Set BIOS password for added security. Enable Secure Boot for Windows 10/11. Make sure TPM is enabled for stronger protection.
If you go that route, you can install the card and then enable TPM 2.0 in the BIOS or UEFI. Before you do that though, it’s worth checking to see if your computer supports firmware TPM 2.0 already.