Microsoft now requires a computer to have a TPM 2.0 module to install Windows 11. However, new Registry entries have been discovered that allow you to bypass the TPM requirement and minimum memory and secure boot requirements.
With Windows 11, Microsoft added new minimum system requirements that all devices need to have a TPM 2.0 security processor to power some of the operating system's security features.
"The following Windows features require TPM 2.0: Measured Boot, Device Encryption, WD System Guard, Device Health Attestation, Windows Hello/Hello for Business, TPM Platform Crypto Provider Key Storage, SecureBIO, DRTM, vTPM in Hyper-V," Microsoft told BleepingComputer.
For most people running CPUs created in the past 5-6 years, a firmware-based TPM (fTPM) is built into the CPU and can be enabled in the BIOS.
To enable the fTPM, simply boot your computer into the BIOS and enable the Intel Platform Trust Technology (Intel PTT) or the AMD Platform Security Processor, depending on your CPU.
For those who do not have this feature, you may be able to install a discrete TPM 2.0 processor on the motherboard. However, if your processor is old enough that it does not have one built-in fTPM, your motherboard's module will likely be TPM 1.2, which is not compatible with Windows 11.
This requirement is frustrating for users running Windows 10 on older equipment, as now they are being forced to purchase new hardware to install Windows 11.
Furthermore, as Microsoft has stated in documentation that OEMs can get permission to disable the TPM requirement in Windows 11 for their devices, the question becomes: Do you really need a TPM 2.0 processor to use Windows 11?
How to bypass the TPM requirement in Windows 11
If you are attempting to install Windows 11 and receive a message stating, "This PC can't run Windows 11," it is likely that you do not have a TPM 2.0 installed or enabled.
The good news is that Microsoft includes a new 'LabConfig' registry key that allows you to configure settings to bypass the TPM 2.0, the 4GB memory, and Secure Boot requirements.
Based on the name of this registry key, it is likely used by Microsoft or OEMs to set up a "lab" environment to test the Windows 11 on older equipment or when testing new features.
To bypass the TPM 2.0 requirements when installing Windows 11, please follow these steps:
- Install Windows 11 via an ISO or the Windows 11 Insider Program. While installing Windows 11, if your computer does not meet the hardware requirements, you will see a message stating, "This PC can't run Windows 11."
- When you see the above message, press Shift+F10 on your keyboard at the same time to launch a command prompt. At this command prompt, type regedit and press enter to launch the Windows Registry Editor.
- When the Registry Editor opens, navigate to HKEY_LOCAL_MACHINE\SYSTEM\Setup, right-click on the Setup key and select New > Key.
When prompted to name the key, enter LabConfig and press enter.
Now right-click on the LabConfig key and select New > DWORD (32-bit) value and create a value named BypassTPMCheck, and set its data to 1. Now create the BypassRAMCheck and BypassSecureBootCheck values and set their data to 1 as well, so it looks like the following image. - Once you configure those three values under the LabConfig key, close the Registry Editor, and then type exit in the Command Prompt followed by enter to close the window.
- You will now be back at the message stating that the PC can't run Windows 11. Click on the back button in the Windows Setup dialog, as shown below.
- You will now be back at the screen prompting you to select the version of Windows 11 you wish to install. You can now continue with the setup, and the hardware requirements will be bypassed, allowing you to install Windows 11.
It is important to note that disabling these features could affect the performance or stability of Windows 11, so be sure to only use them on a virtual machine or test box that are you are ok with working in an unsupported environment.
Furthermore, by disabling the TPM 2.0 requirement, you are effectively reducing the security in Windows 11.
Finally, running Windows 11 on anything less than 4GB will not be an optimal experience and is not recommended.
H/T Albacore
Comments
Some-Other-Guy - 2 years ago
So an old school BIOS and MBR partition are also quite possible
noelprg4 - 2 years ago
except MS may eventually block this workaround when Windows 11 reaches final (aka RTM)
3213 - 2 years ago
TPM 2.0 is so useless for me...
Phonetrips - 2 years ago
These registry changes worked to the point that I could join the Preview Program for Windows 11. However when the 11 installer downloads, it gives a message: "The PC must support Secure Boot.""
So this doesn't really seem to work.
SeedyTV - 2 years ago
Is there one for bypassing the CPU check as well?
Amigo-A - 2 years ago
An interesting way, but most will spit on these tambourine dances and will not use these "drumsticks" (11).
redwolfe_98 - 2 years ago
we need a "bypassCPUCheck," too.
Daniel15 - 2 years ago
CPUs that don't have a TPM are pretty old now... I'm surprised people are upset that Windows 11 won't run on it? Do they expect their old CPUs to be relevant forever? Most Windows versions increase the hardware requirements in some way... For example, I wouldn't expect all Windows 95 compatible hardware to work on XP, or all Vista-compatible hardware to work on Windows 10. They can just stick to Windows 10 if they want to continue using the old hardware.
deshfyre - 2 years ago
not entirely though. sure they are old, but far from incapable of running windows 11. a 4790k can still blow a lot of prebuilts most people buy from a store like staples or bestbuy right out of the water. the fact its a "security" requirement rather than an actual processing power requirement is what makes it so ridiculous. look at the past, we saw what happens when people tried to install vista on PCs that had 500mb of ram running pentium 2s back in the day, so obviously required specs do make sense, but this one in particular says that anyone that has old but competent computers is left out to dry or fork over unnecessary money to upgrade.
kmi187 - 2 years ago
"Do they expect their old CPUs to be relevant forever?"
