To “activate BIOS,” you usually need to open your computer’s BIOS/UEFI setup and change a specific setting. On Windows 11, go to Settings > System > Recovery > Advanced startup > Restart now, then select Troubleshoot > Advanced options > UEFI Firmware Settings > Restart. The menus and available settings vary by computer model, so use the manufacturer’s instructions before changing anything.
What does “activating BIOS” mean?
It normally means entering firmware setup, not activating software with a license key. The firmware starts before Windows and controls settings related to hardware, startup and security. Modern computers generally use UEFI, though their menus or support pages may still call the interface BIOS.
As an Amazon Associate I earn from qualifying purchases.
You might open setup to choose a startup device, enable processor virtualization, or configure Secure Boot or TPM. Options and labels differ by model, and some settings may be unavailable or restricted. Microsoft’s Windows virtualization guide and your computer maker’s documentation explain the relevant controls.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →How do I enter UEFI settings in Windows 11?
- Save your work and close open applications.
- Open Settings, then choose System > Recovery.
- Beside Advanced startup, select Restart now.
- In the recovery menu, choose Troubleshoot > Advanced options > UEFI Firmware Settings.
- Select Restart to open the firmware setup utility.
Windows 10 uses Settings > Update & Security > Recovery to reach Advanced startup. The firmware utility may be labeled BIOS even when the computer uses UEFI. See Microsoft’s instructions for accessing UEFI settings.
#1 Best Overall
- COMPATIBILITY: TPM-M R2.0, TPM-M
- SECURE CHIP: Using Infineon SLB9665 Implements TPM 2.0 specification for hardware-based security and cryptographic operations
- Interface Type: only LPC (Low Pin Count), not compatible with SPI (Serial Peripheral Interface) headers.
- Functionality: Enables Windows 11 security features including BitLocker drive encryption and secure boot capabilities
- Installation: Please also check the TPM header pin definition, not just the pin count, in your motherboard’s user manual or on the manufacturer’s official website to ensure it matches this module’s layout before purchasing. You can verify compatibility by comparing your motherboard’s TPM pinout with the layout shown in Product Image 3.
Which key opens BIOS on my computer?
Use the startup key specified for your exact model. Press it during startup—often when the manufacturer’s logo appears. The key can vary even among computers from the same maker, so do not assume a key from another model will work.
- ASUS says to hold F2 while powering on; some older ASUS desktop models use Delete. Follow its BIOS entry instructions.
- Dell says to tap F2 when the Dell logo appears. See Dell’s BIOS and UEFI setup guide.
- Lenovo’s instructions for the ThinkPad T490 say to press F1 at the logo. That key is specific to the model covered by its T490 guide.
If Windows will not start, a startup key may still let you reach setup. Consult the support page or manual for your specific model for the correct timing and key.
Rank #2
- Compatibility: Designed for Supermicro 10-pin SPI TPM headers. Compatible with AOM-TPM-9670V and related series.
- Windows 11: Meets all hardware security requirements. Supports BitLocker, Secure Boot, and Intel TXT.
- Compact Design: Vertical form factor for 1U/2U servers and mITX. No interference with CPU coolers or RAM.
- Reliability: Gold-plated pins for stable connection. Tested for RNG/cipher performance. ESD-safe packaging.
- Quick Setup: Enable "Trusted Computing" in BIOS. Use "Restore Factory Keys" if Secure Boot is needed.
How do I enable virtualization in BIOS?
First confirm that you need virtualization for a supported virtual machine or Windows feature. In firmware setup, locate the virtualization control and follow the computer maker’s directions; its name and location depend on the model. Microsoft’s virtualization guide links to directions for several manufacturers and advises consulting the device documentation when yours is not listed.
For the Windows virtualization workflow described by Microsoft, you may also need to enable Virtual Machine Platform under Windows Features and restart. Enabling a firmware option alone does not necessarily complete setup for every Windows feature or application.
Rank #3
- COMPATIBILITY: Compatible with TPM2-S
- SECURE CHIP: Using Infineon SLB9665 Implements TPM 2.0 specification for hardware-based security and cryptographic operations
- Interface Type: only LPC (Low Pin Count), not compatible with SPI (Serial Peripheral Interface) headers.
