What is TPM 2.0 and what is it used for?
TPM 2.0 (Trusted Platform Module) is a hardware security chip that securely stores encryption keys, passwords, and authentication data. It helps protect your system from tampering and enables key security features such as BitLocker drive encryption, Secure Boot, and Windows Hello. For Windows 11, Microsoft officially requires TPM 2.0 as part of its security baseline, although the system can still be installed and used without it through certain bypass methods.
In addition to operating system requirements, some modern anti-cheat systems for online games have also started relying on TPM 2.0 for integrity checks and player verification. This means that without a working TPM module, certain multiplayer titles may refuse to launch or could run with limited functionality. For users of Chinese X99 motherboards, installing a compatible TPM 2.0 module ensures full compatibility with Windows 11 and future-proof support for newer security and anti-cheat technologies.
TPM 2.0 on Chinese motherboards
Chinese manufacturers have been producing LGA2011‑3 boards since 2019, when TPM wasn’t yet a hot topic. Broadly, existing models fall into three categories:
- Boards with neither a TPM header nor a JLPC/DEBUG header
- Boards equipped with a TPM header that fully support TPM 2.0 modules
- Boards without a TPM header but with a JLPC/DEBUG header
Boards without a TPM header and without a JLPC/DEBUG header
This category mostly includes the most budget models, though some revisions of popular boards also omit these headers. Unfortunately, in this case there’s no way to add TPM 2.0 functionality. The only solution is to replace the motherboard or switch to a different platform.
Boards with a full TPM 2.0 header
Such models started appearing in 2024, including brand‑new designs and new revisions of familiar boards.
This is the most convenient way to get a working TPM 2.0. The BIOS already includes everything needed; all you have to do is purchase a compatible module (sellers usually list compatible models), install it, and perform basic BIOS setup.
After that, no further steps are required — it will work as intended.
Boards without a TPM 2.0 header but with a JLPC/DEBUG header
This is the largest category of motherboards. The JLPC/DEBUG header can be used to connect external devices such as POST cards or TPM 2.0 modules, but it’s not always straightforward.
For correct operation, several conditions must be met:
- You must know the JLPC/DEBUG pinout.
- Your motherboard’s BIOS must include TPM and Secure Boot support.
It’s impossible to guarantee 100% that a module will initialize and work. Remember, we’re dealing with Chinese hardware, which can have surprises and hidden pitfalls. There may be boards where, even with the required header and a compatible BIOS, you still can’t achieve proper TPM functionality.
Determining the pinout
The two most common JLPC/DEBUG header variants: some boards are missing pin 9; others are missing pin 10.
Important warning: there are no unified standards across Chinese boards, so other, less common pinouts may exist. To be certain, we recommend verifying the header pinout with a multimeter (instructions below). This is especially important for rare boards, but even popular models may have different pinouts depending on the revision.
The “no pin 9” pinout is more common. Known boards with this pinout:
| Manufacturer | Model |
| Machinist | E5-K9 V2.1 |
| Machinist | X99-P4 |
| Machinist | X99-MR9A |
| Machinist | X99-MR9A Pro |
| Machinist | X99-MR9A PRO MAX |
| Machinist | X99-RS9 |
| Machinist | X99-MR9D |
| Machinist | E5-MR9D PLUS |
| Machinist | E5-MR9S |
| Qiyida | ED4 |
| Qiyida | D4 (White) |
| Qiyida | E5-A99 |
| ZSUS | X99-8D4 |
| ZSUS | X99-P4 |
| HUANANZHI | X99-8M-F |
| HUANANZHI | X99-BD4 |
| ATERMITER | E5-AS9 |
| Kllisre | X99 E5-F4 |
| Mucai | X99-P4 |
| JGINYUE | X99M GAMING D4 |
| Other | x99 V203 |
The “no pin 10” pinout is less common. Known boards with this pinout:
| Manufacturer | Model |
| HUANANZHI | X99-QD4 |
| HUANANZHI | X99-F8 |
| HUANANZHI | X99-T8 |
| HUANANZHI | X99-TF |
| ATERMITER | X99-D4 |
However, for greater certainty, we recommend not relying solely on tables and determining the pinout yourself. You can use a visual method (for headers with one missing pin) or a multimeter check (more accurate).
Visual method (for JLPC/DEBUG headers with a missing pin)
Inspect the header and find Pin 1 — it’s usually marked by an arrow or a square pad. Numbering goes as follows:
First row: 1 3 5 7 9 Second row: 2 4 6 8 10
Then locate the missing pin. This lets you determine which of the two pinout variants your board uses. If all 10 pins are present, use a multimeter to determine the pinout.
Multimeter check (more accurate)
What you’ll need:
- A multimeter (DC voltage mode, plus continuity/resistance)
- An ATX power supply (plugged in) — board in standby state (you don’t have to boot the system)
- A fine probe/needle to contact header pins precisely
Instructions:
- Preparation: connect the PSU to the board. You don’t have to start the system.
- Find Pin 1: usually marked by a square pad or an arrow.
- Find ground (GND): set the multimeter to continuity or resistance. Put one probe on chassis/metal ground (screw, heatsink, case), then check each JLPC pin with the other probe. The pin that reads short/0 Ω is GND.
- Measure +3.3 V: switch to DC mode and measure voltage between the GND you found and neighboring pins in turn. Look for ≈+3.3 V (typically 3.2–3.4 V).
- Conclusion:
- If +3.3 V is on Pin 2, you have the “Pin 9 missing” variant.
- If +3.3 V is on Pin 1, you have the “Pin 10 missing” variant.
Note: if you don’t see +3.3 V, power the board on — on some boards the JLPC/DEBUG rail is only live when the system is on.
Quick reference table
| Board variant | Where +3.3 V | Where GND |
|---|---|---|
| Pin 9 missing | Pin 2 | Pin 10 |
| Pin 10 missing | Pin 1 | Pin 9 |
Finding a compatible module
There are many modules on sale that may be compatible with common JLPC/DEBUG pinouts. Here are some of them.
Most boards use a 2.54 mm header pitch; keep this in mind when choosing a module.
Most convenient options
These are the most convenient because they require no modifications and were likely designed specifically for Chinese X99 boards with JLPC/DEBUG headers that have one pin missing. Unfortunately, they’re hard to find (at the time of writing we only found them on some obscure Russian marketplaces). These models are based on the Infineon (IFX) SLB9665TT20 controller.
Try a reverse image search to find sellers in your region.
For boards without pin 9:
For boards without pin 10:
Gigabyte 12‑pin LPC modules
These have high compatibility with Chinese boards, but you’ll need a bit of DIY to connect them. A USB 2.0 extension cable can be used as the base for wiring.
This option is widespread and available on AliExpress:
Modules from tpm2.com.br
Another common option, available for both pinout variants, but with a caveat: the module only initializes properly after a full power cycle. Any reboot will make it disappear until you power the PC off and on again. There’s a fix: solder two wires from the module to specific pins on the Super I/O controller. The procedure isn’t difficult, but it requires basic soldering skills and equipment. If you’ve never used a soldering iron, it’s best to leave this to a professional service center.
Note: the module for Huananzhi boards only works on revisions with the NCT5567D‑B Super I/O.
Finding a compatible BIOS
You’ll need a BIOS that properly supports TPM 2.0 and Secure Boot. Not every stock BIOS has this functionality. However, BIOS images from technically similar boards are often interchangeable, so you can usually find a stable version for the most popular models. This process takes time, and having an SPI programmer is practically a must, because reliable compatibility information is scarce and you may have to proceed by trial and error, with a risk of bricking the board. For popular models, you can save time by purchasing a custom iEngineer BIOS with extensive features, including support for the relevant modules.
How to verify that the TPM 2.0 module works
Check in BIOS
- Install the module.
- Power on the board and enter BIOS.
- Open the Advanced tab and go to Trusted Computing.
- Make sure it shows TPM2.0 Device Found and that Security Device Support is set to Enable.
- Save settings; you can now boot into the OS.
Check in Windows
Via the TPM console
- Win+R → tpm.msc
- The top of the window should state “The TPM is ready for use” and “Specification Version: 2.0”.
Via Device Manager
- Win+X → Device Manager → Security devices
- “Trusted Platform Module 2.0” → Properties: “This device is working properly”, with no warning icons.
Via PowerShell
- Click the search icon on the taskbar.
- Type “powershell”.
- Click “Run as administrator”.
- In PowerShell, enter or paste the commands:
Get-Tpm | fl TpmPresent,TpmReady,SpecVersion,ManufacturerId,ManufacturerVersion
andtpmtool getdeviceinformation