With the introduction of Windows 11, Microsoft set forth strict hardware requirements for upgradable PCs, notably including TPM 2.0. These criteria initially excluded many users, but now there are ways around it. This article explores the TPM module, its significance, how to verify its presence on your device, and methods to circumvent it for installing Windows 11.

Table of Contents

• What Is TPM?
• How Does TPM Function?
• Varieties of TPM
• The Necessity of TPM 2.0 for Windows 11
• Verifying TPM 2.0 on Your Device
• Circumventing TPM 2.0
• Frequently Asked Questions
• Concluding Remarks

Also read: How to Install Windows 11 on Unsupported PCs (And Why You Shouldn’t)

What Is TPM?

TPM, or "Trusted Platform Module," is a technology that enhances PC security through hardware-based measures. It assists in the creation, storage, and restriction of encryption keys and other security credentials on your device.

How Does TPM Function?

The TPM module in your laptop significantly contributes to your PC's security. Here are some ways it functions to safeguard your device:

• The TPM chip can work alongside software to shield your system from hacking or exploitation. It ensures that any passwords or encryption keys transmitted in plain text are protected by hardware.
• It can detect unexpected changes to your system, entering a quarantine mode if malware or viruses are detected, aiding your computer in combating the threat.
• It securely stores certificates, security credentials, and encryption keys, offering a safer alternative to password managers stored on your hard drive.
• The TPM module can act as a virtual smart card, preventing the duplication and misuse of your private keys to access your device.
• When used with BitLocker Drive Encryption, the TPM chip conducts conditional tests during startup to ensure security. If it detects a change in hard drives, such as in cases of theft, it locks the system.

Also read: What Is Microsoft’s Pluton Security Processor and Why You Need It

Varieties of TPM

Different manufacturers implement TPM functionality in various ways, making it crucial to identify the type of TPM in your device to understand its operation and how to enable or disable it.

There are five types of TPMs:

• Discrete TPMs – These are dedicated, tamper-resistant semiconductor chips physically mounted on your PC’s motherboard. They provide the highest security level and are what Microsoft requires for Windows 11 compatibility.
• Integrated TPMs – These are also physical chips but integrated into another chip on the motherboard. Although less tamper-resistant than discrete TPMs, they offer hardware-based protection against software vulnerabilities.
• Firmware TPMs (fTPM) – These are firmware-based and operate within the CPU’s trusted execution environment, offering security similar to hardware TPMs.
• Hypervisor TPMs (vTPM) – These require a virtual environment to function, making it straightforward to install Windows 11 in a virtual machine where the vTPM operates in a secluded execution environment, hidden from software.
• Software TPMs – These emulate the functionality of a discrete TPM but provide security no better than a standard software program. They are the least secure due to vulnerability to bugs and malicious attacks.

The Necessity of TPM 2.0 for Windows 11

As threats to data security and privacy evolve, TPM 2.0 is Microsoft’s method to enhance your data protection and identity security.

For instance, TPM 2.0 is necessary to use Windows Hello and to enable BitLocker encryption on your hard drive.

Since 2016, many PCs have been equipped to support TPM 2.0, though some may not be configured to use it. We recommend checking for TPM compatibility before proceeding with a Windows 11 installation.

Verifying TPM 2.0 on Your Device

There are three methods to check if your laptop has TPM 2.0 and is compatible with Windows 11.

1. Use the Microsoft PC Health Check App

The quickest way to check if your PC supports Windows 11 and has TPM 2.0 is by using the PC health check app. Here’s how:

1. Download the PC health check app from Microsoft.
2. Open the .msi file and run it to install the app on your PC.

3. Launch the PC check app and click on “Check Now” to run the utility.

4. After scanning, the app will display your PC's TPM version and other compatibility details.

If your computer is not compatible with Windows 11, it will explain why. It also provides information on your battery capacity, update status, and storage capacity.

2. Run the Trusted Platform Module Test

Another way to check your TPM version is by using the tpm.msc command.

1. Press the Win R keys to open “Run.” Type tpm.msc and press Enter or click “OK.”

2. This opens the “TPM manufacturer information.” The Specification version should read 2.0.

3. If you see the “Compatible TPM cannot be found” error, the chip is either disabled in the BIOS or not available on your PC.

4. If your version is 2.0 but its status is “not ready,” go to “Actions” and select “Prepare the TPM” to enable it on your device.

3. Use the Windows Security App

You can also check for TPM 2.0 using the Windows security app.

