TPM & Secure Boot Issues (Windows 11 Fix Guide)

Getting blocked from installing or upgrading to Windows 11? You’re not alone.

Most “Windows 11 compatibility” errors happen because TPM or Secure Boot is disabled in BIOS — even when your hardware fully supports it.

What TPM 2.0 Is (And Why Windows 11 Cares)

TPM (Trusted Platform Module) is a security feature that stores encryption keys and helps protect your system at boot.

• Intel: TPM is usually called Intel PTT
• AMD: TPM is usually called fTPM

What Secure Boot Is (UEFI vs Legacy)

Secure Boot ensures only trusted software loads when your PC starts.

Windows 11 typically requires:

• UEFI Mode (not Legacy/CSM)
• Secure Boot enabled

Step 1: Check TPM Status in Windows

1. Press Windows + R
2. Type tpm.msc and hit Enter
3. Look for “TPM is ready for use” and Specification Version: 2.0

Step 2: Enable TPM in BIOS (Intel / AMD)

Intel (PTT)

• Enter BIOS (usually DEL or F2)
• Go to Advanced or Security
• Enable Intel Platform Trust Technology (PTT)
• Save & Exit

AMD (fTPM)

• Enter BIOS
• Go to Advanced → CPU Configuration (wording varies)
• Enable fTPM / AMD fTPM
• Save & Exit

Step 3: Enable Secure Boot (Correct Order)

1. Enter BIOS
2. Set Boot Mode to UEFI
3. Disable CSM / Legacy Boot
4. Enable Secure Boot
5. If prompted, choose Standard / Windows UEFI
6. Save & Exit

Common Windows 11 Errors This Fixes

• “This PC can’t run Windows 11”
• “TPM 2.0 must be supported”
• Secure Boot unsupported
• Windows 11 install loops / update failures

When You Might Need a BIOS Update

If TPM or Secure Boot options are missing completely, your motherboard may need a BIOS update to expose the settings.

VÖXBURG Pro Tip

Most Windows 11 “hardware requirements” issues are software locks. Don’t replace parts until BIOS settings are verified.

Need Backup?