Windows 11 Tpm Secure Boot Feature

Your PC Can’t Run Windows 11? Try changing these settings

Have you tried upgrading to Windows 11 only to discover that the latest version of the operating system from Microsoft cannot run on your computer? Before you run out and buy a whole new PC, there are a few things you can try first. Here’s what to do.

Windows 11 hardware requirements

Before you do anything, you will need to make sure that your computer has the minimum hardware requirements needed to run Windows 11. Unfortunately, if your computer does not meet these requirements, you will not be able to run Windows 11.

Check below to see if your computer has what it takes:

  • 1 GHz or faster with two or more cores on a compatible 64-bit processor or system on a chip (SoC)
  • 4 GB RAM
  • 64 GB or more storage space
  • UEFI, Secure Boot Capable Firmware
  • Trusted Platform Module version 2.0
  • DirectX 12 compatible graphics card or later with WDDM 2.0 driver
  • HD screen (720p) larger than 9 inches diagonally, 8 bits per color channel
  • For all versions of Windows 11, an Internet connection is required to perform updates and take advantage of some features. Furthermore, a Microsoft account is required for some features.

Run a computer health check

If you want to install Windows 11 on your device, the easiest way to determine if it is compatible is by running Microsoft’s Health Check. PC Health Check is a diagnostic tool that has some maintenance features, but its main function is to check whether your PC is capable of running Windows 11 or not. It achieves this by automatically evaluating the computer to ensure that it meets or exceeds the requirements listed in the previous section.

Many Windows 10 users will find that the PC Health Check app is already installed on their PC, provided they have enabled automatic updates on their device. If you do not have PC Health Check, you can install it manually.

Once the PC Health Check app is installed, use the search field in the taskbar to search for it. From the list of results, click on Check Computer Health and the program will start. To see if your computer can run Windows 11, simply click the button labeled “Check now” below the “Introduction to Windows 11” logo.

computer health check

If you can install Windows 11 on your device, great! You don’t need to read any further. However, if you’re like me, you’re faced with a message telling you that your PC doesn’t currently meet the Windows 11 system requirements.

Computer health check denied

Unfortunately, PC Health Check does not go into detail on how to correct some of these compatibility issues. The most common issues people encounter are related to TPM and Secure Boot.

What is TPM?

TPM stands for Trusted Platform Module. A TPM is a physical security chip on a PC’s motherboard that generates and stores encryption keys. In Windows 10, the computer will need a TPM in order to perform certain functions, such as BitLocker. However, the TPM was not required to install Windows, until now.

Windows 11 TPM (version 2.0) is required to configure operating system security features. If you try to install Windows 11 on a device that does not have a TPM 2.0 chip, you will not be able to continue with the installation. This is true even if your PC meets and exceeds all other Windows 11 hardware requirements.

What is secure boot?

Secure Boot is a security feature that prevents malware from loading when your computer starts. The good news is that most modern computers are capable of secure booting. The bad news is that some devices don’t have Secure Boot turned on by default. Fortunately, there is a way to enable secure boot through the BIOS of your computer.

How to tell if your computer has a TPM

The good news is that finding out if your computer has a TPM (Trusted Platform Module) is very simple.

  1. press Wins + s. This will launch the Run dialog.
  2. write in tpm.msc and hit Enters Or click the OK button.
Running Windows 11 Tpm
  1. Doing so will open a window called TPM Management on the local computer. This will tell you if your computer has a trusted system unit or not. In addition to that, it will also detect the TPM version on your PC. Know that to install Windows 11, you will need TPM 2.0.
Windows 11 Tpm management
  1. Alternatively, if you see a message that says “The compatible TPM cannot be found,” it means one of two things. Either your computer does not have a TPM, or your computer has a TPM, but it is disabled in the BIOS. Unfortunately, there is no way to know if you have a broken TPM without doing some digging.

Enabling the TPM requires doing this via your computer’s UEFI BIOS. BIOS is the software that runs before Windows when you start your computer. Before we proceed, know that messing with your computer’s motherboard settings can prevent your device from booting properly. Therefore, follow the instructions in the next section carefully, unless you know exactly what you are doing.

