PowerShell: Check TPM Status
Need to check whether a machine has a TPM (Trusted Platform Module) chip and if it's enabled - relevant for Windows 11 compatibility, BitLocker, or general security configuration? This one-liner pulls it straight from the system.
Prerequisites:
- Privileges: Run as Administrator
- Module: Built-in, no import needed
Quick Command:
Get-CimInstance -Namespace "root/CIMV2/Security/MicrosoftTpm" -ClassName Win32_TpmExample Output:
IsActivated_InitialValue : True
IsEnabled_InitialValue : True
IsOwned_InitialValue : True
ManufacturerId : 1229346816
ManufacturerIdTxt : IFX
ManufacturerVersion : 7.63
SpecVersion : 2.0, 0, 1.38📦
Want all of them at once?
Get every free one-liner from this blog in a single downloadable bundle organized by category, each with full comment-based help. No more copy-pasting one at a time.
Get every free one-liner from this blog in a single downloadable bundle organized by category, each with full comment-based help. No more copy-pasting one at a time.
How It Works:
- Get-CimInstance here queries a dedicated CIM namespace (root/CIMV2/Security/MicrosoftTpm) specifically for TPM data - unlike most system info covered so far, TPM isn't part of the standard root/cimv2 namespace, since it's a security-sensitive component with its own dedicated management path.
- IsEnabled_InitialValue and IsActivated_InitialValue show whether the TPM is turned on and active.
- ManufacturerIdTxt shows the chip manufacturer - common values include IFX (Infineon), NTC (Nuvoton), or PRLS on Parallels virtual machines (indicating a virtual/firmware TPM rather than a physical chip).
- SpecVersion shows the TPM specification version - 2.0 is required for Windows 11.