How to Bypass TPM 2.0 Requirement for Windows 11 Installation Safely

Quick fix: Use Rufus (free, rufus.ie) to create a Windows 11 USB installer with TPM bypass. Insert USB, launch Rufus, pick Windows 11 ISO, click Start. In the “Windows User Experience” dialog, tick Remove requirement for 4GB+ RAM, Secure Boot and TPM 2.0. Boot from USB and install normally.

You want to install Windows 11 on hardware that doesn’t meet TPM 2.0, Secure Boot, or CPU requirements. Official setup blocks. Rufus creates a bypassing USB. Microsoft warns these installs aren’t supported, but they work for personal use.

What causes this

Microsoft requires TPM 2.0, Secure Boot, and 8th-gen Intel or AMD Zen 2+ CPU for Windows 11. Setup checks these and blocks install otherwise. Trade-offs of bypass: no guaranteed Windows Update support (Microsoft may withhold), some features may not work (Windows Hello biometrics, BitLocker), and you might not get future feature updates. For most users on hardware just slightly below the cutoff, bypass works fine.

Method 1: Create install USB with Rufus

The recommended route.

1. Download Rufus from rufus.ie (free).
2. Download Windows 11 ISO from microsoft.com/software-download/windows11.
3. Insert USB drive (8 GB+). Backup any data on it — will be erased.
4. Run Rufus. Pick USB under Device. Click SELECT → pick the Windows 11 ISO.
5. Image option: Standard Windows installation. Click START.
6. Windows User Experience dialog opens. Tick:
   • Remove requirement for 4GB+ RAM, Secure Boot and TPM 2.0
   • (Optional) Remove requirement for an online Microsoft Account — allows local account setup.
   • (Optional) Create a local account with username — pre-configures.
7. Click OK. Rufus writes the USB with bypass modifications. Takes 5–10 minutes.
8. Boot the target PC from USB. Install Windows 11 normally. Setup completes without TPM/Secure Boot checks.

This is the standard Rufus approach.

Method 2: Registry bypass during setup

For when you have official Windows 11 USB but want to bypass.

1. Boot from Windows 11 USB. Reach the “This PC can’t run Windows 11” error screen.
2. Press Shift + F10. Command Prompt opens.
3. Type regedit. Registry Editor opens.
4. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\Setup. Right-click Setup key → New → Key. Name it LabConfig.
5. In LabConfig, create DWORD values (right-click → New → DWORD):
   • BypassTPMCheck = 1
   • BypassSecureBootCheck = 1
   • BypassRAMCheck = 1
   • BypassCPUCheck = 1
6. Close Registry Editor. Close Command Prompt.
7. Click the Back arrow in setup. Then proceed with install — checks now skipped.

This is the right path when you can’t prep USB beforehand.

Method 3: In-place upgrade from Windows 10 with bypass

For upgrading existing Windows 10 to Windows 11 on unsupported hardware.

1. Download Windows 11 ISO. Mount.
2. From within Windows 10, open Terminal (Admin).
3. Set registry to bypass:

   reg add "HKLM\SYSTEM\Setup\MoSetup" /v AllowUpgradesWithUnsupportedTPMOrCPU /t REG_DWORD /d 1 /f

   This is Microsoft’s documented bypass for upgrades from Windows 10.

4. Run setup.exe from mounted Windows 11 ISO.
5. Acknowledge the “not supported” warning.
6. Upgrade proceeds. Keeps files, settings, apps from Windows 10.
7. Boot Windows 11. Activation transfers via digital license.

This is the right path for upgrade from Windows 10.

How to verify the fix worked

• Windows 11 setup proceeds past compatibility check.
• Install completes. Reach desktop.
• Run winver — shows Windows 11 version.
• Settings → System → About shows your hardware specs and Windows 11 edition.

If none of these work

If setup still blocks: Setup.exe version too new: latest Windows 11 ISO may have stricter checks. Use a slightly older ISO from archive sites (uup.rg-adguard.net rebuilds available). For ARM CPUs: Windows 11 ARM has different requirements; Rufus may not bypass. For specific blocked features: Windows Hello biometrics may not enroll on PCs without TPM. Use PIN. BitLocker requires TPM; use VeraCrypt as alternative for disk encryption. For PCs without UEFI: legacy BIOS PCs can run Windows 11 with bypass, but feature updates may fail. Convert MBR to GPT with mbr2gpt if motherboard supports UEFI. Future updates: Microsoft may block future feature updates for bypassed installs. Plan accordingly.

Bottom line: Rufus with “Remove TPM/Secure Boot/RAM requirements” option creates an installer that bypasses checks. For in-place upgrade from Windows 10: registry edit + setup.exe. Trade-off: unofficial; Microsoft may withhold updates.