Windows 11 System Requirements: TPM 2.0 and Secure Boot Explained

"This PC can't run Windows 11" is one of the most frustrating messages, especially when your computer feels perfectly fast. Most of the time the cause is a single BIOS setting. Let's check your PC properly.

The official minimum requirements

• Processor: 1 GHz or faster, 2 or more cores, 64-bit, on Microsoft's supported list (roughly Intel 8th gen and AMD Ryzen 2000 or newer)
• RAM: 4 GB (8 GB is much more comfortable)
• Storage: 64 GB or more
• Firmware: UEFI with Secure Boot capability
• TPM: version 2.0
• Graphics: DirectX 12 compatible with a WDDM 2.0 driver
• Display: larger than 9 inches, 720p

What are TPM and Secure Boot?

TPM (Trusted Platform Module) is a security chip that stores encryption keys. Most PCs from 2018 onwards have it, often as "Intel PTT" or "AMD fTPM" inside the processor. Secure Boot stops unknown software from loading while your PC starts.

How to check

1. Press Windows + R, type tpm.msc, press Enter. It should say "The TPM is ready for use" with specification version 2.0.
2. Press Windows + R, type msinfo32. Look at "BIOS Mode" (needs UEFI) and "Secure Boot State" (On).
3. Or use Microsoft's PC Health Check app for a simple yes/no.

How to switch them on

1. Restart and enter BIOS (usually Del, F2, F10 or Esc).
2. Find Security or Advanced, then enable Intel PTT or AMD fTPM.
3. Find Boot and enable Secure Boot. If the option is greyed out, set the boot mode to UEFI (not Legacy/CSM) first.
4. Save and exit.

If your drive uses the old MBR layout, Windows needs it converted to GPT. Back up first. The mbr2gpt tool built into Windows does this without losing data.

PC really too old?

If the processor isn't supported, Windows 10 keeps working but no longer receives free updates. See what to do after Windows 10 end of support. For old machines that must stay old, Windows 10 keys are still available:

If your PC passes the check, go for Windows 11: