What does TPM stand for?
TPM stands for Trusted Platform Module. A security chip, or firmware equivalent, that stores encryption keys and measures the boot process. BitLocker uses it to unlock the drive only when the boot chain is unchanged; Windows 11 requires TPM 2.0. Clearing the TPM destroys the keys it holds.
A TPM is a security chip on a computer's motherboard, or a function built into its processor firmware, that creates and protects cryptographic keys for that one machine. Keys can be tied to the TPM so that they cannot be copied to another computer. The TPM also records measurements of the boot process, so a key can be released only if the machine started in the expected way. BitLocker uses this to unlock the system drive automatically on the right, unmodified PC. Windows 11 requires TPM version 2.0.
TPM in practice: an example
A laptop encrypted with BitLocker is stolen and the thief moves its drive into another computer. The drive stays locked, because the key that unlocks it is sealed in the TPM of the original laptop. On the original laptop, a changed boot configuration would also stop the automatic unlock and ask for the recovery key.
What TPM is confused with
TPM vs HSM: what is the difference?
A TPM protects the keys of the single computer it is built into. An HSM is a separate device that holds keys for servers and applications across an organization. What HSM stands for
TPM vs Secure Boot: what is the difference?
Secure Boot is a firmware feature that refuses to run unsigned boot software. The TPM does not block anything: it measures what was started and protects keys accordingly. Windows uses both.
Which exams cover TPM?
TPM is on the official CompTIA acronym list for one of the four exams covered here.
- A+ 220-1201 and 220-1202: 220-1201 3.0 (Hardware); 220-1202 1.0 (Operating Systems).
Each number is a CompTIA exam objective and the name in brackets is its domain. The exam puts the term in a scenario; it does not ask you to recite the expansion.
Check yourself: two practice questions
Written by CertSprint for this page. They are not taken from any exam.
1. A technician enables BitLocker on a laptop and wants the drive to unlock automatically only on that laptop. Which component makes this possible?
- The TPM
- The network card
- The optical drive
- The CMOS battery
Show the answer
A. The TPM. BitLocker seals the key to the TPM of that machine, so the drive unlocks there and stays locked anywhere else.
2. An upgrade check reports that a PC cannot run Windows 11 because of a missing security component, although the processor is supported. What should the technician look for in firmware setup?
- A setting to enable the TPM
- The boot logo option
- The fan curve
- The keyboard backlight
Show the answer
A. A setting to enable the TPM. Windows 11 needs TPM 2.0. On many PCs the firmware TPM is present but switched off in setup.
Sources: Microsoft Learn: Trusted Platform Module technology overview; Trusted Computing Group: TPM 2.0 Library specification; Microsoft Learn: Windows 11 requirements. The acronym and its expansion come from CompTIA's official acronym lists, linked from each exam glossary above. The explanation, example and questions are CertSprint's own, checked against these sources on 11 November 2026.