This tutorial will show you how to enable or disable the Clear TPM button in the Windows Security app for all users in Windows 10 and Windows 11.
Trusted Platform Module (TPM) technology is designed to provide hardware-based, security-related functions. A TPM chip is a secure crypto-processor that is designed to carry out cryptographic operations. The chip includes multiple physical security mechanisms to make it tamper resistant, and malicious software is unable to tamper with the security functions of the TPM.
You can clear the TPM as a troubleshooting step, or as a final preparation before a clean installation of a new operating system. Preparing for a clean installation in this way helps ensure that the new operating system can fully deploy any TPM-based functionality that it includes, such as attestation. However, even if the TPM isn't cleared before a new operating system is installed, most TPM functionality will probably work correctly.
Clearing the TPM resets it to an unowned state. After you clear the TPM, the Windows operating system will automatically reinitialize it and take ownership again.
If you don't want users to be able to click the Clear TPM button in the Windows Security app, you can disable it with the Disable the Clear TPM button Group Policy setting.
Reference:
TPM Group Policy settings - Windows Security
This topic describes the Trusted Platform Module (TPM) Services that can be controlled centrally by using Group Policy settings.
learn.microsoft.com
You must be signed in as an administrator to enable or disable the Clear TPM button in Windows Security.
Contents
- Option One: Enable or Disable Clear TPM button in Windows Security in Local Group Policy Editor
- Option Two: Enable or Disable Clear TPM button in Windows Security using REG file
EXAMPLE: Clear TPM button disabled in Windows Security app
The Local Group Policy Editor is only available in the Windows 10/11 Pro, Enterprise, and Education editions.
All editions can use Option Two to configure the same policy.
1 Open the Local Group Policy Editor (gpedit.msc).
2 Navigate to the policy location below in the left pane of the Local Group Policy Editor. (see screenshot below)
Computer Configuration > Administrative Templates > Windows Components > Windows Security > Device security
3 In the right pane of Device security in the Local Group Policy Editor, double click/tap on the Disable the Clear TPM button policy to edit it. (see screenshot above)
4 Do step 5 (enable) or step 6 (disable) below for what you want.
5 Enable Clear TPM button in Windows Security
This is the default setting.
A) Select (dot) Not Configured. (see screenshot below)
B) Click/tap on OK, and go to step 7.
6 Disable Clear TPM button in Windows Security
A) Select (dot) Enabled. (see screenshot below)
B) Click/tap on OK, and go to step 7.
7 You can now close the Local Group Policy Editor if you like.
1 Do step 2 (enable) or step 3 (disable) below for what you want.
2 Enable Clear TPM button in Windows Security
This is the default setting
A) Click/tap on the Download button below to download the file below, and go to step 4 below.
Enable_Clear-TPM_button_in_Windows_Security.reg
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Device security]
"DisableClearTpmButton"=-3 Disable Clear TPM button in Windows Security
A) Click/tap on the Download button below to download the file below, and go to step 4 below.
Disable_Clear-TPM_button_in_Windows_Security.reg
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Device security]
"DisableClearTpmButton"=dword:000000014 Save the REG file to your desktop.
5 Double click/tap on the downloaded REG file to merge it.
6 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.
7 Either restart explorer process, sign out and sign in, or restart the computer to apply.
8 You can now delete the downloaded REG file if you like.
That's it,
Shawn Brink
Attachments
Last edited:
