Windows 11 Upgrade Without TPM: Enable It or Plan Ahead

“This PC doesn’t currently meet Windows 11 system requirements” is a common sight on Windows 10 PCs, and TPM is the requirement people most often trip over. Before searching for a Windows 11 upgrade without TPM, check one thing: many PCs that fail the TPM test actually have a TPM 2.0 built into the processor that is simply switched off. This guide shows how to find out, how to switch it on, and what your realistic options are if the PC really lacks TPM 2.0.

What TPM is and why Windows 11 wants it

A Trusted Platform Module is a small security processor that stores encryption keys and verifies that the PC starts up without tampering. Windows 11 uses it for features such as device encryption, BitLocker and Windows Hello. Microsoft lists TPM version 2.0 among the Windows 11 minimum requirements, alongside a supported processor, UEFI with Secure Boot, 4 GB RAM and 64 GB storage. Our TPM requirement guide explains the background.

Step 1: Check what your PC has

On the Windows 10 PC:

1. Press Windows key + R, type tpm.msc and press Enter.
2. Read the result:

What tpm.msc shows	What it means	Next step
Status: ready; Specification Version 2.0	TPM 2.0 present and on	TPM is not your problem; check the other requirements
Specification Version 1.2	Older TPM	PC does not meet the requirement; check firmware for a TPM 2.0 option
“Compatible TPM cannot be found”	TPM off or absent	Look for fTPM or PTT in the firmware

You can also open Windows Security > Device security: a Security processor section appears when a TPM is active.

Then run the PC Health Check app to see whether TPM is the only failing requirement. If the processor is also unsupported, enabling TPM will not make the PC eligible.

Step 2: Enable TPM in the firmware

Microsoft’s Enable TPM 2.0 page explains that most PCs shipped in recent years are capable of running TPM 2.0, but some have it disabled in the UEFI settings. The exact menu names depend on the PC maker, so keep their support page open.

1. On Windows 10, open Settings > Update & Security > Recovery.
2. Under Advanced startup, select Restart now.
3. Select Troubleshoot > Advanced options > UEFI Firmware Settings > Restart.
4. In the firmware, look in the Security, Advanced or Trusted Computing menu for:
   • AMD fTPM or AMD CPU fTPM on AMD systems,
   • Intel PTT (Platform Trust Technology) on Intel systems,
   • TPM Device, Security Device Support or similar on others.
5. Enable it, then save and exit (often F10).

Back in Windows, run tpm.msc and PC Health Check again. See TPM 2.0 enable for more detail, and enable Secure Boot if Secure Boot also fails.

If you use BitLocker on Windows 10, changing TPM settings can trigger a recovery key prompt. Make sure you have your key first; see BitLocker recovery.

If the PC really has no TPM 2.0

Some desktop motherboards accept an add-on TPM module from the board maker; the manual will say. Most laptops cannot be upgraded.

You will find guides online for forcing Windows 11 onto PCs without TPM 2.0. We do not publish bypass steps. Microsoft’s page on unsupported devices says such PCs are not guaranteed to receive updates, including security updates, that damage due to lack of compatibility is not covered by the manufacturer warranty, and that a watermark is added to the desktop. Microsoft recommends rolling back to Windows 10 if you have already done it. An operating system that might stop getting security fixes is not a good place for your banking and email.

After enabling TPM: encryption and recovery keys

Once TPM is on and the PC is upgraded, Windows 11 can use it for encryption. Microsoft explains that when you set up or sign in with a Microsoft account on supported hardware, device encryption can turn on and the recovery key is saved to that account. That is good for security, but it means you should:

• Know where your recovery key is: on another device, sign in at aka.ms/myrecoverykey, or print it.
• Avoid Clear TPM in Windows Security > Device security > Security processor details unless a support guide specifically tells you to. Clearing the TPM removes the keys it holds, and anything protected only by those keys can become inaccessible.
• Expect a recovery key prompt if you later change firmware security settings or update the firmware; our BitLocker recovery guide covers what to do.

The realistic plan for an ineligible PC

Microsoft ended Windows 10 support on 14 October 2025. Consumer Extended Security Updates for Windows 10 run until 12 October 2027, according to Microsoft’s consumer ESU page as checked on 14 October 2026. That gives you time to:

1. Enroll the PC in ESU so it keeps getting security updates. See Windows 10 ESU end.
2. Back up your files now, not on the day the PC is replaced.
3. Budget for a Windows 11 PC before October 2027; our buying guide helps.
4. Move your data when the new PC arrives with transfer files to a new PC.

If the PC passes after enabling TPM, go ahead with upgrade Windows 10 to Windows 11 or the Windows 11 upgrade guide.