Windows 11 System Requirements: How to Check & Bypass TPM 2.0

Windows 10 support ended in October 2025. If you’re still running it on a PC that Microsoft’s compatibility checker keeps rejecting, you’re not alone. A huge number of otherwise capable PCs get blocked from Windows 11 by one specific requirement: TPM 2.0.

This guide covers exactly what Windows 11 requires, how to check whether your PC actually qualifies (it’s often closer than the error message suggests), and, if it doesn’t, the current, working methods to install it anyway on unsupported hardware, along with an honest look at the trade-offs before you do.

Quick Answer:

Windows 11 requires a 64-bit CPU from Microsoft’s supported list, TPM 2.0, UEFI with Secure Boot, 4 GB RAM, and 64 GB storage. Most PCs blocked by “This PC can’t run Windows 11” are rejected specifically over TPM or Secure Boot being disabled in BIOS, not missing hardware. Check tpm.msc and your BIOS Security tab first.

If your hardware genuinely doesn’t support TPM 2.0, you can still install Windows 11 by creating install media with Rufus (which bypasses the checks automatically) or by adding registry values under LabConfig during setup. It works, and Microsoft allows it, but the PC is officially “unsupported,” which affects your update guarantees; details below.

What’s New in Windows 11?

Before deciding whether the upgrade is worth chasing on older hardware, it’s worth knowing what you’re actually upgrading to. Windows 11 is a meaningful visual and structural update over Windows 10, not just a fresh coat of paint:

• A centered Start menu and taskbar, with rounded window corners and a refreshed icon and font set throughout the interface.
• Snap Layouts and Snap Groups, which make multi-window multitasking noticeably faster to set up than Windows 10’s manual drag-to-corner snapping.
• Widgets, a customizable panel for weather, calendar, and news, accessible from the taskbar.
• Tighter Microsoft Teams integration built directly into the taskbar.
• Smaller, more efficient updates – Microsoft re-engineered the update packaging to be meaningfully smaller and to install more of the process in the background, cutting down on the disruptive restarts Windows 10 was known for.
• Ongoing security hardening at the firmware and driver level, which is the actual reason behind the stricter hardware requirements covered next.

Minimum Windows 11 System Requirements

Here’s Microsoft’s official minimum hardware baseline, current as of the latest Windows 11 release (25H2/26H2):

The CPU requirement trips up more people than any spec except TPM. Microsoft maintains an approved processor list, and it excludes most Intel chips older than 8th-generation Core (roughly pre-2017) and most AMD chips older than Ryzen 2000-series, even though many of those older CPUs are technically fast enough to run Windows 11 comfortably.

This is a compatibility decision Microsoft made around driver and firmware support, not raw processing power, which is exactly why the bypass methods later in this guide work at all.

How to Check If Your PC Meets the Requirements

PC Health Check is Microsoft’s official compatibility tool, and it’s the fastest way to get a definitive answer:

1. Download PC Health Check from Microsoft’s official Windows 11 page.
2. Install and open it, then click Check now.
3. You’ll get either a green “This PC meets Windows 11 requirements” result, or a specific list of what’s failing.

If it fails, don’t assume you need new hardware yet. In the large majority of cases, PC Health Check flags either TPM or Secure Boot as the blocker. Both of these are BIOS settings, not missing components, on most PCs built since roughly 2016.

Fixing a Failed TPM or Secure Boot Check

1. Restart into your BIOS/UEFI setup (commonly Del, F2, or Esc during startup).
2. Look under the Advanced or Security tab for TPM, PTT (Intel Platform Trust Technology), or fTPM (AMD’s firmware TPM) and set it to Enabled.
3. Separately, look for Secure Boot, usually under a Boot tab, and enable it. Note that Secure Boot typically requires your drive to be partitioned as GPT and your firmware to be running in UEFI mode rather than Legacy/CSM; if it’s grayed out, that’s usually why.
4. Save and exit, then re-run PC Health Check to confirm.

For a full manufacturer-by-manufacturer walkthrough of exactly where TPM/PTT/fTPM live in BIOS across ASUS, MSI, Gigabyte, and other brands, see our complete guide on how to enable TPM 2.0.

If PC Health Check instead flags your CPU as unsupported, that’s the one requirement no BIOS setting can fix. Your only paths forward are the unsupported-hardware installation covered below, or new hardware.

What Is TPM, and Why Does It Block So Many Otherwise-Capable PCs?

TPM (Trusted Platform Module) is a small security chip, or, on most modern CPUs, a firmware-based equivalent. It generates and stores encryption keys in dedicated hardware rather than as regular files on your drive.

