Go to Start > Settings > Update & Security > Windows Security > Device security . Under Security processor, select Security processor details. Select Security processor troubleshooting, and then under Clear TPM, select Clear TPM. You'll need to restart your device to complete the process.

Learn how to remove malware from your PC. Use Microsoft Defender Antivirus in Windows 10 or Windows 11 to scan your PC for malware, viruses, or other threats.

Along with software updates for Windows 10 or Windows 11, it's important to make hardware updates, also known as updates for drivers and firmware. You can quickly check the health of your Surface drivers and firmware using the Surface app. Open the Surface app.

This article describes the protection against the publicly disclosed Secure Boot security feature bypass that uses the BlackLotus UEFI bootkit tracked by CVE-2023-24932, how to enable the mitigations, and guidance on bootable media.

The Program Install and Uninstall troubleshooter helps you automatically repair issues when you're blocked from installing or removing programs. It also fixes corrupted registry keys. First, you'll need to download the troubleshooter. Download troubleshooter.

Getting ready for the Windows 11 upgrade. How to check if your device meets Windows 11 system requirements after changing device hardware. Learn how to use the PC Health Check app to help you improve your device performance.

An attacker who successfully exploited the vulnerability might bypass secure boot and load untrusted software. This security update addresses the vulnerability by adding the signatures of the known vulnerable UEFI modules to the DBX. To learn more about this security vulnerability, see the following advisory:

The enablement package is a great option for installing a scoped feature update like Windows 11, version 23H2 as it enables an update from version 22H2 to version 23H2 with a single restart, reducing update downtime. This enables devices to take advantage of new features now.

How to enable TPM. If you need to enable TPM, these settings are managed via the UEFI BIOS (PC firmware) and vary based on your device. You can access these settings by choosing: Settings > Update & Security > Recovery > Restart now. From the next screen, choose Troubleshoot > Advanced options > UEFI Firmware Settings > Restart to make the changes.

You suspect your device has been infected. Use installation media to reinstall Windows 11. Select one of the recovery options below and follow the steps to try to get things working again. If you've recently installed a Windows update, uninstall the update to try to resolve the issue.