No but if my 8 year old cpu literally takes a crap all over a ryzen 7 2800x (E5-1680v2 xeon clocked at 4.6 with 128gb ECC ram) that isn't even 2 years old, a chip that is supported, yeah I kind of expect an os to just run on it.
Any way you look at it, doing this in the current hardware climate, forcing people to upgrade, is just a dick move on microsoft's part. There simply is no excuse for it.
gquiring - 2 years ago
I have a Core i7 4790 CPU with an Asus Z97-A M/B, 16gig of ram. There is nothing wrong with this 7yr old system. I don't play games. It's used for Internet, photo editing and Office. You don't need a recent system for that kind of use. It perfectly fits my needs. Yet because I don't have TPM I cannot load 11. I tried the registry patch, it does not work.
dalepbaker - 2 years ago
Honestly,I would expect Windows 11 to work on any computer with Windows 10 installed and working on it
Since 11,is mostly Win 10 with additions to try and force people to buy new computer
Daniel15 - 2 years ago
> "Honestly,I would expect Windows 11 to work on any computer with Windows 10 installed and working on it
Since 11,is mostly Win 10 with additions to try and force people to buy new computer"
It's common that newer versions of any software have higher system requirements. There's a limit to how long you can keep the requirements as low as old versions - Eventually the developers want to use newer technologies that aren't available in the old processors. Windows ME was very similar to Windows 98 but the minimum requirement was bumped to a 150Mhz processor whereas Windows 98SE only needed 66MHz.
ArtShapiro - 2 years ago
Just wanted to report that the addition of the registry keys failed to work on two machines - a Lenovo W500 laptop and an Intel I5-2500K desktop.
Shplad - 2 years ago
Stupid move by Microsoft in the middle of a pandemic. There's financial and social upheaval all over the place, and this is their thinking?
Lawrence: You wrote:
It is important to note that disabling these features could affect the performance or stability of Windows 11, so be sure to only use them on a virtual machine or test box that are you are ok with working in an unsupported environment.
Did you by any chance mean "in a non-production environment"? Or am I just reading it wrong?
d8888 - 2 years ago
I highly suspect that TPM is intended for digital right management.
TPM behaves like a "safe" which can only be "unlocked" only by correct combination of hardware and software. Even the owner of the computer cannot force the safe to unlock itself without permission of software.
Think, if you have a song bought from some online store. The online store revoked your access for whatever reason. Now you are locked out of your music.
Use a hacked player/store program to unlock? Sorry the TPM chain of trust identified broken software certificate and refuse to decrypt.
Use an out-dated software player with known loophole? Sorry the remote attestation performed by server of online store identified your old software and refuse to hand the decryption key.
Make-your-own TPM with "friendly" feature? Sorry your mocked TPM do not have require certificate and is considered "insecure". The remote server won't give you decryption key.
Also, if TPM can prevent anything virus or trojan to read your Word document, it can also prevent any opensource application from doing so.
As for security. A "safe" that can lock it's owner away anytime by software companies do more harm than good.
I expect every DRM to use TPM chip once TPM is 100% available on every PC. Refuse? you are locked out of your own music, videos, computer programs or even word documents.
TsofT - 2 years ago
"I expect every DRM to use TPM chip once TPM is 100% available on every PC. Refuse? you are locked out of your own music, videos, computer programs or even word documents."
Or, you know, just run an OS without these stupid chains that lock you in a cell and limit your freedom. Maybe Linux or something. I haven't run Windows (outside of a VM) since 1998.
d8888 - 2 years ago
"Or, you know, just run an OS without these stupid chains that lock you in a cell and limit your freedom. Maybe Linux or something. I haven't run Windows (outside of a VM) since 1998."
The opensource music player cannot play the music you bought because it's encrypted by TPM and DRM.
The music online store refuse your connection because remote attestation finds out that you are using "insecure" operating system.
The TPM refuse to decrypt your music because your Linux distro and music player do not have digital certificate signed by "secure" vendors.
You decided to use VM to emulate TPM and install Windows, however you still cannot play your musice because the software TPM lack necessary certificate signed by "secure" vendors and is considered insecure and compromised.
d8888 - 2 years ago
You decided to buy music and videos from digital stores which use TPM-less DRM, and you find little.
Since every computer has TPM built-in and activated, all major digital stores use TPM just like every 3D game use GPU.
The "little" digital stores you found do not include top-ranked popular contents of current music and video industry.
Frank145 - 2 years ago
Hi !
