TPM Problem with Office 365: Fixes & Workarounds
If you’re seeing a TPM-related error when trying to install or activate Office 365, the problem is usually a driver conflict or a Windows security setting, not a broken chip. This article explains why the error appears and gives you step-by-step fixes to get Office running again, including how to work around it if your TPM is genuinely faulty.
What Is TPM and Why Does Office Care?
TPM (Trusted Platform Module) is a security chip on your motherboard that stores encryption keys and verifies that your system hasn’t been tampered with. Windows uses it for features like BitLocker and Windows Hello. Office 365 itself does not require TPM, but the Office installer and the Microsoft Store app sometimes trigger TPM checks because they rely on Windows security services that use the chip. If the TPM driver is outdated, disabled, or misconfigured, those services can fail, and Office setup throws an error like “Your PC’s TPM is not supported” or “Something went wrong.”
Common TPM-Related Office 365 Errors
These are the errors users typically see, and what they usually mean:
- “Your PC’s TPM is not supported” – The TPM is present but not enabled in BIOS, or the driver is outdated.
- “We can’t activate Windows because of a TPM issue” – This appears when Windows itself fails a TPM check, which then blocks Office activation.
- “Something went wrong. Please try again later” – Often a generic message from the Microsoft Store installer when a TPM-dependent service (like the Credential Guard) is misconfigured.
- “Code 0x80090017” – This specific error means the TPM is not ready or has a problem with its owner authorization value.
Fix 1: Enable TPM in BIOS/UEFI
Many PCs ship with TPM disabled in the firmware. Here’s how to turn it on:
- Restart your PC and press the key to enter BIOS/UEFI (usually Del, F2, or Esc – check your manual).
- Look for a “Security” or “Trusted Computing” tab.
- Find “TPM Device” or “Intel Platform Trust Technology (PTT)” (AMD) and set it to Enabled.
- Save and exit. Windows will then detect the TPM automatically.
If you don’t see the option, your motherboard may have a separate TPM header that needs a physical module, or the option is hidden until you disable “Secure Boot” temporarily.
Fix 2: Update or Reinstall the TPM Driver
An outdated or corrupted TPM driver is the most common cause. To update it:
- Right-click the Start button and select Device Manager.
- Expand “Security devices.” You’ll see “Trusted Platform Module 2.0” (or 1.2).
- Right-click it and choose Update driver → Search automatically.
- If Windows finds nothing, go to your PC manufacturer’s support site and download the latest TPM driver for your model.
If the driver is corrupted, uninstall it (right-click → Uninstall), then restart – Windows will reinstall it automatically.
Fix 3: Clear the TPM (Careful!)
Clearing the TPM resets it to factory state. This will not delete your files, but it will break BitLocker encryption and Windows Hello sign-in (you’ll need to re-set them up). Only do this if the other fixes fail:
- Open Windows Security → Device security → Security processor details.
- Click Security processor troubleshooting.
- Click Clear TPM and restart.
After restart, Windows will re-initialize the TPM. Then try installing Office again.
Fix 4: Disable Credential Guard (If You Use It)
Credential Guard is a Windows security feature that uses virtualization and TPM. If it’s misconfigured, it can block Office installation. To disable it:
- Open PowerShell as administrator.
- Run:
Disable-WindowsOptionalFeature -Online -FeatureName Windows-Defender-Credential-Guard - Restart your PC.
This is only necessary if you enabled Credential Guard manually – most home users don’t have it on.
Workaround: Install Office Without the Store
If the TPM error only appears when installing from the Microsoft Store, bypass it by downloading the standalone installer from the Office website. Go to office.com/myaccount, sign in, and choose “Install Office” – you’ll get the full desktop installer that doesn’t require the Store’s TPM checks. This works for Office 365 subscriptions and one-time purchases.
When the TPM Is Actually Broken
If you’ve tried all the fixes and the TPM still fails, it may be physically damaged or the firmware is corrupted. In that case:
- Check your motherboard manual for a TPM header – you can install a discrete TPM module (if available).
- Some systems allow you to disable TPM entirely in BIOS. Windows will still run, but you’ll lose BitLocker and Windows Hello.
- If your PC is under warranty, contact the manufacturer – a faulty TPM is a hardware defect.
Office 365 itself will work fine with TPM disabled, as long as you don’t rely on the security features that need it.
Frequently Asked Questions
Does Office 365 require TPM 2.0?
No. Office 365 does not require TPM. The error appears because the installer or Windows security services that Office depends on are failing due to a TPM issue. You can install Office even if TPM is disabled, as long as the underlying Windows services run.
Will clearing TPM delete my files?
No, clearing TPM does not touch your personal files. It only resets the security chip. However, it will disable BitLocker (if you use it) and you’ll need to set up Windows Hello PIN/fingerprint again.
Why does the error say “TPM not supported” on a new PC?
New PCs usually have TPM 2.0, but it’s often disabled in BIOS by default (especially on custom-built desktops). Enable it in the firmware, and the error should disappear.
Can I install Office 365 without TPM?
Yes. If you disable TPM in BIOS, Office will still install and run. The only thing you lose is Windows features that depend on TPM, like BitLocker and Windows Hello.
Is it safe to update the TPM driver?
Yes, updating the TPM driver is safe and recommended. Use the driver from your PC manufacturer’s website, not a third-party site. If Windows Update offers a driver, that’s fine too.
Related
Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.