Windows 11 System Requirements: TPM 2.0, Secure Boot and the Processor — What They Are and Why Your PC "Doesn't Qualify"

Many computer owners who try to move to Windows 11 are told their PC doesn't meet the requirements — even when the computer is powerful and handles games and work perfectly well. That's because for Windows 11, Microsoft set requirements not just for performance but, for the first time, for security features too. Let's look at what these requirements mean, why they were introduced, and what options owners of "unsuitable" computers have.

The official requirements

• Processor: 64-bit, 1 GHz or faster with at least two cores, from the official compatibility list — typically 8th-generation Intel and newer, and AMD Ryzen 2000 and newer (with some exceptions).
• RAM: at least 4 GB.
• Storage: at least 64 GB.
• Firmware: UEFI with Secure Boot support.
• TPM: a Trusted Platform Module, version 2.0.
• Graphics: DirectX 12 compatible with a WDDM 2.0 driver.
• Display: 9 inches or larger at 720p or higher.

In practice almost any computer from recent years meets the first few points. Problems most often arise with the TPM, Secure Boot and the processor list.

What TPM 2.0 is

A TPM, or Trusted Platform Module, is a dedicated chip or processor feature that securely stores encryption keys, verifies the integrity of the boot process and protects credentials. It's used by BitLocker drive encryption, Windows Hello and protection against some kinds of malware that embed themselves at boot level.

An important point: many computers have a TPM but have it switched off. In modern Intel processors it's called PTT, in AMD processors fTPM, and it's sometimes disabled by default in the BIOS, especially on motherboards for self-built PCs. The compatibility check then reports no TPM, even though simply enabling it in the settings would do.

What Secure Boot and UEFI are

UEFI is the modern replacement for the old BIOS — the program that starts the computer. Secure Boot is a UEFI feature that only allows signed, verified boot loaders to run, protecting against malware that starts before Windows. For it to work, the drive must use the GPT partition format rather than the old MBR. Many Windows 10 computers run in legacy BIOS compatibility mode (Legacy/CSM) on an MBR drive — which is why the check fails. Converting to UEFI and GPT is possible but requires care not to lose the system or data.

Why older processors aren't on the list

The list of compatible processors is the most controversial requirement. Microsoft justifies it on grounds of reliability, the driver model and hardware security features found in newer processors. So even a powerful computer with a 7th-generation Intel or first-generation AMD Ryzen processor isn't officially supported, though it could technically run Windows 11.

How to check your computer

The simplest way is Microsoft's official PC Health Check app: it shows exactly which requirement isn't met. If the problem is the TPM or Secure Boot, there's a good chance it can be solved in the settings. If it's the processor, upgrading will mean replacing the processor and most likely the motherboard.

Options for "unsuitable" computers

Enable what's already there

If the computer is fairly new and fails the check because the TPM is off or it's in Legacy mode, a technician will enable the necessary features in the BIOS, convert the drive to GPT without losing data if needed, and update the BIOS. The upgrade to Windows 11 then goes through normally.

Stay on Windows 10

Windows 10 keeps working, but mainstream support with security updates for ordinary users ended in October 2025. An extended security updates programme is available for some users and organisations. Running an internet-connected system without security updates is risky, especially if the computer is used for banking or work.

Upgrade

For a desktop, a sensible option is replacing the processor, motherboard and possibly memory while keeping the case, power supply, graphics card and drives. That's often cheaper than a new computer.

Unofficial installation

There are ways to install Windows 11 bypassing the check. But Microsoft warns that such computers may not receive updates and are considered unsupported. For a work computer where stability and security matter, we don't recommend this option.

What our technician does

1. Checks the computer's compatibility and identifies which requirement isn't met.
2. Enables the TPM (PTT/fTPM) and Secure Boot and updates the BIOS.
3. Converts the drive from MBR to GPT while keeping your data.
4. Carries out the upgrade to Windows 11 or a clean install with data transfer.
5. Selects and carries out an upgrade if the processor isn't supported.

A real example

The owner of a small office in Saburtalo was refused when he tried to upgrade four computers to Windows 11 and was about to buy new ones. Our check showed three of them were built on 10th-generation Intel processors: PTT was disabled in the BIOS, and the system was on an MBR drive in compatibility mode. We updated the BIOS, converted the drives to GPT without losing data, enabled PTT and Secure Boot, and upgraded all three to Windows 11. The fourth, with a 6th-generation processor, genuinely didn't qualify; for it we chose a motherboard and processor upgrade that kept the rest of the components.

Call a technician

If your computer "doesn't qualify" for Windows 11 or you want to move to it safely, we'll come to any district of Tbilisi around the clock. Learn more on our Windows installation, upgrades and computer setup pages.