How to Enable TPM 2.0 and Secure Boot for Windows 11 Installation

Microsoft requires TPM 2.0 and Secure Boot to be enabled for installing Windows 11. If you're seeing the “This PC can't run Windows 11” message, this guide will help you enable these settings step-by-step from your BIOS or UEFI firmware.

🔐 What is TPM 2.0 and Why Is It Required?

TPM (Trusted Platform Module) is a hardware-based security chip that ensures device integrity. Windows 11 requires TPM 2.0 to improve security, especially for features like BitLocker, Windows Hello, and Secure Boot.

🛡️ What is Secure Boot?

Secure Boot ensures that your system boots only with software trusted by the PC manufacturer. It protects against malware during startup.

🖥️ How to Check if TPM 2.0 and Secure Boot are Enabled

1. Press Windows + R, type tpm.msc and hit Enter.
2. Look for “TPM Manufacturer Version: 2.0”.
3. To check Secure Boot, run msinfo32 and look for “Secure Boot State”.

🔧 How to Enable TPM 2.0 in BIOS/UEFI

1. Restart your PC and press Del / F2 / F10 to enter BIOS/UEFI (varies by brand).
2. Go to the Security or Advanced tab.
3. Look for TPM Device, Intel Platform Trust Technology (PTT), or AMD fTPM.
4. Set it to Enabled.

🔐 How to Enable Secure Boot

1. While in BIOS/UEFI, go to the Boot tab.
2. Set Boot Mode to UEFI (not Legacy).
3. Enable Secure Boot.
4. Save and Exit.

💻 Brands & BIOS Key List

• ASUS: F2 or Del
• HP: Esc or F10
• Dell: F2
• Lenovo: F1 or F2
• Acer: F2 or Del

✅ Final Step: Recheck Compatibility

Once enabled, re-run the PC Health Check or install Windows 11. If both TPM 2.0 and Secure Boot are active, you’ll pass the compatibility check.

📌 Related Posts:

• How to Fix Slow Internet on Windows
• Visit Homepage for More Fixes

For more tutorials, keep following FixTechTips and subscribe for the latest fixes and how-to guides!