With Windows 11, Microsoft unveiled a set of strict requirements for upgradeable PCs, including TPM 2.0. These requirements have swayed many PC users, but not anymore. In this article, we take a look at the TPM module, why it's important, how to check it on your device, and how to bypass it to install Windows 11.
What is TPM?
TPM stands for Trusted Platform UnitIt's a technology designed to provide your computer with robust hardware-based security. This chip helps your computer create, store, and limit the use of encryption keys and other security credentials on your device.
How does TPM work?
The TPM module on your laptop plays a powerful role in keeping your computer secure. Here are some examples of how it works to secure your device:
- The TPM chip can combine with software to protect your system from hacking or exploitation. Using the TPM, your device protects any passwords or encryption keys that are transmitted unencrypted.
- Additionally, you may experience unexpected changes in your system. If they are caused by a virus or malware, your TPM chip enters quarantine mode and helps your computer combat the threat.
- It can also store certificates, security credentials, and encryption keys, making it a more secure option than hard drive password managers.
- Your TPM can emulate a virtual smart card, protecting your private keys from being copied and used elsewhere to access your device.
- If you use a TPM to enable BitLocker Drive Encryption, the chip performs conditional checks to ensure integrity upon boot. If the TPM senses a change to the hard drives, such as theft, it locks the system.
What are the types of TPM?
Manufacturers implement TPM functions differently in their devices, making it essential to know which type of TPM your device should understand, how it works, and how to activate or deactivate it.
There are five different types of TPMs. Let's take a look at them below.
- Discrete TPM modules – These are custom, tamper-resistant semiconductor chips physically installed on your computer's motherboard. These modules implement the TPM function in the most secure way possible, and are what Microsoft expects your device to support for Windows 11.
- Integrated TPM modules – Integrated TPMs are also physical chips, but they come as part of another chip on the motherboard. While they aren't as tamper-resistant as discrete TPMs, they use hardware that resists errors in your software.
- Firmware TPMs (fTPM) – Unlike any of the above options, firmware TPMs (fTPMs) are firmware-based. They run in the CPU's trusted execution environment, offering security similar to hardware TPMs.
- Hypervisor TPMs (vTPM) – The hypervisor's TPM module requires a virtual environment to operate. This makes it easier to install Windows 11 in a virtual machine, as the vTPM runs in an isolated execution environment hidden from the software.
- TPMs for software – A software TPM mimics the functions of a separate TPM, but it doesn't offer any better protection than a regular software TPM. Software TPMs are considered less secure, as they are vulnerable to errors and malicious attacks.
Why is TPM 2.0 a requirement in Windows 11?
As technology evolves, so do threats to the security and privacy of your data. TPM 2.0 is Microsoft's way of helping you protect your identity and secure your data from intrusion.
For example, you must have TPM 2.0 to enable Windows Hello and enable BitLocker encryption for your hard drive.
Since 2016, many manufacturers have shipped PCs capable of running TPM 2.0, but some PCs capable of running this module are not yet configured to do so. Therefore, we recommend checking your device's compatibility with TPM before installing Windows 11.
How to check if your device has TPM 2.0
There are three ways to check if your laptop has TPM 2.0 installed and will support Windows 11.
1. Use the Microsoft PC Health Check App
The quickest way to determine if your computer can support Windows 11 and has TPM 2.0 is to use the PC Health Check utility. Follow the instructions below.
- Download the PC Health Check App from Microsoft.
- Open msi file Run it. This installs the application on your computer.
3. Open the PC Scan application. Click "Check now" Run the utility.
4. Once the scan is complete, this application will show you your computer's TPM version and other compatibility details.
5. If your PC is incompatible with Windows 11, it will explain how and why. It will also provide information about battery capacity, update status, and storage capacity.
2. Run the Trusted Platform Module Test
Another excellent way to check your TPM version is to use the tpm.msc command.
- Click on Win + R keys to start "employment". In the dialog box, type tpm. msc And press Enter Or click on "OK".
2. This opens TPM manufacturer information. The specification version value must be 2.0.
3. If your screen shows the error “Cannot find compatible TPM” Then the chip is either disabled in the BIOS or not available on your computer.
4. If you have version 2.0 but its status is "Not ready" , go to "procedures" and click “TPM preparation”. Doing this immediately enables the TPM on your device.
3. Use the Windows Security app
You can also use the Windows Security app to check TPM 2.0.
- Go to "Settings" and select Update and Security.
- Under this security option, select Windows Security , Then select Device security. You should see an option to Security Processor Details Within the option "Security processor".
