PC Not Windows 11 Compatible? Check TPM and Secure Boot First

Written by Fajar Webarq. Updated October 26, 2026.

Summary

• A "doesn't meet requirements" message does not necessarily mean you must replace your PC. TPM 2.0 or UEFI mode may simply be switched off in the firmware.
• If the processor is not supported, no official setting can change that, and Microsoft does not recommend installing Windows 11 on such a PC.
• The safe options: Windows 10 ESU (Extended Security Updates) until October 12, 2027, ChromeOS Flex for PCs used mainly in a browser, or a new device.

If PC Health Check rejects your Windows 11 upgrade because of TPM, don't assume your PC is too old. According to Microsoft, most PCs shipped in the last 5 years can run TPM 2.0, but the feature may be turned off in the firmware, and so may UEFI mode. This guide shows how to check and enable both, plus the official options if your processor is truly unsupported.

What Does "This PC Doesn't Meet Windows 11 Requirements" Mean?

It means at least one minimum Windows 11 requirement is not met or not detected. The message is often searched in its English form, "This PC doesn't currently meet Windows 11 system requirements". PC Health Check tells you which requirement failed, and that requirement determines whether the problem can be fixed through settings.

Step 1: Check Whether TPM Is Just Turned Off

The first step is to open the TPM console with the tpm.msc command. If you see the message Compatible TPM cannot be found, Microsoft says the TPM may be disabled, not necessarily missing. If a TPM is detected and shows version 2.0, the problem lies in another requirement.

1. Press Windows + R, type tpm.msc, then select OK.
2. If Compatible TPM cannot be found appears, go to Step 2. If a TPM is detected, check Specification Version under TPM Manufacturer Information. It must read 2.0.

Don't change anything in this console. Microsoft Learn advises against configuring the TPM through tpm.msc.

Step 2: Save Your BitLocker Recovery Key

Before changing any firmware settings, get your BitLocker recovery key if your PC's drive is encrypted. Microsoft Learn lists turning off the TPM, changes to the boot manager or partition table, and BIOS/UEFI firmware upgrades as examples that can trigger the BitLocker recovery screen. Without that key, you could be locked out of your own data.

• Find the key at aka.ms/myrecoverykey from another device using your Microsoft account. According to Microsoft, if someone else set up the PC, the key may be in that person's account.
• Store the key separately from the PC.
• For planned changes, Microsoft says you can avoid the recovery screen by temporarily suspending BitLocker.

Step 3: Enable TPM 2.0 in UEFI Settings

TPM is enabled from the UEFI firmware settings, not from Windows or by downloading software. According to Microsoft's guide, you reach the firmware through the Recovery menu in Windows, then look for the TPM option under the Advanced, Security, or Trusted Computing submenu. Option names vary by brand.

1. Save your work, then open Settings > Update & Security > Recovery and select Restart now under Advanced startup.
2. Select Troubleshoot > Advanced options > UEFI Firmware Settings, then Restart.
3. Open the Advanced, Security, or Trusted Computing submenu, find one of the options in the table below, and enable it.
4. Save your changes and exit the firmware menu. The PC will return to Windows.
5. Run PC Health Check again to confirm the TPM requirement now passes.

If you're unsure or the menu looks different, Microsoft advises checking the support information from your PC maker, such as Asus, Dell, HP, or Lenovo.

Secure Boot and UEFI Mode: Which Is Required?

For an upgrade from Windows 10, Microsoft only requires the PC to be Secure Boot capable with UEFI mode active. Turning Secure Boot on is recommended for security, but it is not an upgrade requirement. Problems arise when the PC is still running in Legacy BIOS or CSM mode, because Secure Boot then appears to be unavailable.

Check your PC's mode with msinfo32 (the steps are in our guide to the Windows 11 upgrade requirements):

• BIOS Mode says UEFI: the firmware requirement is met. If Secure Boot State is still Off, you can turn it on in the firmware menu using the route from Step 3.
• BIOS Mode says Legacy: the firmware must be switched to UEFI mode. Microsoft recommends choosing UEFI as the first or only boot option.

On a PC that already has Windows installed, this switch can also affect the disk structure. Check the system disk's partition style in Disk Management: right-click the disk, choose Properties, open the Volumes tab, and look at Partition style. If it says MBR, Microsoft provides the MBR2GPT tool to convert it to GPT without deleting data, after which the firmware must be set to UEFI mode. The conversion cannot be undone and BitLocker protection must be suspended first, so do it after a full backup or leave it to a technician.

If Your Processor Really Is Not Supported

No official setting can make an unsupported processor pass the requirements. Microsoft does explain what happens if Windows 11 is installed on such a PC anyway, but what it says amounts to a warning. Here are the key points from Microsoft's official page:

• This kind of installation is not recommended, and you must accept a disclaimer during setup.
• The PC is not guaranteed to receive updates, including security updates, and is no longer entitled to receive them.
• Damage caused by incompatibility is not covered by the manufacturer's warranty.
• A watermark appears on the desktop, and notifications may appear in Settings.
• Microsoft advises you to go back to Windows 10 right away.

For this reason, we do not include ways to force the installation through the registry, USB creation tools that skip the requirement checks, or modified ISOs. Windows 11 without guaranteed security updates simply repeats the Windows 10 problem you wanted to leave behind.

3 Safe Options if Your PC Can't Run Windows 11

If your PC cannot be upgraded officially, three paths remain safe: extend Windows 10 with ESU until October 12, 2027, replace the operating system with ChromeOS Flex, or replace the device. The right choice depends on your PC's condition, the apps you need, and your budget.

ESU: Extra Time Until October 2027

ESU provides Windows 10 security updates until October 12, 2027, and enrollment can be free for home users. Treat ESU as time to prepare a replacement, not a permanent solution. For how to enroll, see our guide on the end of Windows 10 support.

ChromeOS Flex: For PCs Used Mainly in a Browser

ChromeOS Flex is Google's operating system for existing PCs and Macs, and according to the Google blog it can be downloaded for free. It requires an Intel or AMD x86-64 processor, 4 GB of RAM, 16 GB of storage, the ability to boot from USB, and full administrator access to the BIOS. Intel and AMD processors and graphics made in 2012 or earlier are not supported.

Keep three things from Google's documentation in mind:

• A full installation erases all data, apps, settings, and the old operating system, and that data cannot be recovered even if the installation fails. Back up first.
• You can try it without installing (live boot from USB), but Google recommends this only for a temporary trial.
• Every model has an update limit. According to the certified models list, support ends on December 31 of the year listed.

ChromeOS Flex is not Windows. Make sure your work can be done in a browser or web apps before you switch.

Replace the Device

If your PC is old or you need Windows apps long term, replacing the device before ESU ends is the most complete route. Move your files with Windows Backup, OneDrive, or an external hard drive, then wipe your personal data before selling the old PC.

Why This Matters

Some PCs that Windows 11 rejects can actually pass once a single firmware setting is turned on. Knowing the exact cause prevents two costly mistakes: buying a new device you don't need, or forcing Windows 11 onto an unsupported PC and losing the guarantee of security updates.

What to Do Now

1. Run PC Health Check and note the requirement that fails.
2. If it's TPM, check tpm.msc, save your BitLocker key, then enable TPM in UEFI.
3. If it's UEFI or Secure Boot, check BIOS Mode in msinfo32. If it says Legacy, make a full backup first and consider getting help from a technician.
4. If it's the processor, enroll in ESU now and plan a replacement before October 12, 2027.
5. Avoid modified installation files and bypass tools.

What to Watch

• Microsoft's processor list. It is updated with every Windows release, but it is aimed at manufacturers of new devices. For older PCs, PC Health Check remains the deciding tool.
• ESU policy. Don't count on another ESU extension until there is an official announcement.
• ChromeOS Flex update limits for your PC model.

Frequently Asked Questions

What does "This PC doesn't currently meet Windows 11 system requirements" mean?

It means at least one minimum Windows 11 requirement is not met or not detected, such as TPM 2.0, Secure Boot, or the processor. TPM and UEFI mode sometimes just need to be enabled in the firmware.

Can I upgrade from Windows 10 to Windows 11 without TPM 2.0?

Not officially. Microsoft does not recommend installing Windows 11 on a PC that doesn't meet the requirements, because such a PC is not guaranteed to receive security updates.

Can TPM 2.0 be downloaded?

No. TPM is a hardware-based security component, not software. On PCs that support it, you only need to enable it in the UEFI settings under a name such as Intel PTT or AMD fTPM.

Can I enable TPM 2.0 without entering the BIOS?

The TPM setting lives in the UEFI firmware, so you still have to get in there. However, you don't need to press a special key at startup: Windows can take you to the firmware through Recovery > Advanced startup.

My processor doesn't support Windows 11. What can I do?

There is no official way to change that. The safe options are Windows 10 ESU until October 12, 2027, ChromeOS Flex if your needs are web-based, or replacing the device.

Does Secure Boot have to be turned on to upgrade to Windows 11?

It doesn't have to be on. For an upgrade from Windows 10, Microsoft requires the PC to support Secure Boot with UEFI mode active, but it still recommends turning Secure Boot on.

Next Steps

Once TPM or UEFI is enabled, follow the Windows 10 to Windows 11 upgrade requirements and official upgrade steps. If your PC still doesn't qualify, enroll in ESU using the guide on the end of Windows 10 support. All our Windows guides are in the Windows & PC Update Center.