure Boot to be enabled alongside TPM 2.0. In the BIOS
Security tab, find
Secure Boot and set it to
Enabled. If the option is grayed out, you may need to set a supervisor password first. Go to the
Password tab, set a
Supervisor Password, then return to
Secure Boot to enable it. Remember to remove the supervisor password later if desired, though leaving it on enhances security. Save and exit the BIOS.
Frequently Asked Questions
Can I bypass the TPM requirement for Windows 11?
Yes, you can bypass the TPM check using registry edits or the Media Creation Tool. However, this method is unsupported by Microsoft and may prevent future feature updates. It is highly recommended to enable TPM 2.0 in the BIOS for optimal security and stability on your ThinkPad.
Why is my TPM showing as unknown in Device Manager?
This usually indicates a driver conflict or a corrupted TPM module. Try uninstalling the TPM device in Device Manager and restarting the computer. Windows will attempt to reinstall the generic driver automatically. If the issue persists, update the chipset drivers from the Lenovo Support site.
Does enabling TPM affect my BitLocker encryption?
Enabling TPM itself does not affect BitLocker, but clearing the TPM or resetting the BIOS will break the link between the drive and the chip. Always back up your BitLocker recovery key before modifying BIOS settings related to security chips to avoid permanent data lockout.
What should I do if the Security Chip option is missing in BIOS?
If the option is absent, your BIOS version is likely too old to support the required TPM specifications. Update your BIOS to the latest version available on Lenovo’s website. Once updated, the Security Chip option should appear in the Security tab.
Is TPM 2.0 necessary for running modern applications?
While many applications run without TPM, Windows 11 mandates it for system integrity and security features like Windows Hello. Without TPM 2.0, you cannot install Windows 11 via official channels and may miss critical security patches provided through Windows Update.