- Select and verify your specification version as 2.0.
How to bypass TPM 2.0
What if your TPM version is lower than 2.0? Can you still install Windows 11 on your device?
Yes, you can. You can safely bypass TPM 2.0 requirements without compromising your device. Here's how.
1. Add a new registry value using Regedit
This disc was developed by Microsoft, so you can be assured of its reliability. This does not mean it endorses or supports installing Windows 11 on devices that do not meet its requirements.
Here's how to do it:
- Click on Win + R To open "Run" And type regedit. Click "OK" or press Enter to open the Registry Editor.
- Go to “HKEY_LOCAL_MACHINE\SYSTEM\Setup\MoSetup” from the top bar.
3. Right-click on the main panel and select Create a new DWORD (32-bit) value.
4. Give it a name “AllowUpgradesWithUnsupportedTPMOrCPU.”
5. Set its value to "1." Click “Okay.”
6. Finish Registry Editor.
Your PC can now upgrade to Windows 11.
2. Edit the registry on a fresh installation of Windows 11
Another way to do this is to edit the registry after starting a fresh Windows 11 installation.
- Start a fresh Windows 11 installation until you reach the error screen that displays “This PC can't run Windows 11.”
2. Press Shift + F10 To open the command line.
3. Write “regedit.exe” And press Enter.
4. Go to “HKEY_LOCAL_MACHINE\SYSTEM\Setup”.
5. Right-click on the folder. "preparation". From the options in the menu, select "new" And click "key" From the expanded menu. Name this new key. “LabConfig”.
6. Go to the folder “LabConfig” In the registry and open it. In the left part of the window, right-click and create a value. DWORD New (32 bit).
7. Name it. DWORD This new name is BypassTPMCheck. You can also add words. DWORDs “BypassRAMCheck” و BypassSecureBootCheck To bypass all Windows 11 requirements
8. Assign values to all these words. DWORDs new on "1."
9. Exit the registry editor and the installation process will complete.
3. Use Rufus to bypass TPM 2.0
You can use the Rufus utility to create a bootable USB with settings that disable the TPM requirement. This setting also disables RAM and CPU requirements, making the installation media compatible with almost all hardware that doesn't meet Microsoft's requirements.
This method requires a flash drive of at least 16 GB.
- Download the Latest version of Rufus And install it on your computer.
- Enter USB empty drive (16GB or larger) on your computer, then start Rufus.
- Select this USB drive as your installation location.
- Make sure the boot selection is “Disc or ISO image” , Then click "to download".
- Rufus will ask you to select "Windows 11" , its latest version, and your preferred language.
- Also, Rufus will prompt you to select a location to save your ISO image.
- Save it to your downloads folder.
- Once the download is complete, click on the image option and choose “Extended Windows 11 install” To disable TPM, secure boot, and RAM requirements 8 GB.
9. Click "Start" To start installing the ISO to your flash drive.
Once done, you can use this drive to install Windows 11 on your old PC or virtual machine.
Frequently Asked Questions
1. Can I install a new TPM chip on my computer?
Yes, you can, but you must have a compatible motherboard. Most laptops manufactured after 2016 come with discrete or integrated TPM modules. Since laptop motherboards are difficult to upgrade, you may not be able to add a chip to yours.
If you have a desktop-compatible motherboard, you can install a physical TPM chip on it. Most desktop motherboards have this option.
Unless you have intermediate or advanced computer experience, we recommend contacting an expert if you need to perform this upgrade.
2. How much does a TPM chip cost?
In many cases, TPM chips cost no more than $29, but when Microsoft announced this requirement, the price skyrocketed to around $199. Now that the heat has died down (and you can circumvent the TPM requirement anyway), they should return to normal prices.
3. Does Windows 10 use TPM 2.0?
Yes, that's true, although it wasn't a strict requirement in this version of Windows. Since Windows 10, Microsoft has fully controlled the TPM to ensure your system remains secure.
last thoughts
Now that you know how to bypass the TPM 2.0 requirement, you can install Windows 11 on your device. Although you've worked to bypass these restrictions, you'll want to get a compatible PC anyway.
Microsoft doesn't like installing a new operating system on devices that don't meet the requirements. While it won't prevent you from doing so anyway, the end-user agreement protects Microsoft from any harm your computer may incur as a result of using Windows 11.
The agreement also eliminates any obligation to release updates for your device. A compatible device keeps you within Microsoft's fold, and you'll enjoy full support for installing Windows 11.