How to enable TPM on your PC

  1. To get started, click on the “Start” button and open the “Settings” menu by clicking on the gear icon.
  2. Under the Settings menu, tap Update & Security.
Restore Windows 11 Settings Update
  1. Go to recovery.
Windows 11 Recovery Advancedstartup
  1. In the “Advanced startup” section, click the “Restart now” button.
  2. On the next screen, click on Troubleshoot.
  1. Now go to “Advanced Options-> UEFI Firmware Settings-> Reboot”.

Noticeable: If your PC doesn’t show these options (or if you’re not using Windows 10), you can still access the BIOS when your PC boots up. When you start your computer for the first time, you will see the splash screen during the initial boot process. You will need to press a specific key while this screen appears to access the BIOS. Usually, the switch is selected at the bottom of this splash screen. Often one of the function keys (F1And F2 etc), delete or Escaped. Refer to the manufacturer’s documentation if necessary.

When your computer restarts, you will be in the UEFI BIOS. Next, you’ll want to go to a submenu with TPM settings. To make things difficult, there is no universal naming convention that every manufacturer adheres to. So you’ll want to dig around and look for something like security, security settings, advanced security, or trusted computing.

Once you find the relevant menu, you will be able to enable the TPM on your device (provided it has it installed).

Now that you have the TPM enabled, you can exit the UEFI settings and restart your computer. When your computer restarts, the TPM will turn on and you will be able to install Windows 11.

However, if you can’t find the menu where your TPM settings are hiding, don’t start clicking things in frustration. As mentioned earlier, making changes in your computer’s BIOS can turn your computer into an expensive heavyweight. We recommend consulting the website of the manufacturer that made your device. They will have documentation that tells you step-by-step how to access your device’s TPM settings.

How to enable secure boot

As with the TPM, to enable Secure Boot, you’ll need to access your computer’s BIOS. For instructions on how to get there, see the previous section. Once you get into your computer’s BIOS, you’ll want to locate the Secure Boot setting. Unfortunately, like TPM settings, secure boot settings can be difficult to find.

On most computers, you will find Secure Boot hidden in the Security, Boot, or Authentication sections. Once you locate it, simply enable it, save changes, exit BIOS and your computer will reboot with Secure Boot enabled.

In rare cases, your computer fails to restart after enabling secure boot. If this is the case with your computer, go back to BIOS and disable Secure Boot. Unfortunately, some hardware such as graphics cards and software are not compatible with Secure Boot. You can try to uninstall any of these incompatible items and then re-enable Secure Boot. In some cases, you may need to update or remove everything to its original state before you can run Secure Boot.

Windows 11 Recovery Advancedstartup

Refreshing your PC doesn’t delete any of your personal files or change any of your settings, so this is a good place to start.

  1. To update your PC, open the Settings menu and click Update & Security.
  2. After that, click on Recovery.
  3. Under the “Reset this PC” subheading, click the “Get Started” button. Doing so will open a new window asking you to choose whether you want to keep your files or remove everything.
Windows 11 update

Frequently Asked Questions

1. What if I can’t install Windows 11?

If you find out that your computer is unable to run Windows 11, don’t panic. It just means you’re stuck with Windows 10. Fortunately, Microsoft still plans to support Windows 10 for another five years. So you’ll still get performance and security updates.

2. Can I uninstall the computer health check program?

Although there are some unnecessary features, PC Health Check is basically a diagnostic tool that is used to determine if a device can run Windows 11. So, if you don’t want to run Windows 11, or you’ve already run the app and found your answer, no You really need to keep it installed on your device. To uninstall it, type “add removal programs” in the search field on the taskbar. From the search results, click Add or Remove Programs. In the settings window that pops up, find PC Health Check and uninstall it. Be aware, however, that some Windows users are reporting that PC Health Check appears again on their PC after installing Windows updates.

3. What can I do if my computer does not have a TPM?

If your computer checks all the boxes for Windows 11 but your motherboard doesn’t have a Trusted Platform Module chip, you have two options. The first is simply buying a new computer. We know it’s not perfect, but it’s a possibility. You can also try installing the TPM yourself, or have someone do it for you.

Image credit: Unsplash

Was this article helpful?

Subscribe to our newsletter!

Our latest lessons are delivered straight to your inbox

Leave a Comment

Your email address will not be published.