It underpins BitLocker encryption, Windows Hello biometric login, and Microsoft’s defenses against bootloader-level malware that loads before antivirus software gets a chance to run.

Microsoft made TPM 2.0 mandatory specifically to close off that early-boot attack surface across the entire Windows 11 install base, rather than leaving it as an opt-in feature only security-conscious users would turn on.

It’s a genuinely reasonable security rationale. The practical problem is that a large number of PCs from 2015–2017 have TPM 2.0-capable hardware sitting dormant, simply switched off by default, which is why checking your BIOS before assuming you need a new PC matters so much.

For the full technical breakdown of how TPM works and step-by-step BIOS instructions by manufacturer, see our dedicated guide: What Is TPM, and How to Enable TPM 2.0.

How to Install Windows 11 Without TPM 2.0 (Unsupported Hardware)

If your PC has genuinely failed the TPM or CPU check even after confirming BIOS settings, Microsoft does still allow installation on unsupported hardware. You just have to explicitly opt into that unsupported state. Below are the two current, reliable methods.

Method 1: Bypass During Setup with Rufus (Easiest)

Rufus is a free, open-source USB creation tool that includes a built-in option to strip out Microsoft’s TPM, Secure Boot, and RAM checks while building your installation media. No manual registry editing required.

1. Download the official Windows 11 ISO from Microsoft’s software download page.
2. Download Rufus from its official site.
3. Insert a USB flash drive (8 GB or larger; this will erase everything on it, so back up anything important first).
4. Open Rufus, select your USB drive, then click Select and choose the Windows 11 ISO you downloaded.
5. Rufus will detect it’s a Windows 11 image and prompt you with extra options, including “Remove requirement for 4GB+ RAM, Secure Boot, and TPM 2.0.” Check that box.
6. Click Start and let Rufus build the installer.
7. Boot from the finished USB drive and install Windows 11 as normal. The compatibility checks simply won’t appear.

This is currently the most reliable method, since Microsoft has patched some of the older command-line and registry tricks out of newer ISO builds, while Rufus has kept pace by updating its bypass method alongside each new Windows 11 release.

Method 2: Registry Bypass During Setup (No Extra Tools)

If you’d rather not use a third-party tool, you can bypass the checks manually using the Registry Editor, either during an in-place upgrade from Windows 10 or partway through a clean install boot.

1. When Windows Setup shows “This PC can’t run Windows 11,” press Shift + F10 to open a Command Prompt (during a clean install), or press Windows key + R and type regedit if you’re upgrading from within Windows 10.
2. In the Registry Editor, navigate to: HKEY_LOCAL_MACHINE\SYSTEM\Setup
3. Right-click Setup, choose New → Key, and name it LabConfig.
4. Inside the new LabConfig key, create three DWORD (32-bit) values, setting each one’s value data to 1:
   • BypassTPMCheck
   • BypassSecureBootCheck
   • BypassRAMCheck
5. Close the Registry Editor, return to Windows Setup, and click Back, then proceed with the installation again. It should now continue past the compatibility screen.

Important limitation: this registry method still requires TPM version 1.2 to be present. It bypasses the 2.0 requirement specifically, not the absence of TPM entirely. If your PC has no TPM hardware at all, use the Rufus method instead, since it strips the check completely rather than lowering the version bar.

A Note on Older Command-Line Tricks

Older guides reference an /product server Setup command-line switch as a bypass method. This no longer works reliably on current Windows 11 ISOs. Microsoft has closed that particular loophole in recent builds. If you find a guide recommending it, use Rufus or the registry method above instead.

Is It Safe to Run Windows 11 Without TPM 2.0?

Technically yes, and Microsoft explicitly permits it rather than blocking it outright. You’re installing genuine Windows 11 with a valid license, and the “unsupported” designation is a support policy, not a functionality restriction. In practice, here’s what actually changes:

What you lose: Microsoft’s official guarantee of driver and feature updates. Microsoft’s own compatibility warning states plainly that devices that don’t meet minimum system requirements aren’t guaranteed to receive updates, including security updates, and that the device “may malfunction due to these compatibility or other issues.”

In practice, most unsupported devices have continued receiving monthly security updates without issue, but Microsoft doesn’t promise this will continue indefinitely, and a future feature update could require repeating the bypass process or could break compatibility outright.

What you don’t lose: your files, your license, or day-to-day functionality. An unsupported install runs identically to a supported one for virtually all everyday use. The risk is entirely about the guarantee of future updates, not present performance.

Who this makes sense for: people with capable but slightly older hardware (roughly 2015–2017-era CPUs) who understand the update risk and want current Windows 11 features now, or anyone testing Windows 11 in a VM without a virtual TPM configured.

