PC Doesn't Meet Windows 11 Requirements — TPM 2.0 and Secure Boot Explained

Microsoft's Windows 11 requirements include a Trusted Platform Module (TPM) version 2.0 and Secure Boot. Many PCs that shipped with Windows 10 actually have both of these — they're just turned off in the BIOS/UEFI firmware settings. Enabling them is usually straightforward.

Check What Your PC Actually Has

Before diving into BIOS settings, run the PC Health Check app (built into Windows 10/11) to see exactly which requirement is failing:

1. Search for PC Health Check in the Start menu and open it.
2. Click Check now.
3. If requirements aren't met, click See all results to see specifically what failed.

Checking Your TPM Status

1. Press Win + R, type tpm.msc, and press Enter.
2. If you see TPM is ready for use with Version 2.0, your TPM is already enabled.
3. If it says the TPM cannot be found, or it shows version 1.2, you'll need to enter BIOS settings.

Enabling TPM 2.0 in BIOS/UEFI

The process varies by manufacturer, but the general steps are:

1. Restart your PC and press the BIOS key as it boots — commonly Del, F2, F10, or Esc depending on your PC brand. Look for a prompt on the startup screen.
2. Navigate to the Security, Advanced, or Trusted Computing section (exact names vary).
3. Find an option for TPM, PTT (Intel Platform Trust Technology), or fTPM (AMD firmware TPM) and enable it.
4. Save and exit (F10 on most systems).

Enabling Secure Boot

While in the BIOS, also check for Secure Boot. It's usually under a Boot or Security menu. Set it to Enabled. Note: Secure Boot requires your drive to use GPT partition format rather than MBR — if your drive uses MBR, this process is more involved.

When Your PC Genuinely Can't Meet the Requirements

If your processor predates the supported CPU list (generally, 8th-gen Intel or Ryzen 2000 series and newer), your PC cannot run Windows 11 officially. Windows 10 remains supported until October 2025 — after that, consider whether upgrading your hardware makes sense for your needs.