Once intalled w11 if you go to windows update, it is asking again for the tpm module, so we can get into w11 but … How can we update once we are in w11 ? .. the bypass is not working to receive updates ... any idea?
Thanks, and regards to everyone !
Pmonroe777 - 2 years ago
There is an extremely easy way to install Win11 anywhere you can install Win10 that I found this week on another site. You start with the ISO files for both versions. Delete the INSTALL.WIM folder from the Windows 10 ISO and replace it with the INSTALL.WIM folder from the Windows 11 ISO. The free program AnyBurn can help with that. Copy to USB drive and install as normal. Since the computer thinks its installing Windows 10 there is no check for the TPM or anything else.
I actually installed this in a Parallels VM which has none of the Windows 11 requirements and it went off fine (seemed to take a little longer than usual though, around 1/2 hour). The solution from XDA-Developers uses the same idea but seems MUCH more convoluted than this simple solution.
TONSCHUH - 2 years ago
The Reg-Hack's worked for my 7700k + ASUS ROG Maximus IX Apex + Go.Skill Trident Z 2x8GB @4266MHz, but I'm looking forward to the CPU being recognised / supported officially.
samuel456 - 2 years ago
mine freezes at 1% getting ready for installation anyone have any clues how to fix this
Pmonroe777 - 2 years ago
OK, I think I found the easiest hack to bypass TPM and Secure Boot. At least it worked for me on my Windows 10 install. After running the hack I Iinstalled the Insiders’ Preview on my VM in Parallels without a single hiccup.
https://m.majorgeeks.com/files/details/bypass_secure_boot_and_trusted_platform_module.html
Lawrence Abrams - 2 years ago
It's the same as the instructions we give above.
Pmonroe777 - 2 years ago
Oops, sorry, my bad.
Posted - 2 years ago
Could the author (LA) please confirm this fix can only be applied to a clean install vs upgrade?
-ty for the excellent article. Very straight forward and easy to understand aka HELPFUL
Lawrence Abrams - 2 years ago
Can be used for either during the install process.
TONSCHUH - 2 years ago
Just export the Registry-Entries and apply them after each Windows-Update again.
You will get a xxx.reg file, after You exported it.
Only the LabConfig has to be exported and can later be imported on any Windows-11 computer.
It works for upgrades only, because a clean install has no existing registry.
Nadinedrone - 2 years ago
Lawernce - I've carefully followed the guide-lines you've outlined and have have had no success in getting past the TPM requirement. Actually went through the steps a couple of times but so far no go! The only thing I didn't do is reboot my computer which I don't think is necessary but maybe I'm wrong. Any suggestions?
Rufinoman - 2 years ago
Worked a treat on a clean Win 11 install, but the strange thing is that the PC wouldn't even boot to a bootable Win11 prepared pendrive with TPM enabled, throwing a recovery screen at me, so I had to do this with TPM disabled anyway.
Very odd.
noelprg4 - 2 years ago
per one of the comments from this Majorgeeks page:
https://www.majorgeeks.com/content/page/bypass_tpm.html
replace the "appraiserres.dll" file in the sources folder with the Win10 version, then run setup.
that seem to be the only method that works with newer Win10 builds rather than using the registry hack
a4a - 2 years ago
In attempt to upgrade within Windows 10, I added the registry keys in the article above, replaced the appraiserres.dll file, and added the AllowUpgradesWithUnsupportedTPMOrCPU DWORD entry in HKEY_LOCAL_MACHINE\SYSTEM\Setup\MoSetup but setup still said that the PC did not meet requirements. Replacing the dll file again, disconnecting from the internet then trying again allowed the upgrade to proceed on this laptop (older CPU, no TPM).
movation - 2 years ago
This only works until you try to update windows to the latest update...
https://imgur.com/gallery/w9BDlbl
Lawrence Abrams - 2 years ago
Try this instead. Will update this guide as well.
ronwizbot - 2 years ago
I followed these steps and was able to install Windows 11. However, the OS still identified itself as Windows 10 and complained it could not update to Windows 11 because of the Secure boot and TPM 2.0 requirement. I then accidentally corrupted the registry when trying to delete another user and I used the Windows 11 install disk to RESET the OS but keep the user files. The reset installed only Windows 11 and kept everything else and it identified the OS as Windows 11 with zero warnings. I have a complaint free Windows 11 running on an Intel I3 processor without TPM 2.0 and the Secure Boot. I wanted to share this as a fix for the OS complaints.
Below130 - 2 years ago
I finally got around to trying to install WIN11 without any success. I've made the registry changes under LabConfig for BypassRAMCheck, BypassTPMCheck and BypassSecureBootCheck but i'm still told I can't install WIN11. I have 24Gb RAM and an Intel i7-4820K running at 3.7GHz on an ASUS X79 Sabertooth motherboard. It has no TPM 2.0 but should be powerful enough. Is it possible that Microsoft has changed the install procedures!
Thanks to any comments!
777Pmonroe777 - 2 years ago
There is a superb batch file someone created on github that will bypass all ms requirements.
LINK: https://github.com/AveYo/MediaCreationTool.bat