Disabling TPM and Secure Boot not only facilitates the installation of Windows 11 on unsupported hardware configurations but also expands the operating system’s compatibility across various types of computers.
How to disable TPM and Secure Boot when creating USB
Step 1: Pypass check TPM 2.0
- Dowload file ISO Windows 11 from Microsoft.
- Dowload: Rufus v3.18 | Download Link | Download Link (Portable)
After Dowload Rufus, right click run as administrator and Next until Finish. Open Rufus and connect USB, start creating USB to install Windows 11.
Rufus will automatic detect the USB device. If you have multiple external storage device connect, you can select your USB device from the Device section.
Click SELECT to and locate the downloaded Windows 11 ISO file.
Next, click on the dropdown menu and select “Extended Windows 11 Installation (no TPM/no Secure 800t/8G8- RAM)”.
Under Partition scheme select GPT and Target system select UEFI (non-CSM).
After complete the above steps, click Start to create a USB to install Windows 11 for unsupported models. (Skip the steps to check TPM, Secure boot, and RAM, CPU).
Click Yes to confirm creating a Windows 11 install USB when ask.
Wait for Rufus to copy the file and create a boot, after complete it will display the message “READY” as shown below. So you already have a USB to install windows 11
Step 2: Bypass Secure Boot
- Restart the computer and start boot option mode
- Press tab and use the arrow keys to find Security or Boot and find Secure Boot
- Turn off Secure boot, set it to Disabled.
- Save and restart the device.
There are many model that have to turn off Secure Boot and then switch from UEFI to Legacy. But there are some lines that these 2 feature alway go together, turn on Legacy boot then Secure Boot will turn off by itself and if using UEFI Boot Secure Boot will always be on and you can’t turn it off. Depend on the type of device you use, there are different ways to do it.
Step 3: Install Windows 11
Restart the computer and start boot option mode to install windows. With the USB Bypass TPM and secure boot as well as skipping the RAM configuration check step, your CPU can completely install Windows 11 on your computer. You can refer to the article for how to install windows 11 create boot USB with Rufus
In ISO Windows 11 there is a appraiserres.dll file to check TPM 2.0, Secure Boot, etc. You just need to delete this file so that you can install win 11 on machines that are not configured enough or do not support. You can refer to the article how to delete Appraiserres.dll in File ISO Windows 11.