Windows 11 without TPM 2.0: options and risks for older PCs

If you want to use Windows 11 without TPM 2.0, you are usually faced with a message from PC Health Check: “This PC doesn't currently meet Windows 11 system requirements.” Often, however, the TPM is not missing at all but is simply switched off in the UEFI. In this guide, you will learn how to check and fix this, what risks unofficial installation methods involve and which legitimate alternatives remain open to you.

Key points at a glance

• Many PCs have a TPM 2.0 in the form of Intel PTT or AMD fTPM that simply needs to be enabled in the UEFI.
• Some motherboards can be fitted with a TPM module. However, this only helps if the processor is also supported.
• Microsoft advises against running Windows 11 on unsupported hardware: no entitlement to updates, no support, visible notices in the system.
• Legitimate alternatives are Windows 10 with ESU until 12 October 2027 or switching to compatible hardware.

Windows 11 without TPM 2.0: why the check fails

The Trusted Platform Module is a security component that stores cryptographic keys in such a way that malware cannot simply read them. Windows 11 relies on it for features such as device encryption and BitLocker, Windows Hello and virtualisation-based security. Microsoft has therefore made TPM 2.0 a fixed minimum requirement.

The TPM does not have to be a separate chip. For several processor generations now, it has been built directly into the CPU as a firmware solution: at Intel as Platform Trust Technology (PTT), at AMD as fTPM. It is precisely these variants that are often switched off by default. Our guide to the Windows 11 system requirements gives an overview of all requirements.

Check first: is the TPM really missing?

Before you think about new hardware, you should know the actual situation. A built-in tool is all you need.

1. Press the Windows key + R, enter tpm.msc and confirm with Enter.
2. If the window shows specification version 2.0 under “TPM Manufacturer Information”, the TPM is active. The cause of the message then lies elsewhere, for example with the processor or Secure Boot.
3. If a message appears saying that no compatible TPM was found, the module is either disabled or not present.
4. If it shows version 1.2, that is not sufficient for Windows 11. On some devices, a firmware update from the manufacturer can switch the TPM to 2.0. Your PC or motherboard manufacturer can tell you whether this is possible for your model.

It is also worth checking the processor. You can see the model under Settings → System → About. Intel Core from the 8th generation and AMD Ryzen from the 2000 series onwards generally come with a firmware TPM.

Enabling Intel PTT or AMD fTPM in the UEFI

For many readers, this is the real solution. Microsoft describes the procedure on the page Enable TPM 2.0 on your PC.

1. On Windows 10, open Settings → Update & Security → Recovery; on Windows 11, Settings → System → Recovery. Under Advanced startup, select “Restart now”.
2. Click Troubleshoot → Advanced options → UEFI Firmware Settings → Restart. Alternatively, you can enter the firmware by pressing the setup key when switching on, often Del or F2.
3. Look for entries such as “Intel PTT”, “Intel Platform Trust Technology”, “AMD fTPM Switch”, “AMD PSP fTPM”, “Security Device Support” or “TPM State”. They are often found under “Advanced”, “Security” or “Trusted Computing”.
4. Set the option to “Enabled” or “Firmware TPM”.
5. Save with F10 or via “Save & Exit”, restart and check again with tpm.msc and PC Health Check.

Check Secure Boot at the same time

Windows 11 also requires UEFI firmware that supports Secure Boot. In msinfo32, it should say “BIOS Mode: UEFI”. If the PC is running in legacy mode, it is not enough simply to switch off the Compatibility Support Module (CSM): Windows on an MBR disk will then no longer start. The disk must first be converted to GPT format using Microsoft's MBR2GPT tool. Back up all your data beforehand.

Fitting a TPM module

Some desktop motherboards have a dedicated header for a TPM module, usually labelled “TPM” or “SPI_TPM”. A suitable module can be plugged in there. Pin assignment and form factor vary by manufacturer, so only use a module that the motherboard manufacturer specifies for your model.

In practice, this route rarely makes sense. Motherboards with a supported processor almost always already have a firmware TPM. On older boards, by contrast, Windows 11 usually also fails because of the processor, and a TPM module does nothing to change that.

Unofficial methods: what exists and what Microsoft says

There are methods that allow Windows 11 to be installed even on devices without TPM 2.0 or with an unsupported processor. In addition, there are third-party tools that remove the hardware check from the installation media. We deliberately do not provide instructions for this.

Microsoft explicitly advises against installing Windows 11 on devices that do not meet the minimum requirements. Anyone who does so anyway must confirm during installation that they have understood the notices.

The risks at a glance

There is also the effort involved: every annual feature update can fail the hardware check again. For a PC you use for banking or processing work data, this is not a reliable basis.

Legitimate alternatives

Continue using Windows 10 with ESU

Regular support for Windows 10 ended on 14 October 2025. Through the ESU programme, home users receive security updates until 12 October 2027. Requirements include Windows 10 version 22H2 and an administrator account. In the European Economic Area, participation is free if you sign in with a Microsoft account. Details can be found on Microsoft's Extended Security Updates page, and step-by-step enrolment instructions in our guide to Windows 10 ESU. If you do not have a valid Windows 10 licence, our guide Buying a Windows 10 key will help.

Switching to compatible hardware

If the processor is the bottleneck, new hardware is ultimately the only option. For desktop PCs, replacing the motherboard, processor and RAM is often enough; the case, power supply and drives can frequently stay. For laptops, a new device is usually the more economical solution.

Why carrying on without updates is not advisable

Windows 10 without ESU keeps running, but no longer receives security updates. Our article on Windows 10 end of support explains the consequences and how to weigh up your options.

Licence and activation

Regardless of the installation method, Windows 11 requires a valid licence for activation. If an activated copy of Windows 10 was running on the device, the upgrade is free of charge for eligible devices. For a new or self-built PC without an existing licence, you need a suitable product key. You receive it by email after purchase, accompanied by step-by-step instructions.