With the recent launch of Windows 11, many people have been wondering how to install it, particularly if they have laptops with TPM chips and/or Secure Boot. This guide will show you how you can install Windows 11 without using either Secure Boot or TPM. This will allow you to run Windows 11 on any computer that does not support secure boot and TPM 2.0 features in their BIOS.
What is secure boot and TPM
Starting with Windows 8, Microsoft implemented a new feature known as secure boot. This feature is intended to protect your PC from malicious software by preventing unauthorized operating systems or malware from loading before Windows starts. A side effect of secure boot is that it may prevent you from installing other operating systems such as Linux. There’s one way around it: If you’re buying a computer with secure boot enabled, you can purchase a separate security certificate that will enable your device for other operating systems.
This security certificate is called a trusted platform module (TPM), and it’s specifically designed for devices like computers. You can buy a computer with Windows 8 or later that comes with a TPM already installed, or you can buy one separately and then insert it into your device. Once your computer has a TPM, the secure boot can be disabled so you can install other operating systems such as Linux. Here’s how
If you’re buying a computer with Windows 8 or later, it already has a TPM built-in. However, if you’re building your own PC from scratch, you’ll need to buy a separate security certificate. Once you have one in hand, here’s how to disable secure boot on your device:
1. Open an elevated command prompt
2. In that window, type bcdedit /set testsigning off
3. Reboot
4. You’re done
Steps to follow to Upgrade
There are a couple of ways to go about getting Windows 11 on your system. If you’re using a new motherboard, there’s nothing to worry about. These boards ship with Secure Boot disabled by default, allowing users to load unsigned drivers. That said, if you’re installing onto an older or more legacy board with a BIOS from around 2009 or earlier (or even newer ones that have been flashed), chances are your board will have Secure Boot enabled. To successfully get Windows 11 on these systems, we need to take extra steps for our systems to run Microsoft-signed code before we can do anything else.
Create Windows 11 ISO Bootable Device
- Download a Windows 10 ISO from Microsoft’s Download site and extract it.
- Rename it as Windows 11 upgrade (or the name you wish to name the folder).
- The next step is to download Windows 11 ISO from Microsoft’s Download site.
- Mount the Windows 11 ISO once you have downloaded it.
- Go to the sources folder in Windows 11 ISO file, copy install.wim/install.esd file.
- Paste the copied install.wim/install.esd file in the sources folder of the Windows 11 upgrade folder in step 2.
- Replace the install.wim install.esd file Windows 11 upgrade folder with the one you copied from Windows 11 ISO file.
Upgrading to windows 11
- Open the Windows 11 upgrade folder.
- Double-click the Setup.exe to start the installation of Windows 11.
- Follow the instructions displayed in the windows 11 installation window.
Note: Make sure you select the version and the architecture of the current windows installed. For example, if you have installed windows 10 pro you should also use Windows 11 Pro ISO.
Use of UEFI’s so-called secure boot feature is optional, but if you choose to use secure boot, it’s not that hard. You have some options regarding how secure your system will be, which affect what you need to know about implementing secure boot on your computer.
You can set the system up only to run software with a digital signature issued by a company of your choosing. Doing so is relatively easy, but it does involve learning about secure boot. As long as you’re comfortable with these changes, though, implementing secure boot on your computer is not that hard.