1. Go to “Settings” and select “Update & Security.”
2. Under this security option, select “Windows Security,” then “Device Security.” Look for “Security Processor Details” under the “Security Processor” section.
3. Verify that the specification version is 2.0.

Tip: Enable key Windows Security settings to safeguard your PC.

Circumventing TPM 2.0

If your TPM version is below 2.0, you can still install Windows 11 by safely bypassing the requirement. Here’s how:

1. Add a New Registry Value Using Regedit

Microsoft developed this method, ensuring its reliability. However, they do not endorse installing Windows 11 on non-compliant devices.

Here’s how to do it:

1. Press Win R to open “Run” and type regedit. Click “OK” or press Enter to open the Registry Editor.

2. Navigate to “HKEY_LOCAL_MACHINE\SYSTEM\Setup\MoSetup” from the top bar.

3. Right-click the main panel and select “Create a new DWORD (32-bit) Value.”

4. Name it “AllowUpgradesWithUnsupportedTPMOrCPU.”

5. Set its value to “1.” Click “OK.”

6. Exit the registry editor.

Now your PC is ready to upgrade to Windows 11.

2. Modify the Registry on a Fresh Windows 11 Install

Another method is to modify the registry during a new Windows 11 installation.

1. Start a fresh Windows 11 install until you see the error “This PC can’t run Windows 11.”

2. Press Shift F10 to open the command line.

3. Type “regedit.exe” and press Enter.
4. Navigate to “HKEY_LOCAL_MACHINE\SYSTEM\Setup”.
5. Right-click the “Setup” folder, select “New,” then “Key” from the list. Name this new key “LabConfig.”

6. Navigate to the “LabConfig” folder and create a new DWORD (32-bit) value.

7. Name it BypassTPMCheck. You can also add “BypassRAMCheck” and “BypassSecureBootCheck” DWORDs to bypass all Windows 11 requirements.

8. Set the values of all these new DWORDs to “1.”

9. Exit the registry editor and continue the installation process.

3. Use Rufus to Bypass TPM 2.0

You can also use Rufus to create a bootable USB that disables TPM requirements, along with RAM and CPU requirements, making it compatible with most devices that do not meet Microsoft’s criteria.

This method requires a flash drive of at least 16GB.

Also read: How to Use Rufus to Create a Bootable Flash Drive

1. Download and install the latest version of Rufus on your PC.
2. Insert a blank USB (16GB or larger) into your PC, then launch Rufus.

3. Select this USB drive as your installation location.
4. Choose “Disk or ISO image” for the boot selection, then click “Download.”
5. Select “Windows 11,” its latest edition, and your preferred language when prompted by Rufus.
6. Choose a location to save your ISO image, such as your Downloads folder.
7. Once the download is complete, select the image option and choose “Extended Windows 11 installation” to disable TPM, secure boot, and the 8GB RAM requirements.

8. Click “Start” to begin installing the ISO on your flash drive.

Once complete, use this drive to install Windows 11 on your older PC or virtual machine.

Frequently Asked Questions

1. Can I install a new TPM chip on my PC?

Yes, you can, provided your motherboard supports it. Most laptops made after 2016 have either discrete or integrated TPMs. Upgrading laptop motherboards is challenging, so adding a chip might not be feasible.

For desktop PCs with compatible motherboards, you can install a physical TPM chip. Most desktop motherboards offer this option.

If you're not experienced with computer hardware, we suggest consulting an expert for this upgrade.

2. How much does a TPM chip cost?

TPM chips typically cost around $29, though prices spiked to about $199 when Microsoft announced the requirement. With the current ability to bypass the requirement, prices should have returned to normal.

3. Does Windows 10 use TPM 2.0?

Yes, Windows 10 utilizes TPM 2.0, though it was not a mandatory requirement. Microsoft has been using the TPM module to enhance system security since Windows 10.

Concluding Remarks

Now that you know how to bypass the TPM 2.0 requirement, you can install Windows 11 on your device. However, consider upgrading to a compatible PC to stay in Microsoft's good graces and ensure full support for your Windows 11 installation.

Microsoft discourages running its new OS on non-compliant devices. While it won’t prevent you from doing so, the user agreement protects Microsoft from any damage your PC might suffer and removes the obligation to provide updates.

For further reading, learn how to convert legacy BIOS to UEFI in Windows 10.

The above is the detailed content of How to Safely Bypass the TPM 2.0 Requirement in Windows 11 - Make Tech Easier. For more information, please follow other related articles on the PHP Chinese website!