Who should think twice: anyone running Windows 11 on genuinely aging or already-unreliable hardware where losing guaranteed security patches compounds an existing risk, or business/managed environments where update reliability matters more than new features.

If You’d Rather Not Bypass Anything: Staying on Windows 10 Safely

If forcing the upgrade doesn’t sit right with you, staying on Windows 10 is a legitimate option in the near term, thanks to Microsoft’s Extended Security Updates (ESU) program for consumers.

Windows 10 reached its official end of support on October 14, 2025, after which routine feature and security updates stopped for unenrolled devices. Microsoft has since extended free and low-cost security coverage for personal devices through the consumer ESU program, currently running through October 12, 2027. You can enroll one of three ways:

• Free, by enabling Windows Backup to sync your PC settings to a Microsoft account.
• Free, by redeeming 1,000 Microsoft Rewards points.
• One-time payment of roughly $30, which covers up to 10 devices tied to the same Microsoft account.

ESU covers critical and important security updates only. It does not include new features, general bug fixes, or technical support, and it requires your device to be running Windows 10 version 22H2 with the latest updates already installed.

It’s a genuine bridge, not a long-term solution, so it’s worth treating the two-ish years of remaining coverage as a window to plan a proper upgrade rather than a reason to postpone indefinitely.

Common Mistakes to Avoid

Assuming a failed compatibility check means you need new hardware. In most cases, it means TPM or Secure Boot is simply switched off in the BIOS. Always check tpm.msc and your BIOS Security tab before shopping for a new PC.

Using the registry bypass method when you have no TPM at all. It only lowers the version requirement from 2.0 to 1.2. If your hardware has zero TPM support, this method alone won’t get you through Setup; use Rufus instead.

Skipping a backup before bypassing hardware checks. Unsupported installs carry a slightly higher (if still generally low) risk of update-related issues down the line. Back up your files before any upgrade, bypass or not, as a matter of course.

Relying on outdated command-line bypass tricks. Several older guides reference Setup switches that Microsoft has since patched out. Stick to Rufus or the registry method, both of which are actively maintained against new Windows 11 releases.

Forgetting that a bypassed install still needs to pass the check again on major feature updates. Some future feature updates (not routine monthly patches) may re-trigger the compatibility check, requiring you to repeat the bypass. This hasn’t been a universal problem, but it’s worth knowing rather than being surprised by it later.

Related: Unmountable Boot Volume Error (Windows 10/11): 12 Real Fixes

Myth vs. Fact

Myth: “Installing Windows 11 without TPM 2.0 is against Microsoft’s terms and could get flagged.” Fact: Microsoft explicitly documents and permits this as an “unsupported” installation state, using a valid license and genuine Windows 11 media. It’s not a piracy or terms-of-service issue.

Myth: “An unsupported Windows 11 install won’t get any updates at all.” Fact: Most unsupported devices continue receiving regular monthly security updates in practice. What’s not guaranteed is that this continues indefinitely or that every feature update installs without needing the bypass repeated.

Myth: “If my CPU isn’t on Microsoft’s supported list, it’s too weak for Windows 11.” Fact: The supported CPU list is a driver and firmware compatibility decision, not strictly a performance cutoff. Many excluded CPUs run Windows 11 perfectly well in practice, which is exactly why the bypass methods exist and work.

Conclusion

Most PCs that fail Windows 11’s compatibility check aren’t actually incapable of running it. They’re being blocked by a TPM or Secure Boot setting sitting disabled in BIOS. Start there before assuming you need new hardware.

If your CPU genuinely isn’t supported or your board truly lacks TPM, Rufus and the registry bypass method both remain reliable ways to install current Windows 11 anyway, with the honest trade-off being Microsoft’s update guarantee rather than any loss of day-to-day functionality.

And if you’d rather not force anything yet, Windows 10’s extended security coverage through October 2027 gives you a genuine, low-risk runway to plan the move on your own timeline.

Frequently Asked Questions

We hope you found this post useful, and please like and follow us on Facebook and Twitter for regular updates.

We also request that you bookmark this page for future use. Sign up for our free newsletter as well to receive new information in your inbox regularly and stay technically up to date.

Disclosure: If you follow our links to a retailer’s website and make a purchase, we will get an affiliate commission on some, but not all, of the items or services we promote. This will cause no price change for you.

You May Be Interested in Reading:

• What Is TPM, and How to Enable TPM 2.0 on BIOS?
• What You Can Do If You Can’t Upgrade Your PC to Windows 11?
• How to Resolve the Windows 10 System_Service_Exception Error?
• How to Fix an Unmountable Boot Volume Windows 10 Error?
• How to Automatically Lock Your PC Using Dynamic Lock in Windows 10?