Solved Windows Hello - GPO setting question

Hello Everyone,

I am using a Windows Hello PIN to sign in to my personal/consumer Windows 11 laptop and TPM is enabled and running.

However, the next time I decide to reinstall Windows 11 again, would this Group Policy setting need to be Enabled or should it be left as Not Configured since my laptop's TPM is running and is enabled by default?

See photo as to what I mean.

Thanks in Advance.

TPM 2.0 (Trusted Platform Module) is a strict hardware security requirement for Windows 11 no need to configure that policy as Windows 11 uses TMP 2.0.

How to Check for TPM 2.0

Press the Windows Key + R to open the run box.

Type tpm.msc and press Enter.

Look at the bottom right for Specification Version to see if it says 2.0.

I think you’re all set. There’s nothing to do.

Do remember that if you store passkeys in Windows Hello, a reinstallation or Windows being out of sync with the TPM could render those passkeys inaccessible. Make alternative login methods or store backup passkeys somewhere else.

So leaving it Not Configured would be ok since the TPM is functioning fine?

win11freak said:

So leaving it Not Configured would be ok since the TPM is functioning fine?

Click to expand...

Yes no need to configure the policy.