Bios Fixes and suggestions

You can enable the TPM in the BIOS under "Advanced >> Platform Trust Technology >> fTPM"

The device lacks a real TPM. fTPM means it's emulated by the firmware, which Windows does accept as valid however.

If the fTPM is not enabled, enable it, save, restart, and enter the BIOS again.

Now enter "Advanced >> Trusted Computing" and set the options as follows:

• "Security Device Support": Set to "Enabled"

• "... PCR Bank": Set all to "Enabled"

• "Pending Operation": Set to "None"

• "... Hierarchy": Set all to "Enabled"

• "TPM2.0 UEFI Spec Version": Set "TCG_2"

• Physical Presence Spec Version: Set "1.3"

• "Device Select": Set "TPM 2.0"

Save, Restart, and the TPM should be available now. If Windows complains that it's not functioning correctly, set the "Pending Operation" to "Clear". Note that this will clear all keys from the TPM and resets it to an unused state. Unless you have enabled bitlocker or manually added keys to it, it should be fine.

On that note, if you plan on enabling bitlocker drive encryption, export the recovery key because keys stored in the TPM cannot be extracted again.

In Windows, you can run "tpm.msc" to view TPM state, or execute "Get-Tpm" in a Powershell that runs as admin.