- Functionality: Enables Windows 11 security features including BitLocker drive encryption and secure boot capabilities
- Installation: Please also check the TPM header pin definition, not just the pin count, in your motherboard’s user manual or on the manufacturer’s official website to ensure it matches this module’s layout before purchasing. You can verify compatibility by comparing your motherboard’s TPM pinout with the layout shown in Product Image 3.
How do I turn on Secure Boot?
Secure Boot is a boot-time security feature, not a performance setting. Microsoft describes it as helping prevent malicious software from loading when Windows starts by allowing trusted, digitally signed software to run during boot. Its Windows 11 and Secure Boot guidance explains the feature and how to find its setting.
If Secure Boot is unavailable, the computer’s current boot configuration may be relevant. Microsoft’s instructions say a PC using Legacy or Compatibility Support Module (CSM) mode may need to switch to UEFI, or make UEFI the first or only option. Follow the manufacturer’s procedure for your model rather than changing boot mode based on a generic menu path.
Rank #4
- COMPATIBILITY: Compatible with TPM 2.0 (MS-4136)
- SECURE CHIP: Using Infineon SLB9665 Implements TPM 2.0 specification for hardware-based security and cryptographic operations
- Interface Type: only LPC (Low Pin Count), not compatible with SPI (Serial Peripheral Interface) headers.
- Functionality: Enables Windows 11 security features including BitLocker drive encryption and secure boot capabilities
- Installation: Please also check the TPM header pin definition, not just the pin count, in your motherboard’s user manual or on the manufacturer’s official website to ensure it matches this module’s layout before purchasing. You can verify compatibility by comparing your motherboard’s TPM pinout with the layout shown in Product Image 3.
For a Windows 10 device to upgrade to Windows 11, Microsoft identifies Secure Boot capability through UEFI/BIOS as a requirement; that is not the same as saying Secure Boot must be enabled for every upgrade. If you are considering disabling Secure Boot for specific hardware or an operating system, review Microsoft Learn’s Secure Boot guidance first. It warns that restoring Secure Boot can require returning the system to its factory state after software or hardware changes. Moving from CSM/Legacy to UEFI can also involve MBR disk formatting and Windows reinstallation, so it is not a casual toggle.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsWhat other settings might you find?
Depending on the computer, firmware setup may include startup-device selection, TPM status, Secure Boot and virtualization controls. The same concept can have different labels, and a setting may be absent or restricted. Use the device’s manual for its exact menu path; do not change unrelated values just because they appear in an advanced menu.
Best Value
- Open Architecture: High performance, reliable platform enables use of hardware with Mercury OEM partners’ software solutions.
- Enhanced Cybersecurity: ARM TrustZone, secure boot CPU, crypto chip and data at rest encryption provide a layered security approach to protect sensitive data.
- Edge Processing: Advanced processing capabilities allow for custom applications to run in the controller, exponentially expanding the platform's processing possibilities at the edge.
- Business Continuity: New processor part of multi-year longevity program, dual footprint circuit designs and the same reliable LP/EP interface and footprint.
Will changing BIOS settings affect BitLocker or stop Windows from booting?
It can. An incorrect firmware change may prevent Windows from starting. On a BitLocker-encrypted device, changing Secure Boot, TPM settings or boot mode may be detected as a hardware change and trigger a request for the 48-digit recovery key at startup, according to Dell Support. Have the key available before making such a change; on a work or school computer, the organization’s IT department may hold it.
Reduce the risk before entering setup:
- Save work and close applications before restarting.
- Change only the setting needed. Microsoft cautions: “Only change what you need to in the UEFI (or BIOS).”
- Record the setting’s original value and change one setting at a time, as Dell recommends.
- If you only want to look around, exit without saving. Dell notes that exiting without saving does not itself trigger BitLocker.
If a Secure Boot change prevents startup, Microsoft Learn says to return to firmware setup and disable Secure Boot to try booting again. Persistent problems may require help from the manufacturer; recovery steps can differ between computers.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Free tools Windows power users keep installed
One-click scans. No signup required.
