Does my PC need TPM 2.0 to install Windows 11?

Yes. TPM 2.0 (Trusted Platform Module version 2.0) is a hard requirement for Windows 11. It is used for BitLocker encryption, Windows Hello, and platform security features. Many PCs manufactured after 2016 have TPM 2.0 hardware but have it disabled in BIOS by default. Run tpm.msc to check your current TPM version and status. If your PC has TPM 1.2 hardware (not 2.0), it cannot be upgraded to meet this requirement through software settings.

What is Secure Boot and why does Windows 11 require it?

Secure Boot is a UEFI firmware feature that verifies the digital signature of boot software before loading it. This prevents bootloader malware (rootkits) from running before Windows starts. Windows 11 requires Secure Boot to be enabled because it is part of the platform security baseline. Secure Boot does not prevent you from running non-Microsoft software — it only verifies that the boot process itself has not been tampered with.

How do I know if my CPU is compatible with Windows 11?

Microsoft maintains an official list of supported processors at aka.ms/CPUlist. Generally, Intel 8th generation (Coffee Lake) and newer, AMD Ryzen 2000 series and newer, and Qualcomm Snapdragon 850 and newer are supported. The PC Health Check app checks your specific CPU against this list and reports whether it is compatible. First-generation Intel Core, AMD Ryzen 1000 series, and older processors are not supported regardless of other hardware specifications.

My PC fails the health check — can I still install Windows 11?

Microsoft does not officially support or recommend installing Windows 11 on PCs that fail the health check. If you proceed on unsupported hardware, Windows Update will not deliver future Windows 11 updates, and you may encounter stability issues. Microsoft's official guidance is to continue using Windows 10, which receives security updates until October 14, 2025. After that date, consider hardware replacement or purchasing a Windows 11 license for a compatible PC.

Can I bypass the TPM 2.0 requirement to install Windows 11?

Microsoft has documented a registry-based workaround that allows installation on PCs with TPM 1.2 and no Secure Boot, but PCs using this workaround are considered unsupported. The workaround is described in Microsoft's support article KB5028997. Microsoft explicitly states that PCs bypassing requirements 'are not eligible to receive Windows Updates' and that 'damages or losses that may arise from using this workaround are not covered under Microsoft's warranty.' This guide covers fixing installation on hardware that meets requirements, not bypassing them.

Windows 11 Won't Install — Fix

Windows 11 won’t install when the PC either fails hardware requirements and the upgrade is never offered, or when the Installation Assistant reports a compatibility block before beginning. According to Microsoft’s official documentation, the most common reasons are TPM 2.0 disabled in BIOS, Secure Boot turned off or in Legacy mode, and CPU incompatibility — all of which PC Health Check identifies specifically.

Windows 11 won’t install — fix steps: PC Health Check, enable TPM 2.0, enable Secure Boot, Installation Assistant, Media Creation Tool

Why Windows 11 won’t install on your PC

Windows 11 enforces hardware requirements that Windows 10 did not. These requirements are checked before the installation begins:

TPM 2.0 not enabled — present in most post-2016 hardware but often disabled by default in BIOS
Secure Boot disabled — frequently disabled on dual-boot systems or older BIOS configurations
Legacy/CSM boot mode — Secure Boot requires UEFI mode; Legacy mode blocks Windows 11 installation
CPU not on the supported list — Intel 7th generation and older, AMD Ryzen 1000 and older are not supported
Insufficient RAM or storage — 4 GB RAM and 64 GB storage are minimum requirements
Windows Update delivery delay — eligible PCs may not yet be offered Windows 11 through Windows Update due to staged rollout

How to fix Windows 11 won’t install

Step 1 — Run PC Health Check to identify the missing requirement

Guessing which requirement is missing leads to unnecessary BIOS changes. PC Health Check gives you the exact answer in one step.

Go to microsoft.com/windows/windows-11 and scroll to the Check compatibility section
Download and run PC Health Check
Click Check now
Review the results — the app lists every requirement and marks failures with a clear description:
- “The PC must support Secure Boot” → Secure Boot is disabled (Step 3)
- “The PC must support TPM 2.0” → TPM needs to be enabled in BIOS (Step 2)
- “The processor isn’t supported” → CPU incompatibility, hardware replacement required
- “This PC doesn’t have enough RAM” → below 4 GB
- “Storage must be 64 GB or greater” → add storage or free space

Screenshot the results before making any changes.

Step 2 — Enable TPM 2.0 in BIOS/UEFI

Most PCs manufactured after 2016 include TPM 2.0 hardware — but it is disabled in BIOS by default.

Restart your PC and press the BIOS entry key during startup:
- Dell: F2 or Del
- HP: F10 or Esc
- ASUS: Del or F2
- Lenovo: F1 or F2 (or Enter then F1 on some models)
- MSI: Del
Navigate to the Security section (may also appear under Advanced or Trusted Computing)
Enable the TPM option:
- Intel: Enable PTT (Platform Trust Technology)
- AMD: Enable fTPM (Firmware TPM)
Save and exit (typically F10)
After Windows boots, verify: press Win + R → type tpm.msc → confirm Specification Version: 2.0

Step 3 — Enable Secure Boot in BIOS/UEFI

Secure Boot must be enabled and the firmware must be in UEFI mode (not Legacy or CSM).

Restart and re-enter BIOS/UEFI
Navigate to the Boot section
Set Secure Boot to Enabled
Confirm Boot Mode is set to UEFI (not Legacy, CSM, or Compatibility Mode)

Before switching from Legacy to UEFI mode, check your disk partition style:

Right-click Start → Disk Management
Right-click your primary disk → Properties → Volumes tab
Check Partition style — if it shows MBR, you need to convert to GPT before enabling UEFI mode (use the MBR2GPT tool documented at docs.microsoft.com)

After enabling Secure Boot, verify in Windows: press Win + R → type msinfo32 → find Secure Boot State: On.

Step 4 — Use the Windows 11 Installation Assistant

If your PC passes health check but Windows Update has not offered Windows 11 yet, the Installation Assistant installs it directly without waiting for the staged rollout.

Go to microsoft.com/software-download/windows11
Download the Windows 11 Installation Assistant
Run it as administrator
Accept the license terms and click Accept and install
Keep the PC plugged in and connected to the internet throughout
The process downloads ~4–5 GB and requires two or three restarts
After the final restart, Windows 11 is installed — your files and applications are preserved

Step 5 — Create installation media with Media Creation Tool

If the Installation Assistant reports an error or fails to complete, the Media Creation Tool creates a bootable USB that performs the upgrade directly.

Go to microsoft.com/software-download/windows11
Download the Windows 11 Media Creation Tool
Insert a USB drive with at least 8 GB capacity (all existing contents will be erased)
Run the tool → select Create installation media → choose language and edition
Select USB flash drive and wait for the tool to download and write Windows 11 (~5–6 GB)
Restart your PC and boot from the USB:
- Press F12 (most PCs), F8 (some ASUS/Gigabyte), or Esc (HP) during startup to open the boot menu
- Select the USB drive
At the Windows 11 setup screen, select Upgrade this PC now to preserve files and apps

How to verify the fix

After installation completes, go to Settings → System → About and confirm:

Edition: Windows 11 Home or Pro
Version: 23H2 or 24H2 (current versions as of 2026)

If Windows 11 still will not install after completing these steps, consult the Windows 11 Upgrade Errors hub or contact Microsoft Support at support.microsoft.com with the specific error code or PC Health Check result.